sqlmap version: 1.0-dev-87db5d0
Python version: 2.6.5
Operating system: posix
Command line: ./sqlmap.py -u *********************************************
--data=zipcode=1 -p zipcode --tmp-path=C:/Windows/Temp/ --os-bof
Technique: STACKED
Back-end DBMS: Microsoft SQL Server (fingerprinted)
Traceback (most recent call last):
File "./sqlmap.py", line 87, in main
start()
File "/pentest/database/sqlmap/lib/controller/controller.py", line 572,
in start
action()
File "/pentest/database/sqlmap/lib/controller/action.py", line 169, in
action
conf.dbmsHandler.osBof()
File "/pentest/database/sqlmap/plugins/generic/takeover.py", line 353, in
osBof
self.bof()
File "/pentest/database/sqlmap/lib/takeover/metasploit.py", line 656, in
bof
debugMsg += "with return code %s" %
self._controlMsfCmd(self._msfCliProc, self.spHeapOverflow)
File "/pentest/database/sqlmap/lib/takeover/metasploit.py", line 508, in
_controlMsfCmd
func()
File "/pentest/database/sqlmap/plugins/dbms/mssqlserver/takeover.py",
line 138, in spHeapOverflow
""" % (addrs[0], addrs[1], addrs[2], addrs[3], addrs[4], addrs[5],
addrs[6], addrs[7], shellcodeChar)
IndexError: string index out of range
[*] shutting down at 14:29:28
Exception AttributeError: "'NoneType' object has no attribute 'error'" in
<bound method Popen.__del__ of <lib.core.subprocessng.Popen object at
0x8ab0d4c>> ignored
--
joyal8x
------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb
_______________________________________________
sqlmap-users mailing list
sqlmap-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/sqlmap-users