-
-
Notifications
You must be signed in to change notification settings - Fork 6.1k
Closed
Milestone
Description
Running version: 1.6.7#pip
Python version: 3.9.2
Operating system: Linux-5.10.0-6parrot1-amd64-x86_64-with-glibc2.31
Command line: /home/*********/.local/bin/sqlmap -r ********** -p filename --second-req rename.txt --proxy ********************* --sql-shell
Technique: ERROR
Back-end DBMS: MySQL (fingerprinted)
Traceback (most recent call last):
File "/usr/lib/python3.9/sre_parse.py", line 1039, in parse_template
this = chr(ESCAPES[this][1])
KeyError: '\\h'
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "sqlmap.py", line 222, in main
start()
File "lib/core/decorators.py", line 80, in _
result = f(*args, **kwargs)
File "lib/controller/controller.py", line 701, in start
action()
File "lib/controller/action.py", line 192, in action
conf.dbmsHandler.sqlShell()
File "plugins/generic/custom.py", line 117, in sqlShell
output = self.sqlQuery(query)
File "plugins/generic/custom.py", line 62, in sqlQuery
output = inject.getValue(query, fromUser=True)
File "lib/core/decorators.py", line 96, in _
result = f(*args, **kwargs)
File "lib/core/decorators.py", line 80, in _
result = f(*args, **kwargs)
File "lib/request/inject.py", line 451, in getValue
value = errorUse(forgeCaseExpression if expected == EXPECTED.BOOL else query, dump)
File "lib/techniques/error/use.py", line 456, in errorUse
value = _errorFields(expression, expressionFields, expressionFieldsList)
File "lib/techniques/error/use.py", line 249, in _errorFields
output = NULL if emptyFields and field in emptyFields else _oneShotErrorUse(expressionReplaced, field)
File "lib/techniques/error/use.py", line 139, in _oneShotErrorUse
page, headers, _ = Request.queryPage(payload, content=True, raise404=False)
File "lib/core/decorators.py", line 80, in _
result = f(*args, **kwargs)
File "lib/request/connect.py", line 1546, in queryPage
page, headers, code = Connect.getPage(url=_(kb.secondReq[0]), post=_(kb.secondReq[2]), method=kb.secondReq[1], cookie=kb.secondReq[3], silent=silent, auxHeaders=dict(auxHeaders, **dict(kb.secondReq[4])), response=response, raise404=False, ignoreTimeout=timeBasedCompare, refreshing=True)
File "lib/request/connect.py", line 1544, in _
value = re.sub(r"\w*%s" % re.escape(kb.customInjectionMark), payload, value)
File "/usr/lib/python3.9/re.py", line 210, in sub
return _compile(pattern, flags).sub(repl, string, count)
File "/usr/lib/python3.9/re.py", line 327, in _subx
template = _compile_repl(template, pattern)
File "/usr/lib/python3.9/re.py", line 318, in _compile_repl
return sre_parse.parse_template(repl, pattern)
File "/usr/lib/python3.9/sre_parse.py", line 1042, in parse_template
raise s.error('bad escape %s' % this, len(this))
re.error: bad escape \h at position 67