414 Commits

Author	SHA1	Message	Date
Miroslav Stampar	4ad73f9263	added two new valuable functions for dealing with binary data (e.g. binary representations of password hashes) and some cosmetics	2011-04-09 22:39:03 +00:00
Miroslav Stampar	83feb097ef	greater flexibility for --batch when default is None	2011-04-08 22:29:50 +00:00
Miroslav Stampar	ae4ea0af45	fix for a bug reported by m4l1c3 (AttributeError: 'NoneType' object has no attribute 'replace')	2011-04-07 13:57:07 +00:00
Bernardo Damele	05d12790f1	closes #219 - unhidden switch --technique and adapted code accordingly (renamed conf.technique to conf.tech to fit properly in the -h help message)	2011-04-06 14:41:44 +00:00
Miroslav Stampar	305115a68b	important improvement of data handling (POST data and header values)	2011-04-03 15:02:52 +00:00
Bernardo Damele	c3b54cc222	Cosmetics	2011-04-01 16:40:28 +00:00
Miroslav Stampar	156d24203f	speed optimization	2011-03-31 17:16:26 +00:00
Miroslav Stampar	ce51326bff	quick fix	2011-03-31 08:43:17 +00:00
Miroslav Stampar	dd01d66f13	proper update regarding last commit	2011-03-29 22:10:08 +00:00
Miroslav Stampar	b6af80bab3	refactoring, cleanup and improvement	2011-03-29 21:54:15 +00:00
Miroslav Stampar	12f3024c8a	removing that boring message "reflective value found and filtered out" for headers case (we always include Uri header)	2011-03-29 20:45:21 +00:00
Miroslav Stampar	c5b6d377fb	fix for a bug reported by Kirill Morozov (we haven't expected mixed case/copied results in partial union pages)	2011-03-25 12:14:19 +00:00
Miroslav Stampar	1f1c4c0e61	better update related to the last commit	2011-03-24 20:04:20 +00:00
Miroslav Stampar	d79fae724c	minor refactoring	2011-03-24 09:16:21 +00:00
Miroslav Stampar	58e9a074d3	masking some more command line arguments	2011-03-18 16:47:18 +00:00
Miroslav Stampar	00b9d85ffc	fix regarding bug report from andyroyalbattle@yahoo.it	2011-03-18 16:26:39 +00:00
Miroslav Stampar	6cc745f789	removal of deprecated piece of code (replaced later with that getCurrentThreadData().disableStdOut)	2011-03-11 20:04:15 +00:00
Miroslav Stampar	16b286982d	fix for a bug reported by nightman (AttributeError: 'list' object has no attribute 'split')	2011-03-07 09:50:43 +00:00
Miroslav Stampar	f27f05308a	minor update for masking sensitive data in error report (added aCred too)	2011-03-02 10:09:17 +00:00
Miroslav Stampar	2bf212ffa9	minor minor update	2011-02-27 20:43:38 +00:00
Miroslav Stampar	21041f8b90	further reflective value handling improvement	2011-02-27 17:43:41 +00:00
Miroslav Stampar	88faedc0fe	fix for a bug reported by -insane-	2011-02-26 17:48:19 +00:00
Miroslav Stampar	2bbbc9a41e	few updates	2011-02-25 09:35:24 +00:00
Miroslav Stampar	aa88361ab1	incorporation of method for neutralization of reflective values	2011-02-25 09:22:44 +00:00
Miroslav Stampar	dcad5410fe	minor refactoring	2011-02-22 12:54:22 +00:00
Miroslav Stampar	6cdf08b81c	minor fix	2011-02-17 21:51:40 +00:00
Miroslav Stampar	22cd49a217	--technique can now be something like 123 which includes both techniques 1, 2 and 3	2011-02-17 21:39:16 +00:00
Miroslav Stampar	5fb11fd173	update regarding multiple DBMS payloads	2011-02-13 21:20:21 +00:00
Bernardo Damele	c3eb82e60b	Proper fix	2011-02-08 10:08:48 +00:00
Miroslav Stampar	dba2f74588	revert of r3274	2011-02-08 09:44:34 +00:00
Bernardo Damele	cfe2da0195	Minor fix	2011-02-08 00:13:39 +00:00
Miroslav Stampar	e023e0d233	proper fix	2011-02-07 12:32:08 +00:00
Bernardo Damele	3719f085ae	Added back-end dbms' OS based methods to Backend object - will be used for refactoring	2011-02-07 00:21:17 +00:00
Miroslav Stampar	4df8a03c04	using OrderedDict to store parameters in order of appearance	2011-02-04 18:07:21 +00:00
Bernardo Damele	fec88f6a6d	Minor fix	2011-02-04 15:57:53 +00:00
Miroslav Stampar	accf4e6ce0	one important fix (URI injection parameter '*' now can go anywhere)	2011-02-04 12:43:18 +00:00
Miroslav Stampar	c229efba05	revert	2011-02-04 11:33:21 +00:00
Miroslav Stampar	d211def899	minor adjustment (accepting strange new looking uri formats)	2011-02-04 10:55:03 +00:00
Miroslav Stampar	9a1a28c804	adding comments to filtering function	2011-02-03 23:09:08 +00:00
Miroslav Stampar	2dae57a56d	cosmetics	2011-02-02 14:35:21 +00:00
Miroslav Stampar	6c87bd1c63	added maskSensitiveData function	2011-02-02 14:25:16 +00:00
Bernardo Damele	3d966bd569	You never know..	2011-02-01 22:05:12 +00:00
Miroslav Stampar	705d45f4db	minor cosmetics	2011-02-01 11:10:23 +00:00
Miroslav Stampar	196e2d35b2	maybe we could ask user "are you willing to import local data content into error report" and use this function respectably	2011-02-01 11:06:56 +00:00
Bernardo Damele	6761933f75	Just.. cosmetics ;)	2011-01-31 22:51:14 +00:00
Miroslav Stampar	25c175a9a5	minor bug fix	2011-01-31 22:34:57 +00:00
Bernardo Damele	b04e1a0313	More detailed message for unhandled exception	2011-01-31 21:23:40 +00:00
Miroslav Stampar	8ef47307db	added checking of header values for GREP (error); still UNION to do	2011-01-31 12:21:17 +00:00
Miroslav Stampar	5e768be509	minor bug fix	2011-01-31 09:34:54 +00:00
Miroslav Stampar	f7feebe0df	fix for a bug reported by malice.anon@gmail.com (TypeError: encode() takes no keyword arguments)	2011-01-31 09:28:16 +00:00