diff --git a/doc/README.html b/doc/README.html
index e8cb87d06..fe8fdf348 100644
--- a/doc/README.html
+++ b/doc/README.html
@@ -25,6 +25,7 @@ for the latest version.
1.2 Scenario
1.3 Techniques
1.4 Demo
+1.5 History
@@ -251,6 +252,217 @@ and the session user privileges.
from
here.
+
+
+2010
+
+
+
+- March 14,
+Bernardo and Miroslav release stable version of
+sqlmap 0.8 featuring many features. Amongst these, support to
+enumerate and dump all databases' tables containing user provided
+column(s), stabilization and enhancements to the takeover functionalities,
+updated integration with Metasploit 3.3.3 and a lot of minor features and
+bug fixes.
+- January, Bernardo is
+invited to present at
+AthCon conference in Greece on June
+2010.
+
+
+
+2009
+
+
+
+- December 18, Miroslav Stampar replies to my public call
+for developers. He contributes actively in the development of sqlmap from
+version 0.8 release candidate 2.
+
+- December 12, Bernardo writes to the mailing list a post
+titled
+sqlmap state of art - 3 years later highlighting the goals
+achieved during these first three years of the project and launches a call
+for developers.
+
+- December 4, sqlmap-devel mailing list has been merged
+sqlmap-users
+mailing list.
+
+- November 20, Bernardo and Guido present again their
+research on stealth database server takeover at CONfidence 2009 in Warsaw,
+Poland.
+
+- September 26, sqlmap version 0.8 release candidate
+1 goes public on the
+Subversion repository, with all the attack
+vectors unveiled at SOURCE Barcelona 2009 Conference. These include an
+enhanced version of the Microsoft SQL Server buffer overflow exploit to
+automatically bypass DEP memory protection, support to establish the
+out-of-band connection with the database server by executing in-memory
+the Metasploit shellcode via UDF sys_bineval() (anti-forensics
+technique), support to access the Windows registry hives and support to
+inject custom user-defined functions.
+
+- September 21, Bernardo and
+Guido Landi
+present their research (
+slides) at SOURCE Conference 2009 in Barcelona, Spain.
+
+- August, Bernardo is accepted as a speaker to two others IT
+security conferences,
+SOURCE Barcelona 2009 and
+CONfidence 2009 Warsaw.
+This new research is titled Expanding the control over the operating
+system from the database.
+
+- July 25, stable version of sqlmap 0.7 is out!
+
+- June 2, sqlmap version 0.6.4 has made it way to
+the official Ubuntu repository too.
+
+- May, Bernardo presents again his research on operating
+system takeover via SQL injection at
+OWASP AppSec Europe 2009 in Warsaw, Poland and at
+EUSecWest 2009 in London, UK.
+
+- May 8, sqlmap version 0.6.4 has been officially
+accepted in Debian repository. Details on
+this blog post.
+
+- April 22, sqlmap version 0.7 release candidate 1
+goes public, with all the attack vectors unveiled at Black Hat Europe 2009
+Conference.
+These include execution of arbitrary commands on the underlying operating
+system, full integration with Metasploit to establish an out-of-band
+TCP connection, first publicly available exploit for Microsoft Security
+Bulletin
+MS09-004 against Microsoft SQL Server 2000 and 2005 and others
+attacks to takeover the database server as a whole, not only the data from
+the database.
+
+- April 16, Bernardo
+presents his research (
+slides,
+whitepaper) at Black Hat Europe 2009 in Amsterdam, The Netherlands.
+The feedback from the audience is good and there has been some
+media coverage too.
+
+- March 5, Bernardo
+presents for the first time some of the sqlmap recent features and
+upcoming enhancements at an international event,
+Front Range OWASP Conference 2009 in Denver, USA. The presentation
+is titled SQL injection: Not only AND 1=1.
+
+- February 24, Bernardo is accepted as a
+speaker at
+Black Hat Europe 2009 with a presentation titled Advanced SQL
+injection exploitation to operating system full control.
+
+- February 3, sqlmap 0.6.4 is the last point release
+for 0.6: taking advantage of the stacked queries test implemented in 0.6.3,
+sqlmap can now be used to execute any arbitrary SQL statement, not only
+SELECT anymore. Also, many features have been stabilized, tweaked
+and improved in terms of speed in this release.
+
+- January 9, Bernardo
+presents SQL injection exploitation internals at a
+private event in London, UK.
+
+
+
+2008
+
+
+
+- December 18, sqlmap 0.6.3 is released featuring
+support to retrieve targets from Burp and WebScarab proxies log files,
+support to test for stacked queries ant time-based blind SQL injection,
+rough fingerprint of the web server and web application technologies in
+use and more options to customize the HTTP requests and enumerate more
+information from the database.
+
+- November 2, sqlmap version 0.6.2 is a "bug fixes"
+release only.
+
+- October 20, sqlmap first point release, 0.6.1, goes
+public. This includes minor bug fixes and the first contact between the
+tool and
+Metasploit:
+an auxiliary module to launch sqlmap from within Metasploit Framework.
+The
+Subversion development repository goes public again.
+
+- September 1, nearly one year after the previous release,
+sqlmap 0.6 comes to life featuring a complete code
+refactoring, support to execute arbitrary SQL SELECT statements,
+more options to enumerate and dump specific information are added, brand
+new installation packages for Debian, Red Hat, Windows and much more.
+
+- August, two public
+mailing lists are created on SourceForge.
+
+- January, sqlmap Subversion development repository is moved
+away from SourceForge and goes private for a while.
+
+
+
+2007
+
+
+
+- November 4, release 0.5 marks the end of the OWASP
+Spring of Code 2007 contest participation. Bernardo has
+accomplished all the propsed objects which include initial support
+for Oracle, enhanced support for UNION query SQL injection and support to
+test and exploit injections on HTTP Cookie and User-Agent headers.
+
+- June 15, Bernardo releases version 0.4 as a
+result of the first OWASP Spring of Code 2007 milestone. This release
+features, amongst others, improvements to the DBMS fingerprint engine,
+support to calculate the estimated time of arrival, options to enumerate
+specific data from the database server and brand new logging system.
+
+- April, even though sqlmap was not and is not
+an OWASP project, it gets
+accepted, amongst many other open source projects to OWASP Spring
+of Code 2007.
+
+- March 30, Bernardo applies to OWASP
+Spring of Code 2007.
+
+- January 20, sqlmap version 0.3 is released,
+featuring initial support for Microsoft SQL Server, support to test
+and exploit UNION query SQL injections and injection points in POST
+parameters.
+
+
+
+2006
+
+
+
+- December 13, Bernardo releases version 0.2 with
+major enhancements to the DBMS fingerprint functionalities and replacement
+of the old inference algorithm with the bisection algorithm.
+
+- September, Daniele leaves the project,
+Bernardo Damele A. G.
+takes it over.
+
+- August, Daniele adds initial support for PostgreSQL and releases
+version 0.1.
+
+- July 25,
+Daniele Bellucci
+registers the sqlmap project on SourceForge and develops it on the
+SourceForge Subversion repository. The skeleton is implemented and
+limited support for MySQL added.
+
+
+
diff --git a/doc/README.pdf b/doc/README.pdf
index f7304efa1..1afc95ded 100644
--- a/doc/README.pdf
+++ b/doc/README.pdf
@@ -31,1492 +31,1337 @@ endobj
(Demo)
endobj
25 0 obj
-<< /S /GoTo /D (section.2) >>
+<< /S /GoTo /D (subsection.1.5) >>
endobj
28 0 obj
-(Features)
+(History)
endobj
29 0 obj
-<< /S /GoTo /D (subsection.2.1) >>
+<< /S /GoTo /D (subsubsection.1.5.1) >>
endobj
32 0 obj
-(Generic features)
+(2010)
endobj
33 0 obj
-<< /S /GoTo /D (subsection.2.2) >>
+<< /S /GoTo /D (subsubsection.1.5.2) >>
endobj
36 0 obj
-(Fingerprint and enumeration features)
+(2009)
endobj
37 0 obj
-<< /S /GoTo /D (subsection.2.3) >>
+<< /S /GoTo /D (subsubsection.1.5.3) >>
endobj
40 0 obj
-(Takeover features)
+(2008)
endobj
41 0 obj
-<< /S /GoTo /D (section.3) >>
+<< /S /GoTo /D (subsubsection.1.5.4) >>
endobj
44 0 obj
-(Download and update)
+(2007)
endobj
45 0 obj
-<< /S /GoTo /D (section.4) >>
+<< /S /GoTo /D (subsubsection.1.5.5) >>
endobj
48 0 obj
-(License and copyright)
+(2006)
endobj
49 0 obj
-<< /S /GoTo /D (section.5) >>
+<< /S /GoTo /D (section.2) >>
endobj
52 0 obj
-(Usage)
+(Features)
endobj
53 0 obj
-<< /S /GoTo /D (subsection.5.1) >>
+<< /S /GoTo /D (subsection.2.1) >>
endobj
56 0 obj
-(Output verbosity)
+(Generic features)
endobj
57 0 obj
-<< /S /GoTo /D (subsection.5.2) >>
+<< /S /GoTo /D (subsection.2.2) >>
endobj
60 0 obj
-(Target)
+(Fingerprint and enumeration features)
endobj
61 0 obj
-<< /S /GoTo /D (subsubsection.5.2.1) >>
+<< /S /GoTo /D (subsection.2.3) >>
endobj
64 0 obj
-(Target URL)
+(Takeover features)
endobj
65 0 obj
-<< /S /GoTo /D (subsubsection.5.2.2) >>
+<< /S /GoTo /D (section.3) >>
endobj
68 0 obj
-(Parse targets from Burp or WebScarab proxy logs)
+(Download and update)
endobj
69 0 obj
-<< /S /GoTo /D (subsubsection.5.2.3) >>
+<< /S /GoTo /D (section.4) >>
endobj
72 0 obj
-(Load HTTP request from a file)
+(License and copyright)
endobj
73 0 obj
-<< /S /GoTo /D (subsubsection.5.2.4) >>
+<< /S /GoTo /D (section.5) >>
endobj
76 0 obj
-(Process Google dork results as target addresses)
+(Usage)
endobj
77 0 obj
-<< /S /GoTo /D (subsubsection.5.2.5) >>
+<< /S /GoTo /D (subsection.5.1) >>
endobj
80 0 obj
-(Load options from a configuration INI file)
+(Output verbosity)
endobj
81 0 obj
-<< /S /GoTo /D (subsection.5.3) >>
+<< /S /GoTo /D (subsection.5.2) >>
endobj
84 0 obj
-(Request)
+(Target)
endobj
85 0 obj
-<< /S /GoTo /D (subsubsection.5.3.1) >>
+<< /S /GoTo /D (subsubsection.5.2.1) >>
endobj
88 0 obj
-(HTTP method: GET or POST)
+(Target URL)
endobj
89 0 obj
-<< /S /GoTo /D (subsubsection.5.3.2) >>
+<< /S /GoTo /D (subsubsection.5.2.2) >>
endobj
92 0 obj
-(HTTP Cookie header)
+(Parse targets from Burp or WebScarab proxy logs)
endobj
93 0 obj
-<< /S /GoTo /D (subsubsection.5.3.3) >>
+<< /S /GoTo /D (subsubsection.5.2.3) >>
endobj
96 0 obj
-(HTTP User-Agent header)
+(Load HTTP request from a file)
endobj
97 0 obj
-<< /S /GoTo /D (subsubsection.5.3.4) >>
+<< /S /GoTo /D (subsubsection.5.2.4) >>
endobj
100 0 obj
-(HTTP Referer header)
+(Process Google dork results as target addresses)
endobj
101 0 obj
-<< /S /GoTo /D (subsubsection.5.3.5) >>
+<< /S /GoTo /D (subsubsection.5.2.5) >>
endobj
104 0 obj
-(Extra HTTP headers)
+(Load options from a configuration INI file)
endobj
105 0 obj
-<< /S /GoTo /D (subsubsection.5.3.6) >>
+<< /S /GoTo /D (subsection.5.3) >>
endobj
108 0 obj
-(HTTP Basic, Digest and NTLM authentications)
+(Request)
endobj
109 0 obj
-<< /S /GoTo /D (subsubsection.5.3.7) >>
+<< /S /GoTo /D (subsubsection.5.3.1) >>
endobj
112 0 obj
-(HTTP Certificate authentication)
+(HTTP method: GET or POST)
endobj
113 0 obj
-<< /S /GoTo /D (subsubsection.5.3.8) >>
+<< /S /GoTo /D (subsubsection.5.3.2) >>
endobj
116 0 obj
-(HTTP proxy)
+(HTTP Cookie header)
endobj
117 0 obj
-<< /S /GoTo /D (subsubsection.5.3.9) >>
+<< /S /GoTo /D (subsubsection.5.3.3) >>
endobj
120 0 obj
-(Concurrent HTTP requests)
+(HTTP User-Agent header)
endobj
121 0 obj
-<< /S /GoTo /D (subsubsection.5.3.10) >>
+<< /S /GoTo /D (subsubsection.5.3.4) >>
endobj
124 0 obj
-(Delay in seconds between each HTTP request)
+(HTTP Referer header)
endobj
125 0 obj
-<< /S /GoTo /D (subsubsection.5.3.11) >>
+<< /S /GoTo /D (subsubsection.5.3.5) >>
endobj
128 0 obj
-(Seconds to wait before timeout connection)
+(Extra HTTP headers)
endobj
129 0 obj
-<< /S /GoTo /D (subsubsection.5.3.12) >>
+<< /S /GoTo /D (subsubsection.5.3.6) >>
endobj
132 0 obj
-(Maximum number of retries when the HTTP connection timeouts)
+(HTTP Basic, Digest and NTLM authentications)
endobj
133 0 obj
-<< /S /GoTo /D (subsubsection.5.3.13) >>
+<< /S /GoTo /D (subsubsection.5.3.7) >>
endobj
136 0 obj
-(Filtering targets from provided proxy log using regular expression)
+(HTTP Certificate authentication)
endobj
137 0 obj
-<< /S /GoTo /D (subsection.5.4) >>
+<< /S /GoTo /D (subsubsection.5.3.8) >>
endobj
140 0 obj
-(Injection)
+(HTTP proxy)
endobj
141 0 obj
-<< /S /GoTo /D (subsubsection.5.4.1) >>
+<< /S /GoTo /D (subsubsection.5.3.9) >>
endobj
144 0 obj
-(Testable parameter\(s\))
+(Concurrent HTTP requests)
endobj
145 0 obj
-<< /S /GoTo /D (subsubsection.5.4.2) >>
+<< /S /GoTo /D (subsubsection.5.3.10) >>
endobj
148 0 obj
-(Force the database management system name)
+(Delay in seconds between each HTTP request)
endobj
149 0 obj
-<< /S /GoTo /D (subsubsection.5.4.3) >>
+<< /S /GoTo /D (subsubsection.5.3.11) >>
endobj
152 0 obj
-(Force the database management system operating system name)
+(Seconds to wait before timeout connection)
endobj
153 0 obj
-<< /S /GoTo /D (subsubsection.5.4.4) >>
+<< /S /GoTo /D (subsubsection.5.3.12) >>
endobj
156 0 obj
-(Custom injection payload)
+(Maximum number of retries when the HTTP connection timeouts)
endobj
157 0 obj
-<< /S /GoTo /D (subsubsection.5.4.5) >>
+<< /S /GoTo /D (subsubsection.5.3.13) >>
endobj
160 0 obj
-(Page comparison)
+(Filtering targets from provided proxy log using regular expression)
endobj
161 0 obj
-<< /S /GoTo /D (subsubsection.5.4.6) >>
+<< /S /GoTo /D (subsection.5.4) >>
endobj
164 0 obj
-(Exclude specific page content)
+(Injection)
endobj
165 0 obj
-<< /S /GoTo /D (subsection.5.5) >>
+<< /S /GoTo /D (subsubsection.5.4.1) >>
endobj
168 0 obj
-(Techniques)
+(Testable parameter\(s\))
endobj
169 0 obj
-<< /S /GoTo /D (subsubsection.5.5.1) >>
+<< /S /GoTo /D (subsubsection.5.4.2) >>
endobj
172 0 obj
-(Test for stacked queries \(multiple statements\) support)
+(Force the database management system name)
endobj
173 0 obj
-<< /S /GoTo /D (subsubsection.5.5.2) >>
+<< /S /GoTo /D (subsubsection.5.4.3) >>
endobj
176 0 obj
-(Test for time based blind SQL injection)
+(Force the database management system operating system name)
endobj
177 0 obj
-<< /S /GoTo /D (subsubsection.5.5.3) >>
+<< /S /GoTo /D (subsubsection.5.4.4) >>
endobj
180 0 obj
-(Test for UNION query SQL injection)
+(Custom injection payload)
endobj
181 0 obj
-<< /S /GoTo /D (subsubsection.5.5.4) >>
+<< /S /GoTo /D (subsubsection.5.4.5) >>
endobj
184 0 obj
-(Use the UNION query SQL injection)
+(Page comparison)
endobj
185 0 obj
-<< /S /GoTo /D (subsection.5.6) >>
+<< /S /GoTo /D (subsubsection.5.4.6) >>
endobj
188 0 obj
-(Fingerprint)
+(Exclude specific page content)
endobj
189 0 obj
-<< /S /GoTo /D (subsubsection.5.6.1) >>
+<< /S /GoTo /D (subsection.5.5) >>
endobj
192 0 obj
-(Extensive database management system fingerprint)
+(Techniques)
endobj
193 0 obj
-<< /S /GoTo /D (subsection.5.7) >>
+<< /S /GoTo /D (subsubsection.5.5.1) >>
endobj
196 0 obj
-(Enumeration)
+(Test for stacked queries \(multiple statements\) support)
endobj
197 0 obj
-<< /S /GoTo /D (subsubsection.5.7.1) >>
+<< /S /GoTo /D (subsubsection.5.5.2) >>
endobj
200 0 obj
-(Banner)
+(Test for time based blind SQL injection)
endobj
201 0 obj
-<< /S /GoTo /D (subsubsection.5.7.2) >>
+<< /S /GoTo /D (subsubsection.5.5.3) >>
endobj
204 0 obj
-(Session user)
+(Test for UNION query SQL injection)
endobj
205 0 obj
-<< /S /GoTo /D (subsubsection.5.7.3) >>
+<< /S /GoTo /D (subsubsection.5.5.4) >>
endobj
208 0 obj
-(Current database)
+(Use the UNION query SQL injection)
endobj
209 0 obj
-<< /S /GoTo /D (subsubsection.5.7.4) >>
+<< /S /GoTo /D (subsection.5.6) >>
endobj
212 0 obj
-(Detect if the session user is a database administrator \(DBA\))
+(Fingerprint)
endobj
213 0 obj
-<< /S /GoTo /D (subsubsection.5.7.5) >>
+<< /S /GoTo /D (subsubsection.5.6.1) >>
endobj
216 0 obj
-(Users)
+(Extensive database management system fingerprint)
endobj
217 0 obj
-<< /S /GoTo /D (subsubsection.5.7.6) >>
+<< /S /GoTo /D (subsection.5.7) >>
endobj
220 0 obj
-(Users password hashes)
+(Enumeration)
endobj
221 0 obj
-<< /S /GoTo /D (subsubsection.5.7.7) >>
+<< /S /GoTo /D (subsubsection.5.7.1) >>
endobj
224 0 obj
-(Users privileges)
+(Banner)
endobj
225 0 obj
-<< /S /GoTo /D (subsubsection.5.7.8) >>
+<< /S /GoTo /D (subsubsection.5.7.2) >>
endobj
228 0 obj
-(Available databases)
+(Session user)
endobj
229 0 obj
-<< /S /GoTo /D (subsubsection.5.7.9) >>
+<< /S /GoTo /D (subsubsection.5.7.3) >>
endobj
232 0 obj
-(Databases tables)
+(Current database)
endobj
233 0 obj
-<< /S /GoTo /D (subsubsection.5.7.10) >>
+<< /S /GoTo /D (subsubsection.5.7.4) >>
endobj
236 0 obj
-(Database table columns)
+(Detect if the session user is a database administrator \(DBA\))
endobj
237 0 obj
-<< /S /GoTo /D (subsubsection.5.7.11) >>
+<< /S /GoTo /D (subsubsection.5.7.5) >>
endobj
240 0 obj
-(Dump database table entries)
+(Users)
endobj
241 0 obj
-<< /S /GoTo /D (subsubsection.5.7.12) >>
+<< /S /GoTo /D (subsubsection.5.7.6) >>
endobj
244 0 obj
-(Dump all databases tables entries)
+(Users password hashes)
endobj
245 0 obj
-<< /S /GoTo /D (subsubsection.5.7.13) >>
+<< /S /GoTo /D (subsubsection.5.7.7) >>
endobj
248 0 obj
-(Execute custom SQL statement)
+(Users privileges)
endobj
249 0 obj
-<< /S /GoTo /D (subsection.5.8) >>
+<< /S /GoTo /D (subsubsection.5.7.8) >>
endobj
252 0 obj
-(User-defined function injection)
+(Available databases)
endobj
253 0 obj
-<< /S /GoTo /D (subsubsection.5.8.1) >>
+<< /S /GoTo /D (subsubsection.5.7.9) >>
endobj
256 0 obj
-(Inject custom user-defined functions \(UDF\))
+(Databases tables)
endobj
257 0 obj
-<< /S /GoTo /D (subsection.5.9) >>
+<< /S /GoTo /D (subsubsection.5.7.10) >>
endobj
260 0 obj
-(File system access)
+(Database table columns)
endobj
261 0 obj
-<< /S /GoTo /D (subsubsection.5.9.1) >>
+<< /S /GoTo /D (subsubsection.5.7.11) >>
endobj
264 0 obj
-(Read a file from the database server's file system)
+(Dump database table entries)
endobj
265 0 obj
-<< /S /GoTo /D (subsubsection.5.9.2) >>
+<< /S /GoTo /D (subsubsection.5.7.12) >>
endobj
268 0 obj
-(Write a local file on the database server's file system)
+(Dump all databases tables entries)
endobj
269 0 obj
-<< /S /GoTo /D (subsection.5.10) >>
+<< /S /GoTo /D (subsubsection.5.7.13) >>
endobj
272 0 obj
-(Operating system access)
+(Execute custom SQL statement)
endobj
273 0 obj
-<< /S /GoTo /D (subsubsection.5.10.1) >>
+<< /S /GoTo /D (subsection.5.8) >>
endobj
276 0 obj
-(Execute arbitrary operating system command)
+(User-defined function injection)
endobj
277 0 obj
-<< /S /GoTo /D (subsubsection.5.10.2) >>
+<< /S /GoTo /D (subsubsection.5.8.1) >>
endobj
280 0 obj
-(Prompt for an out-of-band shell, Meterpreter or VNC)
+(Inject custom user-defined functions \(UDF\))
endobj
281 0 obj
-<< /S /GoTo /D (subsubsection.5.10.3) >>
+<< /S /GoTo /D (subsection.5.9) >>
endobj
284 0 obj
-(One click prompt for an out-of-band shell, meterpreter or VNC)
+(File system access)
endobj
285 0 obj
-<< /S /GoTo /D (subsubsection.5.10.4) >>
+<< /S /GoTo /D (subsubsection.5.9.1) >>
endobj
288 0 obj
-(Database stored procedure heap-based buffer overflow exploit)
+(Read a file from the database server's file system)
endobj
289 0 obj
-<< /S /GoTo /D (subsection.5.11) >>
+<< /S /GoTo /D (subsubsection.5.9.2) >>
endobj
292 0 obj
-(Windows registry access)
+(Write a local file on the database server's file system)
endobj
293 0 obj
-<< /S /GoTo /D (subsubsection.5.11.1) >>
+<< /S /GoTo /D (subsection.5.10) >>
endobj
296 0 obj
-(Read a Windows registry key value)
+(Operating system access)
endobj
297 0 obj
-<< /S /GoTo /D (subsubsection.5.11.2) >>
+<< /S /GoTo /D (subsubsection.5.10.1) >>
endobj
300 0 obj
-(Write a Windows registry key value)
+(Execute arbitrary operating system command)
endobj
301 0 obj
-<< /S /GoTo /D (subsubsection.5.11.3) >>
+<< /S /GoTo /D (subsubsection.5.10.2) >>
endobj
304 0 obj
-(Delete a Windows registry key)
+(Prompt for an out-of-band shell, Meterpreter or VNC)
endobj
305 0 obj
-<< /S /GoTo /D (subsubsection.5.11.4) >>
+<< /S /GoTo /D (subsubsection.5.10.3) >>
endobj
308 0 obj
-(Auxiliary registry switches)
+(One click prompt for an out-of-band shell, meterpreter or VNC)
endobj
309 0 obj
-<< /S /GoTo /D (subsection.5.12) >>
+<< /S /GoTo /D (subsubsection.5.10.4) >>
endobj
312 0 obj
-(Miscellaneous)
+(Database stored procedure heap-based buffer overflow exploit)
endobj
313 0 obj
-<< /S /GoTo /D (subsubsection.5.12.1) >>
+<< /S /GoTo /D (subsection.5.11) >>
endobj
316 0 obj
-(Session file: save and resume all data retrieved)
+(Windows registry access)
endobj
317 0 obj
-<< /S /GoTo /D (subsubsection.5.12.2) >>
+<< /S /GoTo /D (subsubsection.5.11.1) >>
endobj
320 0 obj
-(Flush session file for current target)
+(Read a Windows registry key value)
endobj
321 0 obj
-<< /S /GoTo /D (subsubsection.5.12.3) >>
+<< /S /GoTo /D (subsubsection.5.11.2) >>
endobj
324 0 obj
-(Estimated time of arrival)
+(Write a Windows registry key value)
endobj
325 0 obj
-<< /S /GoTo /D (subsubsection.5.12.4) >>
+<< /S /GoTo /D (subsubsection.5.11.3) >>
endobj
328 0 obj
-(Use Google dork results from specified page number)
+(Delete a Windows registry key)
endobj
329 0 obj
-<< /S /GoTo /D (subsubsection.5.12.5) >>
+<< /S /GoTo /D (subsubsection.5.11.4) >>
endobj
332 0 obj
-(Update sqlmap)
+(Auxiliary registry switches)
endobj
333 0 obj
-<< /S /GoTo /D (subsubsection.5.12.6) >>
+<< /S /GoTo /D (subsection.5.12) >>
endobj
336 0 obj
-(Save options in a configuration INI file)
+(Miscellaneous)
endobj
337 0 obj
-<< /S /GoTo /D (subsubsection.5.12.7) >>
+<< /S /GoTo /D (subsubsection.5.12.1) >>
endobj
340 0 obj
-(Act in non-interactive mode)
+(Session file: save and resume all data retrieved)
endobj
341 0 obj
-<< /S /GoTo /D (subsubsection.5.12.8) >>
+<< /S /GoTo /D (subsubsection.5.12.2) >>
endobj
344 0 obj
-(Cleanup the DBMS by sqlmap specific UDF\(s\) and table\(s\))
+(Flush session file for current target)
endobj
345 0 obj
-<< /S /GoTo /D (section.6) >>
+<< /S /GoTo /D (subsubsection.5.12.3) >>
endobj
348 0 obj
-(Disclaimer)
+(Estimated time of arrival)
endobj
349 0 obj
-<< /S /GoTo /D (section.7) >>
+<< /S /GoTo /D (subsubsection.5.12.4) >>
endobj
352 0 obj
-(Authors)
+(Use Google dork results from specified page number)
endobj
353 0 obj
-<< /S /GoTo /D [354 0 R /Fit ] >>
+<< /S /GoTo /D (subsubsection.5.12.5) >>
endobj
-388 0 obj <<
-/Length 1488
+356 0 obj
+(Update sqlmap)
+endobj
+357 0 obj
+<< /S /GoTo /D (subsubsection.5.12.6) >>
+endobj
+360 0 obj
+(Save options in a configuration INI file)
+endobj
+361 0 obj
+<< /S /GoTo /D (subsubsection.5.12.7) >>
+endobj
+364 0 obj
+(Act in non-interactive mode)
+endobj
+365 0 obj
+<< /S /GoTo /D (subsubsection.5.12.8) >>
+endobj
+368 0 obj
+(Cleanup the DBMS by sqlmap specific UDF\(s\) and table\(s\))
+endobj
+369 0 obj
+<< /S /GoTo /D (section.6) >>
+endobj
+372 0 obj
+(Disclaimer)
+endobj
+373 0 obj
+<< /S /GoTo /D (section.7) >>
+endobj
+376 0 obj
+(Authors)
+endobj
+377 0 obj
+<< /S /GoTo /D [378 0 R /Fit ] >>
+endobj
+412 0 obj <<
+/Length 1312
/Filter /FlateDecode
>>
stream
-xZKw6W+>g'1dM"BMcGWB-؞IO{w(
- cz
-Bd]tb*ȟ O$N]*kza@'7i5S/1CQ#@"jQT9/z c>e"
s'|&s=VY~-o6)LŔQ1b.K>[p.["fv 7fT[Hs@SDK 3bb I&Ya%*%i5