Commit Graph

  • 5437f8bf36 Fix for an Issue #85 Miroslav Stampar 2014-01-02 12:09:58 +01:00
  • 4de83daf03 Minor style update Miroslav Stampar 2014-01-02 11:06:19 +01:00
  • e0143e397a Consistency fix (down below we use direct SQL) Miroslav Stampar 2014-01-02 10:59:53 +01:00
  • 0b4fcb6845 Fix for an Issue #591 Miroslav Stampar 2014-01-02 10:55:40 +01:00
  • 854a55166c Fix for an Issue #588 Miroslav Stampar 2014-01-02 10:29:10 +01:00
  • 9b4b070ecf Minor cosmetics Miroslav Stampar 2014-01-02 10:05:58 +01:00
  • 192a911b76 Patch for an Issue #28 Miroslav Stampar 2013-12-29 16:16:50 +01:00
  • 41d6c1af82 Patch for an Issue #589 Miroslav Stampar 2013-12-28 13:47:40 +01:00
  • 6c80f2903b Patch for an Issue #564 Miroslav Stampar 2013-12-27 11:02:59 +01:00
  • 178056968f Cleaning a leftover (deleted) made for Issue #564 Miroslav Stampar 2013-12-27 10:49:15 +01:00
  • cadbddd607 Adding a boundary proposed in Issue #564 Miroslav Stampar 2013-12-27 10:46:18 +01:00
  • 7718edac9b Fix for an Issue #570 Miroslav Stampar 2013-12-27 09:40:33 +01:00
  • 02de2aee6d Patch for an Issue #582 Miroslav Stampar 2013-12-26 22:27:04 +01:00
  • ab64d385d6 Bug fix (stacked queries as in PgSQL and MsSQL DNS tunneling queries MUST end with the comment - not the recognized underlying technique's suffix) Miroslav Stampar 2013-12-25 22:18:57 +01:00
  • 2c2667b2be Minor patch for an Issue #575 Miroslav Stampar 2013-12-18 00:56:11 +01:00
  • fd6dcd8bf5 Merge pull request #583 from mattoufoutu/api Miroslav Stampar 2013-12-17 14:10:19 -08:00
  • 9ead80d707 Minor patch for Issue #585 Miroslav Stampar 2013-12-17 09:39:43 +01:00
  • f18abb1e9c Minor update (proxy can be also a https one (e.g. Burp for HTTPS targets) Miroslav Stampar 2013-12-17 09:30:51 +01:00
  • 7d8eb148ce Patch for an Issue #565 (DuckDuckGo doesn't like identity encoding) Miroslav Stampar 2013-12-17 09:30:04 +01:00
  • 4819e19200 Patch for an Issue #584 Miroslav Stampar 2013-12-16 22:00:47 +01:00
  • 4c9456dd72 moar logging! Mathieu Deous 2013-12-15 16:59:47 +01:00
  • 438ad73016 avoid names shadowing Mathieu Deous 2013-12-15 09:22:01 +01:00
  • eda9a3da67 all instance attributes should be defined in constructor Mathieu Deous 2013-12-15 09:16:38 +01:00
  • 3effaee2a1 avoid using global variables, use a "store" class Mathieu Deous 2013-12-15 00:19:58 +01:00
  • c70f2a4e6d unused imports Mathieu Deous 2013-12-15 00:00:08 +01:00
  • aa02019638 return file content in a json message when calling download endpoint Mathieu Deous 2013-12-14 16:33:17 +01:00
  • c87ad1bab5 make returned values more coherent Mathieu Deous 2013-12-14 16:22:30 +01:00
  • 72137e85f9 do not reset options when firing a scan Mathieu Deous 2013-12-14 15:59:47 +01:00
  • af7ad31182 fix commit method usage (belongs to connection, not cursor) Mathieu Deous 2013-12-14 15:58:09 +01:00
  • c5a3f54b89 remove unused imports Mathieu Deous 2013-12-14 15:47:26 +01:00
  • 8a946509b9 PEP8 Mathieu Deous 2013-12-14 15:44:10 +01:00
  • 5b2ded0b18 Fix for an Issue #577 Miroslav Stampar 2013-12-13 21:00:26 +01:00
  • 437278e32d Fix for an Issue #580 Miroslav Stampar 2013-12-13 19:48:05 +01:00
  • 93628cdd62 Merge pull request #578 from mattoufoutu/master Miroslav Stampar 2013-12-09 04:52:34 -08:00
  • c3dd6e1e32 api's get_option function doesn't lookup the right object Mathieu Deous 2013-12-08 17:46:02 +01:00
  • a06a6de193 minor bug fix Bernardo Damele 2013-12-06 13:26:34 +00:00
  • b7244a07cb Changing testing payload for MsSQL (BINARY_CHECKSUM seems to be blocked in some cases) Miroslav Stampar 2013-12-04 11:32:42 +01:00
  • b0ca34ff27 Bug fix (payload character '=' was not being url-encoded in custom (user) post cases - when posthint was None) Miroslav Stampar 2013-12-04 10:09:54 +01:00
  • bf3fbb0ae0 Ignore Google analytics cookies Miroslav Stampar 2013-12-04 09:56:37 +01:00
  • dd2ddec79a Minor fix (better extraction of original value in case of replacement and custom POST injection mark) Miroslav Stampar 2013-12-03 13:37:04 +01:00
  • 59d667d94c Minor update Miroslav Stampar 2013-12-01 22:25:12 +01:00
  • 663b1e711b Bug fix Miroslav Stampar 2013-12-01 21:22:29 +01:00
  • 07bd22fa80 Minor fix Miroslav Stampar 2013-12-01 21:03:30 +01:00
  • 7054586e8a Update for an Issue #565 (more work TBD - DuckDuckGo has some kind of IP blocking mechanism) Miroslav Stampar 2013-11-25 20:57:07 +01:00
  • 24e67289c8 Bug fix Miroslav Stampar 2013-11-25 11:57:20 +01:00
  • cda27ec20b Patch for an Issue #563 Miroslav Stampar 2013-11-24 15:01:26 +01:00
  • 59b6791faa minor improvement Bernardo Damele 2013-11-19 00:24:47 +00:00
  • c37ad88283 minor bug fix Bernardo Damele 2013-11-13 14:34:19 +00:00
  • 3c67ba08c5 Minor fix Miroslav Stampar 2013-11-12 14:53:05 +01:00
  • 354aaeae5b Removing unused imports Miroslav Stampar 2013-11-12 14:11:07 +01:00
  • d84ddf23bd Replacing os.sep constructs with os.path.join Miroslav Stampar 2013-11-12 14:08:41 +01:00
  • 2f1607b4d5 Minor fix for dumping non-alphanumeric database names Miroslav Stampar 2013-11-12 13:13:47 +01:00
  • abd76081e1 Adding a new WAF script (varnish.py) Miroslav Stampar 2013-11-11 09:25:42 +01:00
  • 3ff01f5777 Adding new tamper script Miroslav Stampar 2013-11-09 00:23:34 +01:00
  • 0a4512e9ae Implementation for an Issue #557 Miroslav Stampar 2013-11-08 09:23:38 +01:00
  • ae4cd2ebed Minor update Miroslav Stampar 2013-11-07 08:29:32 +01:00
  • 48bd2e75e9 Minor patch Miroslav Stampar 2013-10-28 13:59:38 +01:00
  • 7ed05f01b3 Minor update Miroslav Stampar 2013-10-27 00:24:57 +02:00
  • fabbe63f00 Proper fix for re.sub() call with repl value containing backslash Miroslav Stampar 2013-10-23 18:07:38 +02:00
  • 28529a92a7 Minor fix (for parameters with \ in value) Miroslav Stampar 2013-10-23 10:49:50 +02:00
  • 9f21406a4b Using cPickle in BigArray (faster and potentially less memory used) Miroslav Stampar 2013-10-21 20:48:00 +02:00
  • 8dac47f7e5 Minor patch (for recognition of x-mac-turkish codec) Miroslav Stampar 2013-10-21 20:04:48 +02:00
  • e197720def Fix for an Issue #546 Miroslav Stampar 2013-10-19 20:54:52 +02:00
  • 2ee4b81a6e Minor fix Miroslav Stampar 2013-10-18 15:59:25 +02:00
  • 777d999e71 Minor update Miroslav Stampar 2013-10-18 15:39:46 +02:00
  • 5aaf18f556 Minor update Miroslav Stampar 2013-10-18 15:26:55 +02:00
  • 7104e00c95 Minor update Miroslav Stampar 2013-10-18 14:46:57 +02:00
  • 378ce46061 NVARCHAR is not supported on Sybase Adaptive Server Bernardo Damele 2013-10-18 12:23:50 +01:00
  • 6ff2b931ff Another patch for an Issue #545 Miroslav Stampar 2013-10-17 23:42:51 +02:00
  • 334c698d53 Adding change verbosity level in testing phase when Ctrl+C pressed Miroslav Stampar 2013-10-17 16:54:53 +02:00
  • 304c9822bd Patch for an Issue #545 Miroslav Stampar 2013-10-17 16:38:07 +02:00
  • 7cb7c6361f Minor fix (Sybase Adaptive Server Anywhere doesn't have support for tempdb_id()) Miroslav Stampar 2013-10-17 16:04:55 +02:00
  • 5b8d631dc0 Minor update Miroslav Stampar 2013-10-16 11:48:00 +02:00
  • 04dbee3bec Update for a more generic JSON recognition regex Miroslav Stampar 2013-10-16 11:39:04 +02:00
  • ebccba922b Fix for an Issue #543 Miroslav Stampar 2013-10-16 11:25:26 +02:00
  • 72c79a4891 Merge pull request #544 from moshekaplan/patch-1 Bernardo Damele A. G. 2013-10-15 12:28:39 -07:00
  • 8cd641a2a6 minor typos corrected Moshe Kaplan 2013-10-15 13:26:24 -04:00
  • d7906e8f18 Minor fix Miroslav Stampar 2013-10-15 09:49:27 +02:00
  • 344d3f4b5f Minor patch Miroslav Stampar 2013-10-12 21:05:18 +02:00
  • b8d49c2ea2 Minor usability patch Miroslav Stampar 2013-10-12 20:41:25 +02:00
  • 98d27ef200 Bug fix (missing permissions when creating dump directory) Miroslav Stampar 2013-10-11 21:16:48 +02:00
  • 16e803c3ca Merge pull request #539 from bbuchacher/master Miroslav Stampar 2013-10-11 00:10:15 -07:00
  • 54a6c01005 Fix - Custom objects cannot be serialized in JSON Ben Buchacher 2013-10-10 16:06:29 -07:00
  • 4c39235c2f Minor revert (5->3) Miroslav Stampar 2013-10-11 00:39:44 +02:00
  • 6305c1e703 Making a comma-less RLIKE payload Miroslav Stampar 2013-10-11 00:39:11 +02:00
  • dbaa35f9fe Minor fix Miroslav Stampar 2013-10-10 23:53:43 +02:00
  • 2dc570d7a8 Minor patch (for ORDER BY 'col' cases) Miroslav Stampar 2013-10-10 23:08:20 +02:00
  • dd87233fe4 Minor patch (to accept * inside urls in request files too) Miroslav Stampar 2013-10-10 15:04:48 +02:00
  • 369006ca73 Bug fix Miroslav Stampar 2013-10-07 12:54:19 +02:00
  • 7e35eb08d2 minor update Bernardo Damele 2013-10-07 11:39:23 +01:00
  • 53b07c5398 Merge pull request #536 from za/master Bernardo Damele A. G. 2013-10-06 22:33:48 -07:00
  • 3f71c77601 adding more words at site:id common-columns Zaki Akhmad 2013-10-07 10:26:16 +07:00
  • 18d9e1dbc3 Minor update due to reported (debug) problems with SSLv23 Miroslav Stampar 2013-10-04 10:53:49 +02:00
  • a944028114 Revert of last commit Miroslav Stampar 2013-10-02 22:14:50 +02:00
  • 9ceb518a50 Minor patch Miroslav Stampar 2013-10-02 22:03:53 +02:00
  • 8e2f4669d8 Removing dependency for bz2 as there are some reported problems with the library on non-standard platforms Miroslav Stampar 2013-10-02 20:32:18 +02:00
  • 45c88b36c6 Fix for an Issue #532 Miroslav Stampar 2013-09-30 09:33:14 +02:00
  • 1f2e5a91b5 Merge pull request #530 from za/master Miroslav Stampar 2013-09-26 06:41:09 -07:00
  • 53a2fc23a0 add site:id common-columns Zaki Akhmad 2013-09-26 20:32:58 +07:00
  • 6f2c89bd7c Fix for an Issue #529 Miroslav Stampar 2013-09-25 10:22:23 +02:00