7a5cd3b35f
minor comment update
2010-12-05 11:15:09 +00:00
618b3b0211
Cosmetics
2010-12-05 11:05:57 +00:00
9e5f933ace
some updates
2010-12-04 15:47:02 +00:00
1f795622b3
some fine tuning of dynamicity removing engine
2010-12-04 13:39:35 +00:00
eeb199375b
usage of compiled regexes in case of dynamic markings and other refactoring
2010-12-04 13:23:28 +00:00
0fc7a8f9e8
code refactoring
2010-12-04 10:13:18 +00:00
04714374f9
now you can use kb.pageTemplate to set a page which will be used as a template in comparison process (at least in '-[RANDNUM] OR' cases we'll need to use different template(s))
2010-12-04 10:05:18 +00:00
0e6359ab6e
Minor layout adjustment
2010-12-03 16:11:35 +00:00
6e73adec47
Get rid of one useless attribute
2010-12-03 16:11:13 +00:00
11058667e4
Better naming
2010-12-03 14:45:13 +00:00
b824826a89
Minor enhancement to prefix payload in ORDER BY and GROUP BY clauses
2010-12-03 14:39:51 +00:00
bb40ab9fb0
Major bug fix for default boolean-based vector still work and minor adjustments
2010-12-03 14:31:11 +00:00
612ee08a0b
added response time kb attribute
2010-12-03 13:19:34 +00:00
4dec049c22
Major bug fix for test on ORDER BY and GROUP BY clauses.
...
Minor bug fix to skip following tests if they do not match any of the clause previously identified (injection.clause value).
2010-12-03 12:00:03 +00:00
7d6f51f758
Avoid blank space between prefix and test's payload if it's a stacked queries test
2010-12-03 10:42:46 +00:00
283a04e29a
On my way to properly parse test's <where> tag in exploitation phase
2010-12-01 23:32:58 +00:00
089c16a1b8
Added tag <epayload> to the payloads.xml's <test> tag to define which payload to use when exploiting the test type.
...
Removed some useless tests.
Moved <error> from queries.xml to payloads.xml as it makes more sense.
Beeps at sql inj found only if --beep is provided.
Minor fix in order to be able to pickle advancedDict() objects.
Minor code refactoring.
Removed useless folders.
2010-12-01 17:09:52 +00:00
56d2b2f322
Avoid storing to session file also payload delimiters
2010-12-01 10:55:59 +00:00
8d84dcc5dc
More sense
2010-12-01 09:17:17 +00:00
c8f943f5e4
Now, if the back-end dbms type has been identified by the detection engine, skips the fingerprint phase.
...
Major code refactoring and commenting to detection engine.
Ask user whether or not to proceed to test remaining parameters after an injection point has been identified.
Restore beep at SQL injection find.
Avoid reuse of same variable in DBMS handler code.
Minor adjustment of payloads XML file.
2010-11-30 22:40:25 +00:00
fcdebbd55f
cosmeticados
2010-11-30 14:48:13 +00:00
47a7708950
minor improvement of dynamic content detection/removal part
2010-11-30 12:45:42 +00:00
8b9706656e
Got rid of unreliable 'ORDER BY' technique to detect UNION query SQL injection, consequently switch --union-tech has gone now.
...
Minor code refactoring too.
2010-11-29 17:18:38 +00:00
e9291932e5
Apply --level also to User-Agent (level >= 4) and Cookie (level >= 3).
...
GET and POST parameters are always tested.
2010-11-29 16:33:20 +00:00
e735f2960a
minor update
2010-11-29 15:25:45 +00:00
c76d740a25
just a precaution
2010-11-29 15:21:56 +00:00
70e87d959e
update of dynamicity engine
2010-11-29 15:14:49 +00:00
ee4e04ebca
Minor adjustment
2010-11-29 15:09:40 +00:00
2efb3b78ea
Consider also --dbms value during the detection phase
2010-11-29 14:48:07 +00:00
be6df7abd9
improvement of dynamicity engine
2010-11-29 14:30:57 +00:00
76ce9cc888
Minor bug fix for --forms
2010-11-29 12:46:18 +00:00
6525e08d6b
Minor adjustment to detect the proper parameter type based upon --prefix and --suffix values
2010-11-29 12:13:42 +00:00
c22338ce90
Removed --error-test, --stacked-test and --time-test switches and adapted the code accordingly. This is due to the fact that the new XML based detection engine already supports all of those tests (and more).
2010-11-29 11:47:58 +00:00
9d7087e2ff
Proper saving and resuming when more than a parameter are injectable.
...
Minor bug fix to --stacked-test
Minor code refactoring.
2010-11-29 01:04:42 +00:00
75f7df75b6
Minor fix
2010-11-28 23:33:51 +00:00
472f4465a6
Prioritize DBMS fingerprint based on DBMS (<dbms>) identified during the detection phase.
...
Minor bug fix to properly handle the case that no injections are found.
Nicer display of injection vulnerabilities detected.
Minor code refactoring.
2010-11-28 21:27:47 +00:00
7e3b24afe6
Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own.
...
All (hopefully) functionalities should still be working.
Added two switches, --level and --risk to specify which injection tests and boundaries to use.
The main advantage now is that sqlmap is able to identify initially which injection types are present so for instance if boolean-based blind is not supported, but error-based is, sqlmap will keep going and work!
2010-11-28 18:10:54 +00:00
17486e472a
Proper english (--postfix is now --suffix) and --string/--regexp does not necessarily need to match into the original response body, it might well be in the injected True condition only!
2010-11-17 22:00:09 +00:00
6232397129
minor update
2010-11-16 10:52:49 +00:00
6ef3846400
update regarding error parsing (and reporting)
2010-11-16 10:42:42 +00:00
b3ad63b71e
major bug fix (haven't applied dynamic content removal to the original comparison (conf.seqMatcher.a) page)
2010-11-15 14:59:37 +00:00
39c6c9f386
minor update
2010-11-15 12:19:22 +00:00
c25c017c08
cosmetics regarding --forms
2010-11-15 11:50:33 +00:00
36c544f440
update (--forms acts now more like -g switch)
2010-11-15 11:34:57 +00:00
a0fb96816f
fix for a bug reported by ToR (value += actVer)
2010-11-14 08:31:29 +00:00
84849316b3
improvement of heuristic check (now original value is included too)
2010-11-12 23:06:01 +00:00
0d66f101da
fix for a bug reported by Bugtrace (--string "pengcheng_cui" and "Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource" on False pages)
2010-11-12 22:29:33 +00:00
2d872f850a
quick fix
2010-11-11 19:54:54 +00:00
24238ccd0b
re-renaming of brute force switches. this way is better.
2010-11-11 07:57:44 +00:00
96d88877ba
bug fix (reported by ToR)
2010-11-10 19:44:51 +00:00
Miroslav Stampar