Commit Graph

103 Commits

Author SHA1 Message Date
Bernardo Damele 683184cc8f Minor refactoring 2010-10-17 21:06:52 +00:00
Bernardo Damele f54c134d22 Minor adjustment 2010-10-16 22:43:05 +00:00
Miroslav Stampar 4f7f20b94f sorry, cosmetics 2010-10-14 23:18:29 +00:00
Miroslav Stampar 8b48833136 large commit with copyright header modifications 2010-10-14 14:41:14 +00:00
Miroslav Stampar 49915f3c33 minor update 2010-09-30 19:49:14 +00:00
Miroslav Stampar 87abec16bd probable fix for a bug reported by Prashant Jadhav 2010-09-30 18:52:33 +00:00
Bernardo Damele 8dfe08a353 Minor bug fix to -d 2010-07-01 10:44:31 +00:00
Miroslav Stampar 12a5ec9f3d more unicode refactoring 2010-06-02 12:45:40 +00:00
Bernardo Damele 8be91a98cc Minor bug fix and adjustment 2010-05-29 15:28:37 +00:00
Bernardo Damele 89c721a451 More replacements from open() to codecs.open(). conf.dataEncoding has to be used only for non-binary files. 2010-05-29 10:10:28 +00:00
Bernardo Damele 84778f0e6c Minor fix, leave like this 2010-05-29 08:58:55 +00:00
Miroslav Stampar d3e527aba3 minor update 2010-05-29 07:13:54 +00:00
Bernardo Damele 10521b68eb Major bug fix in multipartpost and minor adjustments elsewhere 2010-05-28 23:12:20 +00:00
Bernardo Damele 06af405efd Adapted and merged in patch to support XML output (-x switch) - still in beta.
Minor bug fixes and adjustments.
2010-05-28 16:43:04 +00:00
Miroslav Stampar a3db3c03c1 str() -> unicode() 2010-05-28 13:05:02 +00:00
Miroslav Stampar dc83f794ea fix regarding proper string isinstance checking (including unicode) 2010-05-25 10:09:35 +00:00
Bernardo Damele a21a7fc56d Minor code refactoring 2010-05-21 12:09:31 +00:00
Bernardo Damele 4c91b5a896 Minor fix 2010-05-10 14:18:41 +00:00
Bernardo Damele a1b1f960cc Finally fixed and adapted all code around to the new isWindowsDriveLetterPath() function 2010-04-23 16:34:20 +00:00
Miroslav Stampar 1bcec80e95 fix for that takeover bug Ethan Robish posted (Windows/PHP) 2010-04-22 10:31:33 +00:00
Bernardo Damele b19de015c5 Minor bugs fixes 2010-03-31 13:52:51 +00:00
Bernardo Damele d00e4a458a Code cleanup 2010-03-21 00:39:44 +00:00
Miroslav Stampar 4c6c91a80b another --reg-read fix 2010-03-12 23:12:06 +00:00
Bernardo Damele 7d8cc1a482 Get rid of Churrasco (Token kidnapping technique to --priv-esc). Reasons why:
1. there's kitrap0d (MS10-015) which is far more reliable, just recently fixed
2. works only to priv esc basically on MSSQL when it runs as NETWORK SERVICE and the machine is not patched against MS09-012 which is "rare" (hopefully) nowadays.
Now sqlmap relies on kitrap0d and incognito to privilege escalate the database process' user privileges to SYSTEM, both via Meterpreter.

Minor layout adjustments.
2010-03-12 22:43:35 +00:00
Miroslav Stampar 6b1ae62753 final fix for reading registry keys (now both parse and non-parse reads work fine) 2010-03-12 22:26:06 +00:00
Miroslav Stampar 0a2fe651ab some fixes regarding registry reading 2010-03-12 22:09:58 +00:00
Bernardo Damele b50a2288f4 Minor layout adjustments 2010-03-11 23:54:07 +00:00
Bernardo Damele cc611c0010 Minor layout adjustments 2010-03-09 22:14:26 +00:00
Bernardo Damele 156fdd96ef Updated copyright 2010-03-03 15:26:27 +00:00
Bernardo Damele 2f452480b3 Minor bug fix in syntax 2010-03-01 14:40:18 +00:00
Bernardo Damele f53ef947f1 Slightly stealthier 2010-02-26 13:14:57 +00:00
Bernardo Damele 694356821d sqlmap does not save nor leave back in temporary folder any file named 'sqlmapRANDOM', only random names now, less suspicious 2010-02-26 13:13:50 +00:00
Miroslav Stampar 1f2a1bb24c removed some redundant code 2010-02-26 12:36:41 +00:00
Miroslav Stampar e4c34ff86c changed default web server language behaviour 2010-02-25 16:55:02 +00:00
Miroslav Stampar 0913d700a8 important update regarding default directories 2010-02-25 15:22:41 +00:00
Miroslav Stampar 4a3fa69f9d minor adjustment 2010-02-25 15:07:54 +00:00
Bernardo Damele 0df5b5fed9 Minor bug fix and code adjustments 2010-02-25 14:06:44 +00:00
Miroslav Stampar 24d3e24db0 more updates regarding --os-shell feature 2010-02-25 12:16:49 +00:00
Miroslav Stampar b558712a47 more feature updates 2010-02-25 11:40:49 +00:00
Miroslav Stampar 15d1fcbb7f now runcmd exe has random name too 2010-02-25 10:47:12 +00:00
Miroslav Stampar 2cafd5697b new changes regarding --os-shell 2010-02-25 10:33:41 +00:00
Miroslav Stampar 858cb25975 update 2010-02-24 23:40:56 +00:00
Miroslav Stampar 2a07af2294 removed pdb tracing 2010-02-20 22:36:17 +00:00
Miroslav Stampar 0debc95ad4 some fixes 2010-02-20 22:31:54 +00:00
Bernardo Damele d1e3596382 Minor UPX adjustment 2010-02-20 19:02:55 +00:00
Miroslav Stampar 0ed5ba5559 minor update 2010-02-16 13:24:09 +00:00
Miroslav Stampar c4951fd631 some updates regarding --os-shell option 2010-02-16 13:20:34 +00:00
Bernardo Damele dc06b40ddc Minor exception message fix 2010-02-11 23:07:33 +00:00
Bernardo Damele 89dc99188d --read-file on PostgreSQL now relies on the new sys_fileread() UDF so that also binary files can be read.
Fixed a minor bug in custom UDF injection feature --udf-inject.
Major code refactoring.
2010-02-11 22:57:50 +00:00
Miroslav Stampar 00a23ace9a some changes regarding web takeover 2010-02-09 14:27:41 +00:00