Hi.
Thank you for your report and find it fixed with the latest commit (
https://github.com/sqlmapproject/sqlmap/issues/101)
Kind regards,
Miroslav Stampar
On Tue, Jul 17, 2012 at 12:00 AM, M Zverev <roberthacks...@gmail.com> wrote:
> [*] starting at 01:59:28
>
> [01:59:28] [INFO] parsing multiple targets list from
> 'D:/Soft/sqlmap-dev/inurl article_id=_FILTERED_U.txt'
> [01:59:28] [INFO] sqlmap got a total of 147 targets
> [01:59:28] [ERROR] invalid target url, skipping to the next url
> [01:59:28] [INFO] url 1:
> GET http://www.mamochka.kz/article.php?article_id=429
> do you want to test this url? [Y/n/q]
> > Y
> [01:59:28] [INFO] testing url
> http://www.mamochka.kz/article.php?article_id=429
> [01:59:28] [INFO] using
> 'd:\Soft\sqlmap-dev\output\results-07172012_0159am.csv' as results file
> [01:59:28] [INFO] testing connection to the target url
> [01:59:29] [INFO] testing NULL connection to the target url
> [01:59:29] [INFO] testing if the url is stable, wait a few seconds
> [01:59:31] [WARNING] url is not stable, sqlmap will base the page
> comparison on a sequence matcher. If no dynamic nor in
> jectable parameters are detected, or in case of junk results, refer to
> user's manual paragraph 'Page comparison' and pro
> vide a string or regular expression to match on
> [01:59:31] [INFO] how do you want to proceed?
> [(C)ontinue/(s)tring/(r)egex/(q)uit] C
> [01:59:31] [INFO] testing if GET parameter 'article_id' is dynamic
> [01:59:31] [INFO] confirming that GET parameter 'article_id' is dynamic
> [01:59:31] [INFO] GET parameter 'article_id' is dynamic
>
> [01:59:31] [CRITICAL] unhandled exception in sqlmap/1.0-dev-c9bbd14,
> retry your run with the latest development version
> from the GitHub repository. If the exception persists, please send by
> e-mail to 'sqlmap-users@lists.sourceforge.net' or
> open a new issue at 'https://github.com/sqlmapproject/sqlmap/issues/new'
> with the following text and any information req
> uired to reproduce the bug. The developers will try to reproduce the
> bug, fix it accordingly and get back to you.
> sqlmap version: 1.0-dev-c9bbd14
> Python version: 2.7.3
> Operating system: nt
> Command line: d:\Soft\sqlmap-dev\sqlmap.py -m D:/Soft/sqlmap-dev/inurl
> article_id=_FILTERED_U.txt -o --threads=5 --curre
> nt-user --current-db --dbs --tables -v 0 --batch
> Technique: None
> Back-end DBMS: None (identified)
> Traceback (most recent call last):
> File "d:\Soft\sqlmap-dev\_sqlmap.py", line 79, in main
> start()
> File "d:\Soft\sqlmap-dev\lib\controller\controller.py", line 458, in
> start
> check = heuristicCheckSqlInjection(place, parameter)
> File "d:\Soft\sqlmap-dev\lib\controller\checks.py", line 625, in
> heuristicCheckSqlInjection
> page, _ = Request.queryPage(payload, place, content=True,
> raise404=False)
> File "d:\Soft\sqlmap-dev\lib\request\connect.py", line 719, in queryPage
> page, headers, code = Connect.getPage(url=uri, get=get, post=post,
> cookie=cookie, ua=ua, referer=referer, host=host,
> silent=silent, method=method, auxHeaders=auxHeaders,
> response=response, raise404=raise404, ignoreTimeout=timeBasedCompa
> re)
> File "d:\Soft\sqlmap-dev\lib\request\connect.py", line 313, in getPage
> conn = urllib2.urlopen(req)
> File "C:\Python27\lib\urllib2.py", line 126, in urlopen
> return _opener.open(url, data, timeout)
> File "C:\Python27\lib\urllib2.py", line 400, in open
> response = self._open(req, data)
> File "C:\Python27\lib\urllib2.py", line 418, in _open
> '_open', req)
> File "C:\Python27\lib\urllib2.py", line 378, in _call_chain
> result = func(*args)
> File "d:\Soft\sqlmap-dev\thirdparty\keepalive\keepalive.py", line
> 210, in http_open
> return self.do_open(HTTPConnection, req)
> File "d:\Soft\sqlmap-dev\thirdparty\keepalive\keepalive.py", line
> 207, in do_open
> return self.parent.error('http', req, r, r.status, r.reason, r.msg)
> File "C:\Python27\lib\urllib2.py", line 438, in error
> result = self._call_chain(*args)
> File "C:\Python27\lib\urllib2.py", line 378, in _call_chain
> result = func(*args)
> File "d:\Soft\sqlmap-dev\lib\request\redirecthandler.py", line 78, in
> http_error_302
> if not urlparse.urlsplit(redurl).netloc:
> File "C:\Python27\lib\urlparse.py", line 174, in urlsplit
> i = url.find(':')
> AttributeError: 'NoneType' object has no attribute 'find'
>
> [*] shutting down at 01:59:31
>
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> sqlmap-users mailing list
> sqlmap-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
--
Miroslav Stampar
http://about.me/stamparm
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and
threat landscape has changed and how IT managers can respond. Discussions
will include endpoint security, mobile security and the latest in malware
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
