[Auto-Generated] Bug Report - "

[1d3df9903ad]

User description

What steps will reproduce the problem? 1. 2. 3.

What is the expected output? What do you see instead?

What operating system are you using?

Please provide any additional information below:

Version Information

  Python version: 2.7.4 (default, Apr 19 2013, 18:32:33) [GCC 4.7.3]
  GTK version: 2.24.17
  PyGTK version: 2.24.0
  w3af version:
    w3af - Web Application Attack and Audit Framework
    Version: 1.6
    Revision: 3ef1aa4e9e - 25 سبت 2013 13:10
    Author: Andres Riancho and the w3af team.

Traceback

Traceback (most recent call last):
  File "/home/user/AppScan/w3af/core/ui/gui/tabs/exploit/exploit_all.py", line 167, in _launch_exploit_all
    exploit.exploit()
  File "/home/user/AppScan/w3af/core/controllers/plugins/attack_plugin.py", line 197, in exploit
    s = self._generate_shell(vuln)
  File "/home/user/AppScan/w3af/plugins/attack/sqlmap.py", line 76, in _generate_shell
    if self._verify_vuln(vuln_obj):
  File "/home/user/AppScan/w3af/plugins/attack/sqlmap.py", line 105, in _verify_vuln
    if sqlmap.is_vulnerable():
  File "/home/user/AppScan/w3af/plugins/attack/db/sqlmap_wrapper.py", line 102, in is_vulnerable
    raise NotImplementedError(fmt % (full_command, stdout))
NotImplementedError: Unexpected answer found in sqlmap output for command "python sqlmap.py --batch --disable-coloring --proxy=http://127.0.0.1:44452/ --batch --url=http://domain/stat/login_sub.asp --data=username=&cook=on&login=%5Cxca%5Cxd3%5Cxcc%5Cxed%5Cxe1%20%5Cxc7%5Cxe1%5Cxcf%5Cxce%5Cxe6%5Cxe1&password=FrAmE30.": "
    sqlmap/1.0-dev-3ef1aa4 - automatic SQL injection and database takeover tool
    http://sqlmap.org

[!] legal disclaimer: Usage of sqlmap for attacking targets without prior mutual consent is illegal. It is the end user's responsibility to obey all applicable local, state and federal laws. Developers assume no liability and are not responsible for any misuse or damage caused by this program

[*] starting at 15:53:14

[?1049h(B[?7h[?1049l
[?1l>
[15:53:15] [INFO] testing connection to the target url

[15:53:16] [INFO] heuristics detected web page charset 'ascii'

sqlmap got a 302 redirect to 'http://domain:80/stat/default.asp'. Do you want to follow? [Y/n] Y

redirect is a result of a POST request. Do you want to resend original POST data to a new location? [Y/n] Y

[15:53:19] [INFO] testing if the url is stable. This can take a couple of seconds

[15:53:22] [WARNING] POST parameter 'username' does not appear dynamic

[15:53:22] [WARNING] reflective value(s) found and filtering out

[15:53:22] [INFO] heuristic (basic) test shows that POST parameter 'username' might be injectable (possible DBMS: 'Microsoft SQL Server')

[15:53:22] [INFO] testing for SQL injection on POST parameter 'username'

heuristic (parsing) test showed that the back-end DBMS could be 'Microsoft SQL Server'. Do you want to skip test payloads specific for other DBMSes? [Y/n] Y

do you want to include all tests for 'Microsoft SQL Server' extending provided level (1) and risk (1)? [Y/n] Y

[15:53:23] [INFO] testing 'AND boolean-based blind - WHERE or HAVING clause'

[15:53:40] [CRITICAL] infinite redirect loop detected (http://domain:80/). please check all provided parameters and/or provide missing ones.

[15:53:40] [WARNING] HTTP error codes detected during run:
500 (Internal Server Error) - 1 times

[*] shutting down at 15:53:40

"

Enabled Plugins

[andresriancho]

Duplicates #489