{"action":"opened","issue":{"url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1987","repository_url":"https://api.github.com/repos/sqlmapproject/sqlmap","labels_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1987/labels{/name}","comments_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1987/comments","events_url":"https://api.github.com/repos/sqlmapproject/sqlmap/issues/1987/events","html_url":"https://github.com/sqlmapproject/sqlmap/issues/1987","id":162667912,"number":1987,"title":"Unhandled exception (#73f83db8)","user":{"login":"sqlmapreporter","id":9404386,"avatar_url":"https://avatars.githubusercontent.com/u/9404386?v=3","gravatar_id":"","url":"https://api.github.com/users/sqlmapreporter","html_url":"https://github.com/sqlmapreporter","followers_url":"https://api.github.com/users/sqlmapreporter/followers","following_url":"https://api.github.com/users/sqlmapreporter/following{/other_user}","gists_url":"https://api.github.com/users/sqlmapreporter/gists{/gist_id}","starred_url":"https://api.github.com/users/sqlmapreporter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sqlmapreporter/subscriptions","organizations_url":"https://api.github.com/users/sqlmapreporter/orgs","repos_url":"https://api.github.com/users/sqlmapreporter/repos","events_url":"https://api.github.com/users/sqlmapreporter/events{/privacy}","received_events_url":"https://api.github.com/users/sqlmapreporter/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-06-28T11:54:22Z","updated_at":"2016-06-28T11:54:22Z","closed_at":null,"body":"```\nsqlmap version: 1.0.6.47#dev\nPython version: 2.7.6\nOperating system: nt\nCommand line: sqlmap.py -r c:\\2.txt\nTechnique: None\nBack-end DBMS: None (identified)\n```\n```\nTraceback (most recent call last):\n  File \"sqlmap.py\", line 142, in main\n    start()\n  File \"lib/controller/controller.py\", line 383, in start\n    identifyWaf()\n  File \"lib/controller/checks.py\", line 1283, in identifyWaf\n    setWafFunctions()\n  File \"lib/core/option.py\", line 990, in _setWafFunctions\n    module = __import__(filename[:-3])\n  File \"waf/1.py\", line 56\n    \"\"\"\n    Replaces space character (' ') with comments '/*|--|*/'\n\n    Tested against:\n        * Microsoft SQL Server 2005\n        * MySQL 4, 5.0 and 5.5\n        * Oracle 10g\n        * PostgreSQL 8.3, 8.4, 9.0\n\n    Notes:\n        * Useful to bypass weak and bespoke web application firewalls\n\n    >>> tamper('SELECT id FROM users')\n    'SELECT/*|--|*/id/*|--|*/FROM/*|--|*/users'\n    retVal = payload\n\n    if payload:\n        retVal = \"\"\n        quote, doublequote, firstspace = False, False, False\n\n        for i in xrange(len(payload)):\n            if not firstspace:\n                if payload[i].isspace():\n                    firstspace = True\n                    retVal += \"/*|--|*/\"\n                    continue\n\n            elif payload[i] == '\\'':\n                quote = not quote\n\n            elif payload[i] == '\"':\n                doublequote = not doublequote\n\n            elif payload[i] == \" \" and not doublequote and not quote:\n                retVal += \"/*|--|*/\"\n                continue\n\n            retVal += payload[i]\n\n    return retVal\n      \n                                                           \n\n                   \n                                   \n                              \n                    \n                                  \n\n          \n                                                                     \n\n                                      \n                                               \n                    \n\n               \n                   \n                                                            \n\n                                      \n                              \n                                        \n                                     \n                                        \n                            \n\n                                    \n                                 \n\n                                   \n                                             \n\n                                                                     \n                                    \n                        \n\n                                \n\n                 ^\nSyntaxError: EOF while scanning triple-quoted string literal\n```"}}
{"actor":{"display_login":"sqlmapreporter"}}