Re: [sqlmap-users] SQLmap --os-shell BUG

2015-07-04 Thread Danux
That was fast! Thanks Miroslav. Great tool! On Sat, Jul 4, 2015 at 4:47 PM, Miroslav Stampar wrote: > Thank you for your report. Fixed with the latest revision ( > https://github.com/sqlmapproject/sqlmap/issues/1290) > > Bye > > On Sun, Jul 5, 2015 at 1:16 AM, Danux wrote: > >> With yours is no

Re: [sqlmap-users] SQLmap --os-shell BUG

2015-07-04 Thread Miroslav Stampar
Thank you for your report. Fixed with the latest revision ( https://github.com/sqlmapproject/sqlmap/issues/1290) Bye On Sun, Jul 5, 2015 at 1:16 AM, Danux wrote: > With yours is not throwing the error, you can reproduce my case with the > owasppractice examples, I am attaching the source code h

Re: [sqlmap-users] SQLmap --os-shell BUG

2015-07-04 Thread Miroslav Stampar
Something is really wrong happening here. One user is having the identical problem like you (AttributeError: 'NoneType' object has no attribute 'replace') and I am not able to reproduce. Can you please rerun your sqlmap version with " http://testphp.vulnweb.com/artists.php?artist=1"; and tell me i

Re: [sqlmap-users] SQLmap --os-shell BUG

2015-07-04 Thread Danux
Just clone git and got 1.0-dev-166dc98 version but got a unhandled exception error: ./sqlmap.py -u http://OwaspPractice/injection/lessons/lesson03/index.php?code=N --os-shell --prefix "\")" --flush-session -v3 /sqlmap'. If the exception persists, please open a new issue at ' https://github.com/s

Re: [sqlmap-users] SQLmap --os-shell BUG

2015-07-04 Thread Miroslav Stampar
I believe that you are using an old revision. For a long time there is at least a git revision or a pseudo "non-git" number appearing when "sqlmap --version" is being used. Please update to the latest revision from the official github repository and rerun the sqlmap. Bye On Sun, Jul 5, 2015 at 1

Re: [sqlmap-users] SQLmap --os-shell BUG

2015-07-04 Thread Danux
Thanks sqlmap --version sqlmap/1.0-dev In the meantime I will patch procs/mysql/write_file_limit.sql On Sat, Jul 4, 2015 at 3:40 PM, Miroslav Stampar wrote: > Which revision/version of sqlmap do you use? There has been a related > patch a month ago. Will check tomorrow. > > Bye > > On Sun,

Re: [sqlmap-users] SQLmap --os-shell BUG

2015-07-04 Thread Miroslav Stampar
Which revision/version of sqlmap do you use? There has been a related patch a month ago. Will check tomorrow. Bye On Sun, Jul 5, 2015 at 12:33 AM, Danux wrote: > Hello list, there is an issue with sqlmap when using the --os-shell option > in version sqlmap/1.0-dev and MySQL: 5.5.35-0+wheezy1 (D

[sqlmap-users] SQLmap --os-shell BUG

2015-07-04 Thread Danux
Hello list, there is an issue with sqlmap when using the --os-shell option in version sqlmap/1.0-dev and MySQL: 5.5.35-0+wheezy1 (Debian) Description: A specific PAYLOAD (see below) used to upload a web shell will create an empty file e.g. tmpbezff.php, this will cause that every subsequent PAYLO