Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

question on such an answer from the script #21

Open
shrv opened this issue Feb 27, 2018 · 5 comments
Open

question on such an answer from the script #21

shrv opened this issue Feb 27, 2018 · 5 comments

Comments

@shrv
Copy link

shrv commented Feb 27, 2018

on one resource while testing as "black box", i found response for requests

https://xxx.example.com/revision.txt
https://xxx.example.com/revision.inc

I decided to try to pull out the repository by your tool, which already many times helped out on CTF quests.
And received such an answer:

[!] Not found for https://xxx.example.com///.svn/all-wcprops => /.svn/all-wcprops: 404 Not Found
[!] Not found for https://xxx.example.com///.svn/entries => /.svn/entries: 404 Not Found
[!] Not found for https://xxx.example.com///.svn/format => /.svn/format: 404 Not Found
[!] Not found for https://xxx.example.com///.svn/wc.db => /.svn/wc.db: 404 Not Found
[i] Found new SVN client storage format!
DBD::SQLite::db prepare failed: file is encrypted or is not a database at ./rip-svn.pl line 88.
Couldn't prepare statement 'SELECT id,root,uuid FROM repository': file is encrypted or is not a database at ./rip-svn.pl line 88.
Can't call method "execute" on an undefined value at ./rip-svn.pl line 89.

request:

./rip-svn.pl -vv -u https://xxx.example.com

Tell me, how to perceive, is there a repository and a file with a password? Or there is no repository?
Thank's

@kost
Copy link
Owner

kost commented Feb 28, 2018

Looks like new repository is not available according to logs you sent: /.svn/wc.db: 404 Not Found

Could you please run

file .svn/wc.db

on that downloaded file.

@shrv
Copy link
Author

shrv commented Feb 28, 2018

Thanks for your reply.
I'll check when I'm at my laptop.

But today I see another answer from the site. the script no longer finds the repository :).
I think that the administrators from the other side saw my attempts through the logs and closed everything. I have not contacted them yet, and did not specify them :).

@noraj
Copy link
Contributor

noraj commented Apr 8, 2019

I also had:

$ rip-svn -v -u https://XXX/SVN/                                                                                                                                                              
[i] Found new SVN client storage format!                                                                                                                                                                                                                                        
DBD::SQLite::db prepare failed: file is not a database at /usr/bin/rip-svn line 88.                                                                                                                                                                                             
Couldn't prepare statement 'SELECT id,root,uuid FROM repository': file is not a database at /usr/bin/rip-svn line 88.                                                                                                                                                           
Can't call method "execute" on an undefined value at /usr/bin/rip-svn line 89.

And .svn/wc.db was an HTML file containing an HTTP error.

So it means that when rip-svn try to download wc.db it doesn't check afterward if it is really a SQLite db or for example a HTML file containing an error before trying to access the DB. So when it is a HTML file, of course SQLite is failing to open the "DB". By detecting the type of the file it is possible to handle this error properly and return a more explicit message.

@blckraven
Copy link

Does anyone have some solution?

@kakahan22
Copy link

I also had:

$ rip-svn -v -u https://XXX/SVN/                                                                                                                                                              
[i] Found new SVN client storage format!                                                                                                                                                                                                                                        
DBD::SQLite::db prepare failed: file is not a database at /usr/bin/rip-svn line 88.                                                                                                                                                                                             
Couldn't prepare statement 'SELECT id,root,uuid FROM repository': file is not a database at /usr/bin/rip-svn line 88.                                                                                                                                                           
Can't call method "execute" on an undefined value at /usr/bin/rip-svn line 89.

And .svn/wc.db was an HTML file containing an HTTP error.

So it means that when rip-svn try to download wc.db it doesn't check afterward if it is really a SQLite db or for example a HTML file containing an error before trying to access the DB. So when it is a HTML file, of course SQLite is failing to open the "DB". By detecting the type of the file it is possible to handle this error properly and return a more explicit message.
I have the same problem as you, would like to ask if there is a solution now

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

5 participants