{"action":"closed","issue":{"url":"https://api.github.com/repos/andresriancho/w3af/issues/9268","labels_url":"https://api.github.com/repos/andresriancho/w3af/issues/9268/labels{/name}","comments_url":"https://api.github.com/repos/andresriancho/w3af/issues/9268/comments","events_url":"https://api.github.com/repos/andresriancho/w3af/issues/9268/events","html_url":"https://github.com/andresriancho/w3af/issues/9268","id":65955909,"number":9268,"title":"[Auto-Generated] Bug Report -     _, body_true_response = self._uri_opener.send_clean(mutant)","user":{"login":"1d3df9903ad","id":3416690,"avatar_url":"https://avatars.githubusercontent.com/u/3416690?v=3","gravatar_id":"","url":"https://api.github.com/users/1d3df9903ad","html_url":"https://github.com/1d3df9903ad","followers_url":"https://api.github.com/users/1d3df9903ad/followers","following_url":"https://api.github.com/users/1d3df9903ad/following{/other_user}","gists_url":"https://api.github.com/users/1d3df9903ad/gists{/gist_id}","starred_url":"https://api.github.com/users/1d3df9903ad/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/1d3df9903ad/subscriptions","organizations_url":"https://api.github.com/users/1d3df9903ad/orgs","repos_url":"https://api.github.com/users/1d3df9903ad/repos","events_url":"https://api.github.com/users/1d3df9903ad/events{/privacy}","received_events_url":"https://api.github.com/users/1d3df9903ad/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-04-02T15:49:17Z","updated_at":"2015-04-03T20:22:59Z","closed_at":"2015-04-03T20:22:59Z","body":"No user description was provided for this bug report given that it was related to handled exceptions in scan with id 512c6f4e7b\n## Version Information\n```\n  Python version: 2.7.3 (default, Mar 13 2014, 11:03:55) [GCC 4.7.2]\n  GTK version: 2.24.10\n  PyGTK version: 2.24.0\n  w3af version:\n    w3af - Web Application Attack and Audit Framework\n    Version: 1.6.46\n    Distribution: Kali Linux\n    Author: Andres Riancho and the w3af team.\n```\n## Traceback\n```pytb\nA \"TypeError\" exception was found while running audit.blind_sqli on \"Method: GET | http://domain/ | Query string: (mode)\". The exception was: \"'HTTPResponse' object is not iterable\" at blind_sqli_response_diff.py:_find_bsql():107.The full traceback is:\n  File \"/usr/share/w3af/w3af/core/controllers/core_helpers/consumers/audit.py\", line 110, in _audit\n    plugin.audit_with_copy(fuzzable_request, orig_resp)\n  File \"/usr/share/w3af/w3af/core/controllers/plugins/audit_plugin.py\", line 139, in audit_with_copy\n    return self.audit(fuzzable_request, orig_resp)\n  File \"/usr/share/w3af/w3af/plugins/audit/blind_sqli.py\", line 80, in audit\n    found_vuln = method.is_injectable(mutant)\n  File \"/usr/share/w3af/w3af/core/controllers/sql_tools/blind_sqli_response_diff.py\", line 66, in is_injectable\n    statement_type)\n  File \"/usr/share/w3af/w3af/core/controllers/sql_tools/blind_sqli_response_diff.py\", line 107, in _find_bsql\n    _, body_true_response = self._uri_opener.send_clean(mutant)\n\n```\n## Enabled Plugins\n```python\n{'attack': {},\n 'audit': {u'blind_sqli': <OptionList: eq_limit>,\n           u'buffer_overflow': <OptionList: >,\n           u'csrf': <OptionList: >,\n           u'dav': <OptionList: >,\n           u'eval': <OptionList: use_time_delay|use_echo>,\n           u'file_upload': <OptionList: extensions>,\n           u'format_string': <OptionList: >,\n           u'frontpage': <OptionList: >,\n           u'generic': <OptionList: diff_ratio>,\n           u'global_redirect': <OptionList: >,\n           u'htaccess_methods': <OptionList: >,\n           u'ldapi': <OptionList: >,\n           u'lfi': <OptionList: >,\n           u'mx_injection': <OptionList: >,\n           u'os_commanding': <OptionList: >,\n           u'phishing_vector': <OptionList: >,\n           u'preg_replace': <OptionList: >,\n           u'redos': <OptionList: >,\n           u'response_splitting': <OptionList: >,\n           u'rfi': <OptionList: listen_address|listen_port|use_w3af_site>,\n           u'sqli': <OptionList: >,\n           u'ssi': <OptionList: >,\n           u'ssl_certificate': <OptionList: minExpireDays|caFileName>,\n           u'un_ssl': <OptionList: >,\n           u'xpath': <OptionList: >,\n           u'xss': <OptionList: persistent_xss>,\n           u'xst': <OptionList: >},\n 'auth': {},\n 'bruteforce': {},\n 'crawl': {u'bing_spider': <OptionList: result_limit>,\n           u'oracle_discovery': <OptionList: >,\n           u'phishtank': <OptionList: >,\n           u'phpinfo': <OptionList: >,\n           u'robots_txt': <OptionList: >,\n           u'sitemap_xml': <OptionList: >,\n           u'user_dir': <OptionList: >,\n           u'web_spider': <OptionList: only_forward|follow_regex|ignore_regex>},\n 'evasion': {},\n 'grep': {u'analyze_cookies': <OptionList: >,\n          u'blank_body': <OptionList: >,\n          u'click_jacking': <OptionList: >,\n          u'code_disclosure': <OptionList: >,\n          u'credit_cards': <OptionList: >,\n          u'directory_indexing': <OptionList: >,\n          u'dom_xss': <OptionList: >,\n          u'dot_net_event_validation': <OptionList: >,\n          u'error_500': <OptionList: >,\n          u'error_pages': <OptionList: >,\n          u'feeds': <OptionList: >,\n          u'file_upload': <OptionList: >,\n          u'form_autocomplete': <OptionList: >,\n          u'get_emails': <OptionList: only_target_domain>,\n          u'hash_analysis': <OptionList: >,\n          u'html_comments': <OptionList: >,\n          u'http_auth_detect': <OptionList: >,\n          u'http_in_body': <OptionList: >,\n          u'lang': <OptionList: >,\n          u'meta_tags': <OptionList: >,\n          u'motw': <OptionList: >,\n          u'objects': <OptionList: >,\n          u'oracle': <OptionList: >,\n          u'password_profiling': <OptionList: >,\n          u'path_disclosure': <OptionList: >,\n          u'private_ip': <OptionList: >,\n          u'ssn': <OptionList: >,\n          u'strange_headers': <OptionList: >,\n          u'strange_http_codes': <OptionList: >,\n          u'strange_parameters': <OptionList: >,\n          u'strange_reason': <OptionList: >,\n          u'svn_users': <OptionList: >,\n          u'symfony': <OptionList: override>,\n          u'wsdl_greper': <OptionList: >},\n 'infrastructure': {u'afd': <OptionList: >,\n                    u'allowed_methods': <OptionList: execOneTime|reportDavOnly>,\n                    u'detect_reverse_proxy': <OptionList: >,\n                    u'detect_transparent_proxy': <OptionList: >,\n                    u'dns_wildcard': <OptionList: >,\n                    u'dot_net_errors': <OptionList: >,\n                    u'find_vhosts': <OptionList: >,\n                    'finger_bing': {},\n                    'finger_google': {},\n                    'finger_pks': {},\n                    u'fingerprint_WAF': <OptionList: >,\n                    u'fingerprint_os': <OptionList: >,\n                    'frontpage_version': {},\n                    u'halberd': <OptionList: >,\n                    u'hmap': <OptionList: gen_fingerprint>,\n                    u'php_eggs': <OptionList: >,\n                    u'server_header': <OptionList: >,\n                    u'server_status': <OptionList: >,\n                    u'shared_hosting': <OptionList: result_limit>},\n 'mangle': {},\n 'output': {u'console': <OptionList: verbose>}}\n\n```\n"}}