-
-
Notifications
You must be signed in to change notification settings - Fork 6k
Closed
Milestone
Description
Running version: 1.9.8#stable
Python version: 3.12.11
Operating system: Linux-4.14.180-perf-g5d6f377-aarch64-with-libc
Command line: sqlmap.py -u ************************************ --form --os-shell
Technique: UNION
Back-end DBMS: None
Traceback (most recent call last):
File "sqlmap.py", line 222, in main
start()
File "lib/core/decorators.py", line 84, in _
result = f(*args, **kwargs)
^^^^^^^^^^^^^^^^^^
File "lib/controller/controller.py", line 607, in start
injection = checkSqlInjection(place, parameter, value)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "lib/controller/checks.py", line 713, in checkSqlInjection
reqPayload, vector = unionTest(comment, place, parameter, value, prefix, suffix)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "lib/core/decorators.py", line 84, in _
result = f(*args, **kwargs)
^^^^^^^^^^^^^^^^^^
File "lib/techniques/union/test.py", line 392, in unionTest
validPayload, vector = _unionTestByCharBruteforce(comment, place, parameter, value, prefix, suffix)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "lib/techniques/union/test.py", line 326, in _unionTestByCharBruteforce
count = _findUnionCharCount(comment, place, parameter, value, prefix, suffix, where)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "lib/techniques/union/test.py", line 106, in _findUnionCharCount
found = _orderByTechnique(lowerCount, upperCount) if conf.uCols else _orderByTechnique()
^^^^^^^^^^^^^^^^^^^
File "lib/core/decorators.py", line 84, in _
result = f(*args, **kwargs)
^^^^^^^^^^^^^^^^^^
File "lib/techniques/union/test.py", line 70, in _orderByTechnique
if _orderByTest(1 if lowerCount is None else lowerCount) and not _orderByTest(randomInt() if upperCount is None else upperCount + 1):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "lib/techniques/union/test.py", line 67, in _orderByTest
page, headers, code = Request.queryPage(payload, place=place, content=True, raise404=False)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "lib/core/decorators.py", line 84, in _
result = f(*args, **kwargs)
^^^^^^^^^^^^^^^^^^
File "lib/request/connect.py", line 1246, in queryPage
page, headers, code = Connect.getPage(url=conf.csrfUrl or conf.url, post=conf.csrfData or (conf.data if conf.csrfUrl == conf.url and (conf.csrfMethod or "").upper() == HTTPMETHOD.POST else None), method=conf.csrfMethod or (conf.method if conf.csrfUrl == conf.url else None), cookie=conf.parameters.get(PLACE.COOKIE), direct=True, silent=True, ua=conf.parameters.get(PLACE.USER_AGENT), referer=conf.parameters.get(PLACE.REFERER), host=conf.parameters.get(PLACE.HOST))
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "lib/request/connect.py", line 664, in getPage
conn = _urllib.request.urlopen(req)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.12/urllib/request.py", line 215, in urlopen
return opener.open(url, data, timeout)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.12/urllib/request.py", line 515, in open
response = self._open(req, data)
^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.12/urllib/request.py", line 532, in _open
result = self._call_chain(self.handle_open, protocol, protocol +
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.12/urllib/request.py", line 492, in _call_chain
result = func(*args)
^^^^^^^^^^^
File "lib/request/httpshandler.py", line 139, in https_open
return self.do_open(HTTPSConnection if ssl else _http_client.HTTPSConnection, req)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.12/urllib/request.py", line 1344, in do_open
h.request(req.get_method(), req.selector, req.data, headers,
File "/usr/lib/python3.12/http/client.py", line 1338, in request
self._send_request(method, url, body, headers, encode_chunked)
File "/usr/lib/python3.12/http/client.py", line 1384, in _send_request
self.endheaders(body, encode_chunked=encode_chunked)
File "/usr/lib/python3.12/http/client.py", line 1333, in endheaders
self._send_output(message_body, encode_chunked=encode_chunked)
File "lib/core/patch.py", line 67, in _send_output
self.__send_output(*args, **kwargs)
File "/usr/lib/python3.12/http/client.py", line 1093, in _send_output
self.send(msg)
File "/usr/lib/python3.12/http/client.py", line 1037, in send
self.connect()
File "lib/request/httpshandler.py", line 86, in connect
result = _contexts[protocol].wrap_socket(sock, do_handshake_on_connect=True, server_hostname=self.host if re.search(r"\A[\d.]+\Z", self.host or "") is None else None)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.12/site-packages/pip/_vendor/truststore/_api.py", line 122, in wrap_socket
_verify_peercerts(ssl_sock, server_hostname=server_hostname)
File "/usr/lib/python3.12/site-packages/pip/_vendor/truststore/_api.py", line 330, in _verify_peercerts
cert_bytes = _get_unverified_chain_bytes(sslobj)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3.12/site-packages/pip/_vendor/truststore/_api.py", line 312, in _get_unverified_chain_bytes
unverified_chain = sslobj.get_unverified_chain() or () # type: ignore[attr-defined]
^^^^^^^^^^^^^^^^^^^^^^^^^^^
AttributeError: 'NoneType' object has no attribute 'get_unverified_chain'