Commit Graph

79 Commits

Author SHA1 Message Date
Bernardo Damele 162da75a04 modified homepage address 2012-07-12 18:38:03 +01:00
Bernardo Damele ab412da27f I am back on stage and here to stay!!! to start.. a removal of confirm switch which masked cases where file write operations failed when set to False automatically, now at least it asks the user and defaults to Yes 2012-07-01 23:25:05 +01:00
jekil c39e5a85ba Removed $id$ tags 2012-06-27 20:56:43 +02:00
Miroslav Stampar 5e358b51f9 few fixes related to bug report by Shadow Folder (AttributeError: 'list' object has no attribute 'isdigit') 2012-04-04 09:25:05 +00:00
Miroslav Stampar 645fc8a21c minor refactoring 2012-03-27 08:31:48 +00:00
Miroslav Stampar 8b9c5c66cc code refactoring regarding charsetType inside inference/bisection 2012-02-29 14:36:23 +00:00
Miroslav Stampar b3bd4144f5 removing of unused imports together with some general code refactoring 2012-02-22 10:40:11 +00:00
Miroslav Stampar dcf7277a0f some more refactorings 2012-02-16 14:42:28 +00:00
Miroslav Stampar 7bca926a0b fixes, updates, patches 2012-02-09 10:16:58 +00:00
Miroslav Stampar d8c343a88a minor update 2012-01-30 13:29:43 +00:00
Miroslav Stampar accac776fe some fixes 2012-01-13 14:10:53 +00:00
Miroslav Stampar 95f89ab63a updating copyright date 2012-01-11 14:59:46 +00:00
Miroslav Stampar ff52931140 some refactoring (skipping duplicate messages in case that UNION/ERROR techniques failed and BOOLEAN/TIMED/STACKED are not available) 2012-01-07 19:30:35 +00:00
Miroslav Stampar 39b406c5c1 fix for --search on Oracle 2011-12-02 18:13:27 +00:00
Miroslav Stampar 440b7efe55 minor optimization 2011-11-20 20:14:47 +00:00
Miroslav Stampar 25f0ec3597 some minor range to xrange conversion (where safe to do) 2011-10-21 22:34:27 +00:00
Bernardo Damele aedcf8c8d7 Changed homepage address 2011-07-07 20:10:03 +00:00
Bernardo Damele f7196007ca --search on Oracle is now consistent with other plugins 2011-06-24 14:33:30 +00:00
Miroslav Stampar ca6f9acf30 minor fix for resuming in multi threading mode 2011-06-18 12:23:18 +00:00
Miroslav Stampar a397baa89a fix for a bug reported by viniciusmaxdaloop@gmail.com and few related patches 2011-05-26 08:17:21 +00:00
Bernardo Damele dac59a55bc leftover 2011-05-03 14:14:39 +00:00
Bernardo Damele c58dc4a6d8 isDbmsWithin() must stay like this, no getIdentifiedDbms() in there 2011-05-03 14:13:45 +00:00
Bernardo Damele 955dbc85e7 Minor variable rename 2011-04-30 15:29:59 +00:00
Bernardo Damele f56d135438 Minor code restyling 2011-04-30 13:20:05 +00:00
Miroslav Stampar 0387654166 update of copyright string (until year) 2011-04-15 12:33:18 +00:00
Miroslav Stampar b6af80bab3 refactoring, cleanup and improvement 2011-03-29 21:54:15 +00:00
Miroslav Stampar 73e5d20ade bulk commit for safe/unsafe identificator naming (done and tested for all 4 major DBMSes) and one bug fix for --search-column on MSSQL (inside queries) 2011-03-28 11:01:55 +00:00
Miroslav Stampar 4889764114 minor update regarding last commit 2011-03-21 11:40:27 +00:00
Miroslav Stampar 5291fe35c9 proper implementation of --dbs on Oracle (we are using now schema names as a counterpart to dbs in other DBMSes) 2011-03-21 11:29:43 +00:00
Bernardo Damele a2c20acf94 Minor fixes once more 2011-02-10 11:34:16 +00:00
Miroslav Stampar ecaf5729fd revert 2011-02-06 22:14:18 +00:00
Miroslav Stampar caaac72029 minor update regarding last commit 2011-02-06 20:15:03 +00:00
Miroslav Stampar 367d0639f0 refactoring (class names should always be Capital cased) 2011-01-28 16:36:09 +00:00
Bernardo Damele 50c02fbb37 Done with previous refactoring 2011-01-20 00:01:06 +00:00
Bernardo Damele bade0e3124 Major code refactoring - centralized all kb.dbms* info for both retrieval and set. 2011-01-19 23:06:15 +00:00
Bernardo Damele daebb0010b Major bug fix to properly process custom queries (--sql-query/--sql-shell) when technique in use is error-based.
Alignment of SQL statement payload packing/unpacking between all of the techniques.
Minor bug fix to use the proper charset (2, numbers) when dealing with COUNT() in custom queries too.
Minor code cleanup.
2011-01-18 23:02:11 +00:00
Bernardo Damele 2d9b151883 Minor bug fix 2011-01-15 10:14:05 +00:00
Bernardo Damele e4e9b11b79 Minor code refactoring and adjustments - kb.dbms is needed in fingerprint.py, not getIdentifiedDBMS because when checkDbms() method is called, it's within the fingerprint phase and at that stage, getIdentifiedDBMS() would always return kb.misc.fpDbms. 2011-01-14 12:47:07 +00:00
Bernardo Damele 3c95d71ea5 Minor bug fix - restored of so called kb.misc.testedDbms (now kb.misc.fpDbms) to force the DBMS (only) during the fingerprint phase 2011-01-14 11:55:20 +00:00
Bernardo Damele 2ac8debea0 Major code refactoring - moved to one location only (getIdentifiedDBMS() in common.py) the retrieval of identified/fingerprinted DBMS.
Minor bug fixes thanks to previous refactoring too.
2011-01-13 17:36:54 +00:00
Bernardo Damele 8a67aea754 One more step to fully working UNION exploitation after merge into detection phase 2011-01-12 01:13:32 +00:00
Miroslav Stampar 5f9b6b2254 code refactoring 2011-01-02 16:51:21 +00:00
Miroslav Stampar 42e7b1b3a7 bug fix 2010-12-30 22:40:37 +00:00
Miroslav Stampar 108a96c6b4 some fixes 2010-12-17 21:45:20 +00:00
Bernardo Damele a02dd6b55b Minor enhancement to speedup active dbms fingerprint (-f).
Code cleanup and refactoring.
2010-12-13 21:33:42 +00:00
Miroslav Stampar e6c66fa37c update regarding expectingNone in fingerprinting mode to cancel drop down to other techniques available 2010-12-11 17:55:28 +00:00
Miroslav Stampar b02bd55edc minor refactoring 2010-12-10 13:04:36 +00:00
Miroslav Stampar bbffea2cbc bug fix 2010-12-09 17:10:22 +00:00
Miroslav Stampar 0eb2c408a9 code refactoring 2010-12-09 16:49:02 +00:00
Miroslav Stampar d77ddbee47 OR based inference works for the first time in history and fingerprint of 4 major DBMSes is now injection based (instead of AND) 2010-12-06 18:20:57 +00:00