Bernardo Damele 8b9706656e Got rid of unreliable 'ORDER BY' technique to detect UNION query SQL injection, consequently switch --union-tech has gone now. ...

Minor code refactoring too.

2010-11-29 17:18:38 +00:00

..

contrib

removed all trailing spaces from blank lines

2010-11-03 10:08:27 +00:00

controller

Got rid of unreliable 'ORDER BY' technique to detect UNION query SQL injection, consequently switch --union-tech has gone now.

2010-11-29 17:18:38 +00:00

core

Got rid of unreliable 'ORDER BY' technique to detect UNION query SQL injection, consequently switch --union-tech has gone now.

2010-11-29 17:18:38 +00:00

parse

Got rid of unreliable 'ORDER BY' technique to detect UNION query SQL injection, consequently switch --union-tech has gone now.

2010-11-29 17:18:38 +00:00

request

minor update

2010-11-29 15:25:45 +00:00

takeover

Removed --error-test, --stacked-test and --time-test switches and adapted the code accordingly. This is due to the fact that the new XML based detection engine already supports all of those tests (and more).

2010-11-29 11:47:58 +00:00

techniques

Got rid of unreliable 'ORDER BY' technique to detect UNION query SQL injection, consequently switch --union-tech has gone now.

2010-11-29 17:18:38 +00:00

utils

Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own.

2010-11-28 18:10:54 +00:00

__init__.py

sorry, cosmetics

2010-10-14 23:18:29 +00:00