0817d1b78d
Cosmetics
2010-10-19 23:09:30 +00:00
8b8fff41fe
cosmetics (adding html parsed DBMS) regarding heuristic check
2010-10-18 12:11:16 +00:00
84ed7f192a
Cosmetic fixes
2010-10-16 15:10:48 +00:00
bf56f8c63c
Cosmetic fix
2010-10-15 12:46:41 +00:00
5f6d88a418
Minor comment
2010-10-15 11:17:17 +00:00
48cc8a308d
More verbose messages on successful --null-connection
2010-10-15 10:24:54 +00:00
4f7f20b94f
sorry, cosmetics
2010-10-14 23:18:29 +00:00
8b48833136
large commit with copyright header modifications
2010-10-14 14:41:14 +00:00
162d01abed
commit of all sorts (bug fix for heuristics and URI injections, fine tunning of tampering modules with SQL keywords,...)
2010-10-14 11:06:28 +00:00
d2ec132469
added --text-only switch
2010-10-12 19:41:29 +00:00
9ffa928783
added some user interaction when page is dynamic
2010-10-12 15:49:04 +00:00
b748e6ea44
minor update
2010-10-12 12:52:06 +00:00
e2bbfbe650
bug fix
2010-10-11 14:32:02 +00:00
43892cddbb
some updates
2010-10-11 12:26:35 +00:00
8b0a132fa9
minor update
2010-10-11 11:47:07 +00:00
18d27cabc5
more changes
2010-10-07 15:34:17 +00:00
1e9ae40397
major refactoring
2010-10-07 12:12:26 +00:00
1bf8939e2f
further updates
2010-10-06 22:43:04 +00:00
de6fa1247b
moved injections to xml format
2010-10-06 22:29:52 +00:00
b745331974
added null connection check
2010-09-16 08:43:10 +00:00
77a53228c5
changes regarding dynamic content recognition
2010-09-13 21:01:46 +00:00
c886659f82
fix
2010-09-13 15:24:56 +00:00
2350a3c74d
minor change
2010-09-13 15:20:13 +00:00
cdc6bdcbe8
changes
2010-09-13 15:19:47 +00:00
19fb2e3dcf
fix for Bug #165
2010-09-13 13:31:01 +00:00
12a5ec9f3d
more unicode refactoring
2010-06-02 12:45:40 +00:00
a3db3c03c1
str() -> unicode()
2010-05-28 13:05:02 +00:00
14cab8527e
minor adjustment
2010-05-21 14:25:38 +00:00
3110bb10fc
added test for site existance
2010-05-21 13:36:49 +00:00
323cf2b7f2
Fixes #177 - Don't exit at exception if in "multiple targets" mode (-l or -g)
2010-03-16 12:14:02 +00:00
f6adb431e6
Minor layout adjustment and typo fix
2010-03-12 12:23:05 +00:00
156fdd96ef
Updated copyright
2010-03-03 15:26:27 +00:00
203cfd114f
changed raised exception type
2010-02-10 09:39:36 +00:00
8e8f6f842c
fix for that md5 error reported by Dani (lgrecol@gmail.com)
2010-02-10 09:27:34 +00:00
ce022a3b6e
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 02:02:12 +00:00
16b4530bbe
Minor bug fixes to --os-shell (altought web backdoor functionality still to be reviewed).
...
Minor common library code refactoring.
Code cleanup.
Set back the default User-Agent to sqlmap for comparison algorithm reasons.
Updated THANKS.
2009-04-27 23:05:11 +00:00
8c0ac767f4
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
207e96e2b2
Major bug fix in the comparison algorithm to correctly handle also the
...
case that the url is stable and the False response changes the page
content very little.
2009-02-09 10:28:03 +00:00
5560f0b68a
Updated the copyright
2009-01-12 21:35:38 +00:00
92645dd264
Minor adjustment
2009-01-10 14:51:12 +00:00
e10ab5aa0e
Major bug fixes
2009-01-10 14:39:27 +00:00
35708a0b97
Minor adjustment to UNION query SQL injection detection function.
...
Updated command line help message based upon recent developments.
Updated copyright note of lib/contrib/multipartpost.py.
2008-12-21 16:35:03 +00:00
c18efe5084
Minor adjustments
2008-12-20 13:21:47 +00:00
8d06975142
Major enhancement to make the comparison algorithm work properly also
...
on url not stables automatically by using the difflib SequenceMatcher
object: this changed a lot into the structure of the code, has to be
extensively beta-tested!
Please, do report bugs on sqlmap-users mailing list if you scout them.
Cheers,
Bernardo
2008-12-20 01:54:08 +00:00
ad228e6947
Ahead with the improvements to the comparison algorithm.
...
Added support internally to forge CASE statements, used only by
--is-dba query at the moment.
Allow DDL, DML (INSERT, UPDATE, etc.) from user in SQL query and
SQL shell.
Minor code adjustments.
2008-12-19 20:09:46 +00:00
68354be45a
Ahead with enhancements on comparison algorithm: implemented content-length technique
2008-12-18 22:49:35 +00:00
afbd66f6d9
Added some comments
2008-12-18 21:58:05 +00:00
d0d6632c22
Initial support to automatically work around the dynamic page at each refresh
...
(Major refactor to the comparison algorithm (True/False response))
2008-12-18 20:48:23 +00:00
b7f2602b50
A bit more entropy in the sql injection detection
2008-12-16 23:51:56 +00:00
bf2a857b9a
Minor adjustments and minor bug fixes. Documentation almost complete for sqlmap 0.6.3.
2008-12-12 19:06:31 +00:00
Bernardo Damele