Commit Graph

  • 00449f1402 fix/upgrade/chicken soup Miroslav Stampar 2010-10-20 09:54:17 +00:00
  • e24bff0497 nice refactoring Miroslav Stampar 2010-10-20 09:46:57 +00:00
  • 5d3cbec457 no more regex. web server independent. Miroslav Stampar 2010-10-20 09:35:46 +00:00
  • 934adb5e8d code refactoring Miroslav Stampar 2010-10-20 09:09:04 +00:00
  • b032fdbf74 added randInt to error injection vectors Miroslav Stampar 2010-10-20 08:56:58 +00:00
  • dabbcf9e23 fix for that 'Subquery returns more than 1 row' Miroslav Stampar 2010-10-20 08:50:05 +00:00
  • 82f44989ce update of error based injection and bug fix for --roles on MSSQL server Miroslav Stampar 2010-10-20 06:40:33 +00:00
  • f2dae98448 fix for MySQL error queries Miroslav Stampar 2010-10-19 23:30:08 +00:00
  • 0817d1b78d Cosmetics Bernardo Damele 2010-10-19 23:09:30 +00:00
  • 8776db872c minor refactoring Miroslav Stampar 2010-10-19 23:05:24 +00:00
  • 1b376c99a6 removed temp dictionary and replaced with kb.misc Miroslav Stampar 2010-10-19 23:00:19 +00:00
  • 813f44da16 Minor bug fix for MSSQL connector --tables option Bernardo Damele 2010-10-19 22:11:17 +00:00
  • 7927e97007 update Miroslav Stampar 2010-10-19 18:34:57 +00:00
  • 415524bd5a remove --error, now it's only --error-test (it needs to return True to be able to use it) Miroslav Stampar 2010-10-19 18:34:14 +00:00
  • 8d9201a3dc minor update Miroslav Stampar 2010-10-19 18:23:21 +00:00
  • 4009ef385e more update regarding error based injection support Miroslav Stampar 2010-10-19 18:17:34 +00:00
  • b2e0b615f8 fix for that MySQL checking Miroslav Stampar 2010-10-19 17:38:39 +00:00
  • 34d7de1d46 cosmetics Miroslav Stampar 2010-10-19 15:28:54 +00:00
  • d7622bb9cf major fix for MySQL error based injections Miroslav Stampar 2010-10-19 15:17:16 +00:00
  • 1fce9683f8 now --users work for MSSQL too Miroslav Stampar 2010-10-19 15:05:32 +00:00
  • 80505de15b now --users work on Oracle and Postgre (tested) Miroslav Stampar 2010-10-19 14:56:57 +00:00
  • 4bc541ec3c error based update Miroslav Stampar 2010-10-19 14:47:13 +00:00
  • d0ebe428da i've left error flag Miroslav Stampar 2010-10-19 14:12:34 +00:00
  • bf850af2d8 fix for Oracle error based query "space" problem Miroslav Stampar 2010-10-19 14:10:09 +00:00
  • 878135fe40 minor fix Miroslav Stampar 2010-10-19 14:00:27 +00:00
  • 6a8b1046d4 first successfull run of error based sqlmap in history :). tested --banner, --current-user, --current-db on 4 major DBMSes. still hidden from users (turn on flag error in getValue() in inject.py) Miroslav Stampar 2010-10-19 12:02:04 +00:00
  • 0c286d8db2 minor update Miroslav Stampar 2010-10-19 09:17:01 +00:00
  • ccda92536f added header Miroslav Stampar 2010-10-19 09:13:30 +00:00
  • 264e0a6fda added support for displaying revision number at unhandled exception message Miroslav Stampar 2010-10-19 08:55:14 +00:00
  • 9a7fd29d4f using pushValue and popValue Miroslav Stampar 2010-10-18 22:22:41 +00:00
  • a97319656c optimization - now if DBMS was detected by error based HTML parser, then it's moved at the first place for testing Miroslav Stampar 2010-10-18 21:47:11 +00:00
  • 729156e91c proper fix Miroslav Stampar 2010-10-18 21:39:46 +00:00
  • 3d5494845c minor bug fix Miroslav Stampar 2010-10-18 21:32:50 +00:00
  • d123bb741a added error based queries for MySQL, Postgre, MS SQL and Oracle Miroslav Stampar 2010-10-18 21:26:13 +00:00
  • 8b8fff41fe cosmetics (adding html parsed DBMS) regarding heuristic check Miroslav Stampar 2010-10-18 12:11:16 +00:00
  • 955ae5cd2e Fixed svn:keywords Bernardo Damele 2010-10-18 12:09:59 +00:00
  • 351a7f5769 setting property Id Miroslav Stampar 2010-10-18 11:43:00 +00:00
  • 3570b4a705 minor fix Miroslav Stampar 2010-10-18 11:41:17 +00:00
  • fff7fe83c1 new tamper script Miroslav Stampar 2010-10-18 11:39:28 +00:00
  • 1d74036ee3 Minor cosmetic fixes Bernardo Damele 2010-10-18 11:34:53 +00:00
  • 1a9aabf49d Minor fix Bernardo Damele 2010-10-18 10:40:05 +00:00
  • c6cd8ae72b Added another tamper script Bernardo Damele 2010-10-18 10:34:38 +00:00
  • 36bc410333 Minor bug fix Bernardo Damele 2010-10-18 09:50:23 +00:00
  • 6b70dadfb2 minor cosmetics Miroslav Stampar 2010-10-18 09:09:22 +00:00
  • 149837ebf5 added the same for proxy authorization header Miroslav Stampar 2010-10-18 09:02:56 +00:00
  • aaebb4336e fix for Bug #202 Miroslav Stampar 2010-10-18 08:54:08 +00:00
  • 683184cc8f Minor refactoring Bernardo Damele 2010-10-17 21:06:52 +00:00
  • 60a1b48194 Major bug fix for --os-pwn Bernardo Damele 2010-10-17 20:44:16 +00:00
  • 73ececd903 added that "default" "Connection: keep-alive" header Miroslav Stampar 2010-10-17 06:44:54 +00:00
  • cd0fe8dde0 Updated sample configuration file and cmdline help Bernardo Damele 2010-10-17 00:07:53 +00:00
  • 64b9f94fcf Renamed --common-prediction switch to --predict-output Bernardo Damele 2010-10-16 23:50:13 +00:00
  • f54c134d22 Minor adjustment Bernardo Damele 2010-10-16 22:43:05 +00:00
  • 6211915da5 Cosmetic fix Bernardo Damele 2010-10-16 22:31:16 +00:00
  • cfa5655150 Updated changelog Bernardo Damele 2010-10-16 22:23:53 +00:00
  • 7b71262de6 Cosmetic fix Bernardo Damele 2010-10-16 22:07:29 +00:00
  • a2997a6dce Minor bug fix to --tamper Bernardo Damele 2010-10-16 21:55:34 +00:00
  • 2129935e06 Split character for tamper scripts (--tamper option) is now comma, not semi-colon. Minor enhancement Bernardo Damele 2010-10-16 21:52:16 +00:00
  • 2dae934a2b Minor bug fixes, code refactoring and enhanced --tamper functionality Bernardo Damele 2010-10-16 21:33:15 +00:00
  • 5c3d21065a bug fix (reported by nightman) Miroslav Stampar 2010-10-16 21:29:35 +00:00
  • 2b60304933 update Miroslav Stampar 2010-10-16 21:19:44 +00:00
  • 84ed7f192a Cosmetic fixes Bernardo Damele 2010-10-16 15:10:48 +00:00
  • 1336b97c2c removed --useBetween switch and added new tampering module ./tamper/between.py Miroslav Stampar 2010-10-15 23:48:07 +00:00
  • 1ae4d0fc2a added optimization group Miroslav Stampar 2010-10-15 23:26:48 +00:00
  • e7c8be1d45 Minor layout adjustments Bernardo Damele 2010-10-15 15:37:15 +00:00
  • c9f0c75030 removed --space (usage of tampering modules is now a prefered way to do it) Miroslav Stampar 2010-10-15 12:52:33 +00:00
  • d0514d18ec removed that spaces from URI payloads Miroslav Stampar 2010-10-15 12:49:03 +00:00
  • bf56f8c63c Cosmetic fix Bernardo Damele 2010-10-15 12:46:41 +00:00
  • dcb9c2103a just in case update Miroslav Stampar 2010-10-15 11:20:19 +00:00
  • 5f6d88a418 Minor comment Bernardo Damele 2010-10-15 11:17:17 +00:00
  • 2fa8836c01 bug fix Miroslav Stampar 2010-10-15 11:14:59 +00:00
  • d50684a057 added one more check Miroslav Stampar 2010-10-15 11:05:50 +00:00
  • 2b476e078c minor cosmetics Miroslav Stampar 2010-10-15 10:36:29 +00:00
  • bd3a791f23 Updated documentation Bernardo Damele 2010-10-15 10:29:53 +00:00
  • a80f6110cd don't call variables 'file', it's a reserved word :) Bernardo Damele 2010-10-15 10:29:24 +00:00
  • c5e385f77a More layout adjustments Bernardo Damele 2010-10-15 10:28:34 +00:00
  • 9fcab68700 Minor adjustments Bernardo Damele 2010-10-15 10:28:06 +00:00
  • 0a378c1078 Removed useless code Bernardo Damele 2010-10-15 10:25:43 +00:00
  • 48cc8a308d More verbose messages on successful --null-connection Bernardo Damele 2010-10-15 10:24:54 +00:00
  • 8883918ef9 cosmetics Miroslav Stampar 2010-10-15 10:03:51 +00:00
  • 743e6d2655 cosmetics Miroslav Stampar 2010-10-15 10:02:09 +00:00
  • 0f48dd6f73 fix for skipping non-GET urls Miroslav Stampar 2010-10-15 09:54:29 +00:00
  • 207bef7f19 fix for that SQLite3 vs SQLite2 issue Miroslav Stampar 2010-10-15 09:39:41 +00:00
  • d0df8cdac9 fix for that duplicates Miroslav Stampar 2010-10-15 00:34:16 +00:00
  • 4f7f20b94f sorry, cosmetics Miroslav Stampar 2010-10-14 23:18:29 +00:00
  • 1674142d82 Minor cosmetic fixes Bernardo Damele 2010-10-14 15:28:54 +00:00
  • 2bbe0c9ba6 bug fix for Ctrl+C Miroslav Stampar 2010-10-14 15:23:42 +00:00
  • 581cc8d29c reverting due to unsuccesfull test results Miroslav Stampar 2010-10-14 15:13:36 +00:00
  • c14905cd6e only testing Miroslav Stampar 2010-10-14 15:04:42 +00:00
  • 51421ba312 added Id property Miroslav Stampar 2010-10-14 14:53:50 +00:00
  • 8b48833136 large commit with copyright header modifications Miroslav Stampar 2010-10-14 14:41:14 +00:00
  • a63c2c9f7c just a test Miroslav Stampar 2010-10-14 14:16:45 +00:00
  • 780486306b forgot to put "#!/usr/bin/env python" Miroslav Stampar 2010-10-14 14:05:05 +00:00
  • d970e260b9 introducing new style for copyright header Miroslav Stampar 2010-10-14 14:02:43 +00:00
  • f07608ef4d show static words in a sorted manner Miroslav Stampar 2010-10-14 12:38:06 +00:00
  • 255b21f2f4 minor bug fix Miroslav Stampar 2010-10-14 11:12:03 +00:00
  • 162d01abed commit of all sorts (bug fix for heuristics and URI injections, fine tunning of tampering modules with SQL keywords,...) Miroslav Stampar 2010-10-14 11:06:28 +00:00
  • cf73d9c799 minor update Miroslav Stampar 2010-10-14 06:40:56 +00:00
  • 058e1aecb4 minor update Miroslav Stampar 2010-10-14 06:20:32 +00:00
  • 7e1f784eaa cosmetic update Miroslav Stampar 2010-10-14 06:00:10 +00:00
  • dc50543ea4 major bug fix for --keep-alive option in multithreading mode (that 'shitty' _headers = {} made a one shared object for all connection objects) Miroslav Stampar 2010-10-13 23:01:23 +00:00