Commit Graph

3884 Commits

Author SHA1 Message Date
Miroslav Stampar 119eec3598 improving "boolean detection" by automatic recognition of convenient --string candidate 2012-04-10 21:48:34 +00:00
Miroslav Stampar 698b7a15d9 minor update 2012-04-07 14:14:26 +00:00
Miroslav Stampar 8c6eb4faa9 adding support for PgSQL DNS data exfiltration 2012-04-07 14:06:11 +00:00
Miroslav Stampar b2afa87e48 reading page responses in chunks, trimming unnecessary content (especially for large table dumps in full inband cases) 2012-04-06 08:42:36 +00:00
Miroslav Stampar 2223c884e5 minor refactoring 2012-04-05 12:55:26 +00:00
Miroslav Stampar 02924eb345 minor update 2012-04-04 23:47:06 +00:00
Miroslav Stampar e0994947e2 minor update 2012-04-04 23:37:50 +00:00
Miroslav Stampar b1dd03731a minor cosmetics 2012-04-04 23:34:08 +00:00
Miroslav Stampar 83387d92bb minor bug fix 2012-04-04 23:32:20 +00:00
Miroslav Stampar c89a4162e2 bug fix for --dns-domain with --technique=TS 2012-04-04 18:01:39 +00:00
Bernardo Damele 80228f67f6 removed newline 2012-04-04 13:49:03 +00:00
Bernardo Damele e23efabf86 removed unuseful spaces 2012-04-04 13:36:18 +00:00
Bernardo Damele c051d7fecc Prefer xp_dirtree 2012-04-04 13:29:25 +00:00
Miroslav Stampar 098c7c06dd added few comments 2012-04-04 13:24:58 +00:00
Miroslav Stampar a5b69eaea4 removing unused imports 2012-04-04 13:18:14 +00:00
Bernardo Damele 52796bb4da revert 2012-04-04 13:02:50 +00:00
Miroslav Stampar a4b95ab7dd works against MySQL/Windows 2012-04-04 12:49:45 +00:00
Bernardo Damele a1d97e9d7b Add a space after a comment 2012-04-04 12:48:21 +00:00
Bernardo Damele 025c531d22 leftover 2012-04-04 12:44:25 +00:00
Bernardo Damele c0946ce2c9 Minor refactoring 2012-04-04 12:42:58 +00:00
Bernardo Damele 75d1dab895 more cosmetics 2012-04-04 12:33:16 +00:00
Bernardo Damele d106fb5184 layout adjustments 2012-04-04 12:27:24 +00:00
Miroslav Stampar 1b2cd44255 proper fix 2012-04-04 10:35:52 +00:00
Miroslav Stampar 7031ef8e00 removing default values for referer and host from higher level/risk options 2012-04-04 10:34:27 +00:00
Bernardo Damele 1f82d29a36 switch two conditional payloads for proper detection 2012-04-04 10:11:48 +00:00
Miroslav Stampar 5e358b51f9 few fixes related to bug report by Shadow Folder (AttributeError: 'list' object has no attribute 'isdigit') 2012-04-04 09:25:05 +00:00
Bernardo Damele d5b4b7996a minor revert 2012-04-04 00:09:47 +00:00
Bernardo Damele 049c27c739 improved detection for INSERT and UPDATE statements 2012-04-03 23:29:06 +00:00
Miroslav Stampar 11546cdb6e minor refactoring 2012-04-03 19:09:35 +00:00
Miroslav Stampar 5851badff1 minor refactoring 2012-04-03 14:46:09 +00:00
Miroslav Stampar b0787f193c getting rid of obsolete getCompiledRegex (in newer versions of Python regexes are already cached) 2012-04-03 14:34:15 +00:00
Miroslav Stampar 556b349be3 minor fix for retrieving non-printable chars in inference and non-multi threading mode 2012-04-03 14:04:07 +00:00
Miroslav Stampar 33bb9c5f19 much cleaner approach in that "flat" representation of retrieved items in union technique 2012-04-03 13:56:11 +00:00
Miroslav Stampar 7fb190f3b1 minor fix 2012-04-03 12:35:19 +00:00
Miroslav Stampar 886aa22efc minor update 2012-04-03 12:19:37 +00:00
Miroslav Stampar 503988887c minor update 2012-04-03 10:43:46 +00:00
Miroslav Stampar 78f51fd2e5 minor fix 2012-04-03 10:18:03 +00:00
Miroslav Stampar 2504f4edb8 minor fixes 2012-04-03 10:10:33 +00:00
Miroslav Stampar e05109812f minor improvements regarding data retrieval through DNS channel 2012-04-03 09:18:30 +00:00
Miroslav Stampar 46cfa64d81 minor update 2012-04-02 21:06:57 +00:00
Miroslav Stampar 5f94987b0f fix for DNS method for MSSQL 2012-04-02 17:28:18 +00:00
Miroslav Stampar 2c28423cb8 minor update 2012-04-02 14:57:15 +00:00
Miroslav Stampar 8a9d09f79b minor fixes 2012-04-02 14:11:23 +00:00
Miroslav Stampar 1cd3c3f7af further update of DNS data retrieval mechanism through SQLi 2012-04-02 14:05:30 +00:00
Miroslav Stampar 1e01203562 few just in case "patches" 2012-04-02 12:58:10 +00:00
Miroslav Stampar d908d078dd minor fix 2012-04-02 12:27:30 +00:00
Miroslav Stampar abffc39929 minor update regarding DNS data retrieval task 2012-04-02 12:22:40 +00:00
Miroslav Stampar f7a664b120 enablind DNS server for DNS data exfiltration 2012-03-31 12:08:27 +00:00
Miroslav Stampar 8be9cd4ac4 bug fix (on Linux machine when os.geteuid() returns an integer value !=0 it was then returned and interpreted as TRUE value) 2012-03-31 10:22:50 +00:00
Bernardo Damele 40a7232de6 Minor fix to avoid useless tests (FROM DUAL is Oracle specific so no point using + to concatenate strings) 2012-03-30 16:27:08 +00:00