Commit Graph

739 Commits

Author SHA1 Message Date
Bernardo Damele 6f6cd676b7 clean up the file system from sqlmap created web files 2012-07-11 14:07:20 +01:00
Bernardo Damele 0c5f259481 var renaming 2012-07-11 13:39:33 +01:00
Miroslav Stampar 9c4a62f725 Some work on Issue #68 2012-07-11 11:58:47 +02:00
Miroslav Stampar 8caffac4bc conf.unescape->kb.unescape 2012-07-10 10:55:04 +02:00
Bernardo Damele 4656d23d82 increased verbosity level of some messages and removed a leftover 2012-07-10 01:43:19 +01:00
Bernardo Damele 00b7411a87 more adjustments for issue #33, of particular importance the fact that the user's provided statement from a file is never unescaped, should be ok 2012-07-10 01:39:03 +01:00
Bernardo Damele 2527554f8e more work on #33 2012-07-10 00:53:07 +01:00
Bernardo Damele c4af7b9aa0 initial work for issue #33 2012-07-10 00:27:08 +01:00
Bernardo Damele 25eca9d671 finally got this working on MSSQL 2005: commands can now be executed as another user (BULK INSERT must be used in such case, see comments in the code) - issue #34 2012-07-09 14:26:23 +01:00
Miroslav Stampar 86c27cc4f2 Merge branch 'master' of github.com:sqlmapproject/sqlmap 2012-07-06 17:28:13 +02:00
Miroslav Stampar e948e4d45b Some more refactoring 2012-07-06 17:18:22 +02:00
Bernardo Damele e673033ac1 minor layout adjustment 2012-07-06 15:26:45 +01:00
Bernardo Damele fb7fe552b7 proper naming 2012-07-06 15:13:50 +01:00
Miroslav Stampar 6a05e3fd79 Fix for Issue #61 2012-07-06 14:24:44 +02:00
Miroslav Stampar 27fdccc858 Update for Issue #55 (falling back to SELECT DB_NAME(N)) 2012-07-03 20:15:17 +02:00
Bernardo Damele ab412da27f I am back on stage and here to stay!!! to start.. a removal of confirm switch which masked cases where file write operations failed when set to False automatically, now at least it asks the user and defaults to Yes 2012-07-01 23:25:05 +01:00
Miroslav Stampar e51d3a02f1 Update for Issue #43 (renamed --disable-cracking to --disable-hash) 2012-06-28 18:53:47 +02:00
Miroslav Stampar c8bac658f3 Fix for Issue #43 2012-06-28 18:47:55 +02:00
jekil c39e5a85ba Removed $id$ tags 2012-06-27 20:56:43 +02:00
Miroslav Stampar 303aa10507 only a small update 2012-06-27 14:43:18 +02:00
Miroslav Stampar 06be7bbb18 few just in case fixes (unarrayizeValue in dumpTable entries) and and some refactoring (unique is now not done for every union case but only if detected that there are duplicates in union test) 2012-06-15 20:41:53 +00:00
Miroslav Stampar d5e80089ff minor summer cleanup 2012-06-14 13:44:16 +00:00
Miroslav Stampar 3a90105fbb minor refactoring 2012-06-14 13:38:53 +00:00
Miroslav Stampar 96177393e1 minor update regarding --exact switch 2012-06-10 13:38:12 +00:00
Miroslav Stampar 10b0639a96 making a "--exact" switch on demand (choosing exact identifier names by default instead of LIKE) 2012-06-04 09:24:46 +00:00
Miroslav Stampar 3f6bc1f3c2 minor fix 2012-05-24 18:05:33 +00:00
Miroslav Stampar 1e18168cc8 fix for one silent bug and small language update 2012-05-23 16:35:40 +00:00
Miroslav Stampar 0e8d8577a7 adding a DB2 patch from smcintyre@securestate.com 2012-05-21 08:26:19 +00:00
Miroslav Stampar 079e0e1434 minor bug fix 2012-05-18 08:51:50 +00:00
Miroslav Stampar 96299d3d5d minor refactoring 2012-05-03 22:34:18 +00:00
Miroslav Stampar 8013a64f8c minor refactoring 2012-05-01 19:57:30 +00:00
Miroslav Stampar c71d435d9f making "id"-like columns prioritized for ORDER BY in MySQL 2012-05-01 19:52:02 +00:00
Miroslav Stampar 458a73c9b4 few consistency fixes 2012-04-29 23:09:00 +00:00
Miroslav Stampar c7a606637f switching few readInput defaults for brute forcing when no table/column found 2012-04-27 12:59:22 +00:00
Bernardo Damele 4da03d898e Added support to create files with a visual basic script - no longer reliant on debug.exe so works on Windows 64-bit too. Fixes #236 2012-04-25 07:40:42 +00:00
Bernardo Damele 6116853025 Minor layout adjustments 2012-04-24 17:01:24 +00:00
Bernardo Damele 072e08836f Falling back to unionReadFile() when --file-read does not work against MySQL. This happens when the session user does not have INSERT privilege, required to run LOAD DATA INFILE 2012-04-19 14:05:45 +00:00
Miroslav Stampar 5e358b51f9 few fixes related to bug report by Shadow Folder (AttributeError: 'list' object has no attribute 'isdigit') 2012-04-04 09:25:05 +00:00
Miroslav Stampar b0787f193c getting rid of obsolete getCompiledRegex (in newer versions of Python regexes are already cached) 2012-04-03 14:34:15 +00:00
Miroslav Stampar 886aa22efc minor update 2012-04-03 12:19:37 +00:00
Miroslav Stampar f7a664b120 enablind DNS server for DNS data exfiltration 2012-03-31 12:08:27 +00:00
Miroslav Stampar 645fc8a21c minor refactoring 2012-03-27 08:31:48 +00:00
Miroslav Stampar 72c5b034bf minor update 2012-03-19 11:50:38 +00:00
Miroslav Stampar cb8caf7e0f i am not very bright today :) 2012-03-19 11:23:23 +00:00
Miroslav Stampar d5915e5d44 one other fix 2012-03-19 11:19:26 +00:00
Miroslav Stampar 7abfa2e6d4 minor fix 2012-03-19 11:18:00 +00:00
Miroslav Stampar cce5c3c009 minor changes for version numbers 2012-03-19 11:07:03 +00:00
Bernardo Damele 48e8c978fb Minor fix, way more to do for --search -C for MSSQL 2012-03-15 17:55:49 +00:00
Bernardo Damele 0013b0970f Minor layout adjustments - foundDb is misleading at that stage 2012-03-15 16:07:16 +00:00
Miroslav Stampar 8cf5d260fd Application Data is not a temporary directory writable by everybody 2012-03-14 23:44:29 +00:00