5764816891
minor cosmetics
2010-12-03 22:28:09 +00:00
11058667e4
Better naming
2010-12-03 14:45:13 +00:00
22de82634a
Important update to parse correctly the <where> tag during exploitation phase.
...
Minor code cleanup.
2010-12-03 10:44:16 +00:00
283a04e29a
On my way to properly parse test's <where> tag in exploitation phase
2010-12-01 23:32:58 +00:00
089c16a1b8
Added tag <epayload> to the payloads.xml's <test> tag to define which payload to use when exploiting the test type.
...
Removed some useless tests.
Moved <error> from queries.xml to payloads.xml as it makes more sense.
Beeps at sql inj found only if --beep is provided.
Minor fix in order to be able to pickle advancedDict() objects.
Minor code refactoring.
Removed useless folders.
2010-12-01 17:09:52 +00:00
025361c970
Higher precedence to union query sql inj than error-based
2010-12-01 10:57:17 +00:00
472f4465a6
Prioritize DBMS fingerprint based on DBMS (<dbms>) identified during the detection phase.
...
Minor bug fix to properly handle the case that no injections are found.
Nicer display of injection vulnerabilities detected.
Minor code refactoring.
2010-11-28 21:27:47 +00:00
7e3b24afe6
Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own.
...
All (hopefully) functionalities should still be working.
Added two switches, --level and --risk to specify which injection tests and boundaries to use.
The main advantage now is that sqlmap is able to identify initially which injection types are present so for instance if boolean-based blind is not supported, but error-based is, sqlmap will keep going and work!
2010-11-28 18:10:54 +00:00
17486e472a
Proper english (--postfix is now --suffix) and --string/--regexp does not necessarily need to match into the original response body, it might well be in the injected True condition only!
2010-11-17 22:00:09 +00:00
f83dd2251b
Properly save error-based enumerated data in session file, able to be resumed like with other techniques
2010-11-12 11:40:37 +00:00
45ec8c169a
Consistency between --*-test switches/output
2010-11-08 16:46:25 +00:00
862395ced1
further refactoring (all enumerations are now put into enums.py)
2010-11-08 09:20:02 +00:00
b6da946883
Added one new verbose level, -v 3 now shows the full injected payload.
...
Fixed also -d verbose output.
2010-11-07 22:34:29 +00:00
d3e7e89e60
major improvement with display of payloads (all payloads are displayed now) and removal of "pesky" spaces
2010-11-07 21:18:09 +00:00
685a8e7d2c
refactoring of hard coded dbms names
2010-11-02 11:59:24 +00:00
486a113560
Consolidate logger messages for --*-test switches
2010-10-31 16:58:38 +00:00
5a38ac7ea9
important update regarding (Bug #209 ) - probably more will be needed
2010-10-29 16:11:50 +00:00
f5904d0bc0
Major bug fix to --union-test
2010-10-25 23:39:55 +00:00
215175e3b7
Minor code adjustments
2010-10-25 14:11:47 +00:00
32728d14b7
fix for --union-use with --error-test
2010-10-25 12:25:29 +00:00
db260c44d3
minor update
2010-10-24 22:25:05 +00:00
dec4d858b3
fix for Bug #207
2010-10-22 14:01:48 +00:00
bc79eec702
removed queriesfile.py, implemented XMLObject approach (still shell.py and udf.py TODO)
2010-10-21 13:13:12 +00:00
be443c6947
refactoring regarding __START__,...
2010-10-21 09:51:07 +00:00
7f1aa3b94f
Removed unused imports
2010-10-20 22:48:51 +00:00
934adb5e8d
code refactoring
2010-10-20 09:09:04 +00:00
b032fdbf74
added randInt to error injection vectors
2010-10-20 08:56:58 +00:00
dabbcf9e23
fix for that 'Subquery returns more than 1 row'
2010-10-20 08:50:05 +00:00
82f44989ce
update of error based injection and bug fix for --roles on MSSQL server
2010-10-20 06:40:33 +00:00
8776db872c
minor refactoring
2010-10-19 23:05:24 +00:00
1b376c99a6
removed temp dictionary and replaced with kb.misc
2010-10-19 23:00:19 +00:00
7927e97007
update
2010-10-19 18:34:57 +00:00
415524bd5a
remove --error, now it's only --error-test (it needs to return True to be able to use it)
2010-10-19 18:34:14 +00:00
4009ef385e
more update regarding error based injection support
2010-10-19 18:17:34 +00:00
b2e0b615f8
fix for that MySQL checking
2010-10-19 17:38:39 +00:00
34d7de1d46
cosmetics
2010-10-19 15:28:54 +00:00
d7622bb9cf
major fix for MySQL error based injections
2010-10-19 15:17:16 +00:00
80505de15b
now --users work on Oracle and Postgre (tested)
2010-10-19 14:56:57 +00:00
4bc541ec3c
error based update
2010-10-19 14:47:13 +00:00
d0ebe428da
i've left error flag
2010-10-19 14:12:34 +00:00
bf850af2d8
fix for Oracle error based query "space" problem
2010-10-19 14:10:09 +00:00
6a8b1046d4
first successfull run of error based sqlmap in history :). tested --banner, --current-user, --current-db on 4 major DBMSes. still hidden from users (turn on flag error in getValue() in inject.py)
2010-10-19 12:02:04 +00:00
4f7f20b94f
sorry, cosmetics
2010-10-14 23:18:29 +00:00
8b48833136
large commit with copyright header modifications
2010-10-14 14:41:14 +00:00
1369529103
minor cosmetic update
2010-10-11 13:52:32 +00:00
dc83f794ea
fix regarding proper string isinstance checking (including unicode)
2010-05-25 10:09:35 +00:00
ca3e12ae73
added calculateDeltaSeconds method for dealing with non-deterministic time behaviour in some cases (e.g. WAITFOR DELAY in case of MSSQL)
2010-05-13 11:05:35 +00:00
8b74c405f5
Minor output bug fix
2010-05-11 14:15:03 +00:00
457d32c73e
Proper displaying of debug messages (-v >= 2)
2010-05-11 13:58:53 +00:00
90d9900371
Minor bug fix to consider --start and --stop also in partial UNION query SQL injection
2010-04-30 15:48:40 +00:00
Miroslav Stampar