Commit Graph

119 Commits

Author SHA1 Message Date
Bernardo Damele bb8cd788e1 minor fix 2012-07-16 09:56:41 +01:00
Bernardo Damele 162da75a04 modified homepage address 2012-07-12 18:38:03 +01:00
Miroslav Stampar 9c4a62f725 Some work on Issue #68 2012-07-11 11:58:47 +02:00
Bernardo Damele fb7fe552b7 proper naming 2012-07-06 15:13:50 +01:00
Bernardo Damele ab412da27f I am back on stage and here to stay!!! to start.. a removal of confirm switch which masked cases where file write operations failed when set to False automatically, now at least it asks the user and defaults to Yes 2012-07-01 23:25:05 +01:00
jekil c39e5a85ba Removed $id$ tags 2012-06-27 20:56:43 +02:00
Miroslav Stampar 06be7bbb18 few just in case fixes (unarrayizeValue in dumpTable entries) and and some refactoring (unique is now not done for every union case but only if detected that there are duplicates in union test) 2012-06-15 20:41:53 +00:00
Miroslav Stampar 3f6bc1f3c2 minor fix 2012-05-24 18:05:33 +00:00
Miroslav Stampar 079e0e1434 minor bug fix 2012-05-18 08:51:50 +00:00
Bernardo Damele 072e08836f Falling back to unionReadFile() when --file-read does not work against MySQL. This happens when the session user does not have INSERT privilege, required to run LOAD DATA INFILE 2012-04-19 14:05:45 +00:00
Miroslav Stampar 5e358b51f9 few fixes related to bug report by Shadow Folder (AttributeError: 'list' object has no attribute 'isdigit') 2012-04-04 09:25:05 +00:00
Miroslav Stampar cce5c3c009 minor changes for version numbers 2012-03-19 11:07:03 +00:00
Miroslav Stampar 8b9c5c66cc code refactoring regarding charsetType inside inference/bisection 2012-02-29 14:36:23 +00:00
Miroslav Stampar b3bd4144f5 removing of unused imports together with some general code refactoring 2012-02-22 10:40:11 +00:00
Miroslav Stampar 7bca926a0b fixes, updates, patches 2012-02-09 10:16:58 +00:00
Miroslav Stampar accac776fe some fixes 2012-01-13 14:10:53 +00:00
Miroslav Stampar 95f89ab63a updating copyright date 2012-01-11 14:59:46 +00:00
Miroslav Stampar 6f5ef23f28 minor update/patch 2012-01-01 22:55:32 +00:00
Miroslav Stampar 300abc2ba2 minor update regarding unicode unescaping 2012-01-01 22:31:09 +00:00
Miroslav Stampar 1ae413a206 some refactoring/speedup around UNION technique 2011-12-22 10:32:21 +00:00
Miroslav Stampar 440b7efe55 minor optimization 2011-11-20 20:14:47 +00:00
Miroslav Stampar 77e630d89e replaced longer CHAR form of escaped MySQL strings with more compact hex form 2011-10-23 20:19:42 +00:00
Miroslav Stampar 25f0ec3597 some minor range to xrange conversion (where safe to do) 2011-10-21 22:34:27 +00:00
Miroslav Stampar af94ac7f02 minor fix 2011-09-20 22:16:56 +00:00
Bernardo Damele aedcf8c8d7 Changed homepage address 2011-07-07 20:10:03 +00:00
Bernardo Damele 1cb12ea659 replaced third-party library python-mysql with python pymysql, http://code.google.com/p/pymysql/ (MIT license) 2011-06-22 13:31:07 +00:00
Bernardo Damele f8c32cf6b9 Moved folder 2011-06-18 12:34:41 +00:00
Miroslav Stampar 4a9640160e more concise 2011-06-08 14:35:23 +00:00
Miroslav Stampar 26062ec71e minor update 2011-06-07 15:13:51 +00:00
Miroslav Stampar 126cdf9e19 minor info update 2011-05-19 23:28:27 +00:00
Miroslav Stampar a034462c31 fixing annoying timeouts for basic DBMS check (reference: http://dev.mysql.com/doc/refman/5.0/en/date-and-time-functions.html#function_timestampadd) 2011-05-19 23:03:00 +00:00
Bernardo Damele f56d135438 Minor code restyling 2011-04-30 13:20:05 +00:00
Bernardo Damele e35f25b2cb Major recode of --os-pwn functionality. Now the Metasploit shellcode can not be run as a Metasploit generated payload stager anymore. Instead it can be run on the target system either via sys_bineval() (as it was before, anti-forensics mode, all the same) or via shellcodeexec executable. Advantages are that:
* It is stealthier as the shellcode itself does not touch the filesystem, it's an argument passed to shellcodeexec at runtime.
* shellcodeexec is not (yet) recognized as malicious by any (Avast excluded) AV product.
* shellcodeexec binary size is significantly smaller than a Metasploit payload stager (even when packed with UPX).
* UPX now is not needed anymore, so sqlmap package is also way smaller and less likely to be detected itself as malicious by your AV software.
shellcodeexec source code, compilation files and binaries are in extra/shellcodeexec/ folder now - copied over from https://github.com/inquisb/shellcodeexec.
Minor code refactoring.
2011-04-24 23:01:21 +00:00
Bernardo Damele d0dff82ce0 Minor code refactoring relating set/get back-end DBMS operating system and minor bug fix to properly enforce OS value with --os switch 2011-04-23 16:25:09 +00:00
Miroslav Stampar 148fb26301 quick fix 2011-04-21 17:34:26 +00:00
Miroslav Stampar e181d5412e fix for a bug reported by aboynes@gmail.com (@@datadir not available on MySQL 4) 2011-04-21 17:33:07 +00:00
Miroslav Stampar 0387654166 update of copyright string (until year) 2011-04-15 12:33:18 +00:00
Bernardo Damele ea3ebafba1 Removed outdated sentence 2011-04-10 23:59:49 +00:00
Bernardo Damele 572708f184 More version adjustment 2011-04-10 23:28:24 +00:00
Bernardo Damele 6d165861c8 Minor version increase 2011-04-10 13:30:27 +00:00
Bernardo Damele d5fb1378cc Gone unnoticed for way too long 2011-04-08 11:15:19 +00:00
Bernardo Damele 7253362114 Minor bug fix so that --file-write on MySQL via UNION query now works again 2011-02-11 23:35:45 +00:00
Bernardo Damele db77f8b055 Code cleanup 2011-02-06 22:33:08 +00:00
Miroslav Stampar ecaf5729fd revert 2011-02-06 22:14:18 +00:00
Miroslav Stampar caaac72029 minor update regarding last commit 2011-02-06 20:15:03 +00:00
Bernardo Damele 8980227d30 Minor bug fix 2011-02-06 15:32:16 +00:00
Bernardo Damele a37f5e05b9 Refactoring 2011-02-01 22:27:36 +00:00
Miroslav Stampar 367d0639f0 refactoring (class names should always be Capital cased) 2011-01-28 16:36:09 +00:00
Miroslav Stampar eb33612736 fix 2011-01-24 10:20:17 +00:00
Bernardo Damele bade0e3124 Major code refactoring - centralized all kb.dbms* info for both retrieval and set. 2011-01-19 23:06:15 +00:00