search

kurobeats / fimap

fimap is a little python tool which can find, prepare, audit, exploit and even google automatically for local and remote file inclusion bugs in webapps.
GNU General Public License v2.0
521 stars 99 forks source link

Bug #2 #21

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 

On which URL this error occures? (Important!)

Which version of fimap you are using? (You can see that in the very first
line)

On what operating system?
Debian/Ubuntu

Please provide any additional information below.

i found another one jejeje, when you fixed tell me what should i do if i 
need to 
download fimap again

***********************
[OUT] Possible file inclusion found! -
> 'http://www.kangaroophotos.com/i.php?
p=EWqUBdN4' with Parameter 'p'.
[OUT] Identifing Vulnerability 'http://www.kangaroophotos.com/i.php?
p=_booking/sport.php' with Param 'p'...
[WARN] Failed to do request to (http://www.kangaroophotos.com/i.php?
p=bbCaoVIp)
[WARN] <urlopen error timed out>

========= CONGRATULATIONS! =========
You have just found a bug!
If you are cool, send the following stacktrace to the bugtracker on 
http://fimap.googlecode.com/
Push enter to see the stacktrace...
cut here %<--------------------------------------------------------------
Traceback (most recent call last):
  File "./fimap.py", line 258, in ?
    g.startGoogleScan()
  File "/tmp/fimap_alpha_v06.1/googleScan.py", line 76, in startGoogleScan
    single.scan()
  File "/tmp/fimap_alpha_v06.1/singleScan.py", line 51, in scan
    res = t.testTargetVuln()
  File "/tmp/fimap_alpha_v06.1/targetScanner.py", line 83, in 
testTargetVuln
    rep = self.identifyVuln(self.Target_URL, self.params, k)
  File "/tmp/fimap_alpha_v06.1/targetScanner.py", line 113, in identifyVuln
    m = RE_SUCCESS_MSG.search(code)
TypeError: expected string or buffer

Original issue reported on code.google.com by spe...@gmail.com on 17 Dec 2009 at 5:18

GoogleCodeExporter commented 9 years ago

Original comment by fimap....@gmail.com on 19 Dec 2009 at 8:42

GoogleCodeExporter commented 9 years ago 
Already fixed in 0.61 (if not then already fixed in SVN) :)

-imax.

Original comment by fimap....@gmail.com on 19 Dec 2009 at 11:07