sqlmapproject / sqlmap

Automatic SQL injection and database takeover tool
http://sqlmap.org
Other
31.99k stars 5.68k forks source link

Unhandled exception (#22b07ef7) #1534

Closed sqlmapreporter closed 8 years ago

sqlmapreporter commented 8 years ago
sqlmap version: 1.0-dev-nongit-20151030
Python version: 2.7.9
Operating system: posix
Command line: /usr/bin/sqlmap -u ****************************************************** --ignore-proxy --keep-alive --alert=ALERT --purge-output --dbs
Technique: BOOLEAN
Back-end DBMS: MySQL (fingerprinted)
Traceback (most recent call last):
  File "sqlmap", line 100, in main
    start()
  File "share/sqlmap/lib/controller/controller.py", line 521, in start
    injection = checkSqlInjection(place, parameter, value)
  File "share/sqlmap/lib/controller/checks.py", line 680, in checkSqlInjection
    checkSuhosinPatch(injection)
  File "share/sqlmap/lib/controller/checks.py", line 792, in checkSuhosinPatch
    if not checkBooleanExpression("%d=%s%d" % (randInt, ' ' * SUHOSIN_MAX_VALUE_LENGTH, randInt)):
  File "share/sqlmap/lib/request/inject.py", line 484, in checkBooleanExpression
    return getValue(expression, expected=EXPECTED.BOOL, charsetType=CHARSET_TYPE.BINARY, suppressOutput=True, expectingNone=expectingNone)
  File "share/sqlmap/lib/request/inject.py", line 421, in getValue
    value = _goBooleanProxy(booleanExpression)
  File "share/sqlmap/lib/request/inject.py", line 307, in _goBooleanProxy
    output = hashDBRetrieve(expression, checkConf=True)
  File "share/sqlmap/lib/core/common.py", line 3807, in hashDBRetrieve
    retVal = conf.hashDB.retrieve(_, unserialize) if kb.resumeValues and not (checkConf and any((conf.flushSession, conf.freshQueries))) else None
  File "share/sqlmap/lib/utils/hashdb.py", line 77, in retrieve
    for row in self.cursor.execute("SELECT value FROM storage WHERE id=?", (hash_,)):
OperationalError: no such table: storage
stamparm commented 8 years ago

While cursor is being made, table storage is created if missing. So, there is no way that this could happen IRL.

Also, line for row in self.cursor.execute("SELECT value FROM storage WHERE id=?", (hash_,)): is currently in line 79, not 77 as in report