Commit Graph

673 Commits

Author SHA1 Message Date
Miroslav Stampar d6a361f859 Proper implementation for --technique=Q --dbms=Firebird 2013-01-22 16:31:26 +01:00
Miroslav Stampar 59b02539ca More general approach regarding that last commit 2013-01-22 11:34:34 +01:00
Miroslav Stampar 75bf8528d1 Minor just in case update 2013-01-21 14:50:43 +01:00
Miroslav Stampar 069c6acabd Another update for an Issue #362 2013-01-20 22:47:26 +01:00
Miroslav Stampar b4a55a809e Refactoring DBMS string escaping functions 2013-01-20 13:45:58 +01:00
Bernardo Damele c95119559e minor bug fix 2013-01-19 00:41:51 +00:00
Bernardo Damele 0e78fbef56 correctly format SQLi payload for inline query technique 2013-01-19 00:28:03 +00:00
Miroslav Stampar 601eb1e49a Unescaping is renamed to escaping 2013-01-18 15:40:37 +01:00
Bernardo Damele a43202f3c0 updated copyright 2013-01-18 14:07:51 +00:00
Miroslav Stampar 04aa39f0c6 Minor update 2013-01-15 13:51:19 +01:00
Miroslav Stampar a5a309212a Fix for an Issue #339 2013-01-14 16:18:03 +01:00
Miroslav Stampar 4b79269608 Minor bug fix 2013-01-11 11:10:18 +01:00
Miroslav Stampar ec4e49d771 Minor refactoring 2013-01-10 16:09:28 +01:00
Miroslav Stampar ca3d35a878 Some PEP8 related style cleaning 2013-01-10 13:18:44 +01:00
Miroslav Stampar ca1c0c2a1d Minor style update 2013-01-10 11:54:07 +01:00
Miroslav Stampar bf5544903b Minor style update 2013-01-09 16:10:26 +01:00
Miroslav Stampar 25f01a419f Minor style update (for the sake of consistency over the code and our PEP8 adaptation) 2013-01-09 15:38:41 +01:00
Bernardo Damele c155c6df84 minor bug fix for user's provided LIMIT'd statement when technique is full UNION SQLi 2013-01-07 23:31:11 +00:00
Miroslav Stampar 3abe87ac89 Minor fix with status update (Issue #305) 2013-01-07 18:53:08 +01:00
Miroslav Stampar a8f02916a9 Minor fix (Issue #305) 2013-01-07 18:39:35 +01:00
Miroslav Stampar e219fad8bf Added a short comment 2013-01-07 18:19:48 +01:00
Miroslav Stampar 76839ff9d6 Fix for an Issue #305 2013-01-07 12:52:55 +01:00
Miroslav Stampar dc21f3ce67 Minor just in case filtering of union results 2013-01-04 17:09:07 +01:00
Miroslav Stampar e4a3c015e5 Replacing old and deprecated raise Exception style (PEP8) 2013-01-03 23:20:55 +01:00
Miroslav Stampar 75edb84a71 Minor update 2012-12-30 11:10:32 +01:00
Miroslav Stampar 58ad2f1c5d Revert of last commit and proper fix 2012-12-29 10:35:05 +01:00
Miroslav Stampar 0e18fa9c5f Minor fix 2012-12-28 23:43:47 +01:00
Miroslav Stampar 77625e5af7 Minor revert 2012-12-21 19:31:05 +01:00
Miroslav Stampar 8b3e17ed4d Minor update (better approach for those old NOT IN cases in MsSQL - instead of standard pivot dump table) 2012-12-21 14:52:47 +01:00
Miroslav Stampar 0d5d84edc7 Minor cleanup 2012-12-20 21:03:41 +01:00
Miroslav Stampar 712cf4e4db Fix for an Issue #316 2012-12-20 20:55:59 +01:00
Miroslav Stampar c2c4601d6e Minor restyling 2012-12-20 11:06:52 +01:00
Bernardo Damele 282aeb734f ORDER BY does not play well with UNION query SQLi (related to issue #313) 2012-12-19 13:21:16 +00:00
Bernardo Damele 259b345f1f catch ImportError exception if libmagic is not installed 2012-12-19 13:10:54 +00:00
Bernardo Damele 9149d77cc8 removed duplicate code - fixes issue #310 2012-12-19 12:17:56 +00:00
Bernardo Damele d80744d3d5 preparation for issue #310 2012-12-19 11:40:00 +00:00
Bernardo Damele dee56b17c3 handle "LIMIT num" as well as "LIMIT num, num" across all techniques - fixes issue #308 2012-12-19 10:50:15 +00:00
Miroslav Stampar 92e338251a Finally working inference against MySQL/international letters (even chinese) 2012-12-19 10:44:02 +01:00
Bernardo Damele 8e95470415 minor refactoring 2012-12-19 00:46:23 +00:00
Miroslav Stampar 88d8494b5a Implementation for an Issue #307 2012-12-18 16:03:35 +01:00
Miroslav Stampar 7f47623876 Minor patch 2012-12-18 11:10:06 +01:00
Bernardo Damele 1fdd804e94 replaced instances of dataToStdout with logger 2012-12-17 13:30:21 +00:00
Bernardo Damele 064d443d60 replaced unnecessary dataToStdout() call with appropriate logger.info() call 2012-12-17 11:30:08 +00:00
Miroslav Stampar 562044577b Implementation for an Issue #292 2012-12-11 12:02:06 +01:00
Miroslav Stampar 996e882e78 Minor update 2012-12-10 17:13:00 +01:00
Miroslav Stampar 974407396e Doing some more style updating (capitalization of exception classes; using _ is enough for private members - __ is used in Python specific methods) 2012-12-06 14:14:19 +01:00
Miroslav Stampar ab67344448 Removed unused imports and variables (pyflake-ing) 2012-12-06 11:15:05 +01:00
Miroslav Stampar 775e0df04b Update for an Issue #278 2012-12-05 10:45:17 +01:00
Miroslav Stampar 7304971544 Patch for ORDER BY test on MsSQL on cases with 'The text, ntext, and image data types cannot be compared or sorted, except when using IS NULL or LIKE operator' 2012-11-29 11:43:49 +01:00
Miroslav Stampar 7c16bfe025 Fix for error-based MsSQL dumping (in some cases failed because of wrong order - e.g. MIN(SUBSTRING( instead of SUBSTRING(MIN ) 2012-11-29 10:51:59 +01:00