Commit Graph
1588 Commits
Author SHA1 Message Date
Miroslav Stampar 441fc8dbd9 update regarding boolean based expressions 2010-12-09 21:15:18 +00:00
Miroslav Stampar d5fb921154 removed debug print 2010-12-09 20:08:59 +00:00
Miroslav Stampar 1492823de0 it wasn't pretty, now it's pretty 2010-12-09 20:06:20 +00:00
Miroslav Stampar bbffea2cbc bug fix 2010-12-09 17:10:22 +00:00
Miroslav Stampar 0eb2c408a9 code refactoring 2010-12-09 16:49:02 +00:00
Miroslav Stampar 7e2984b4b6 added stacked query support for Oracle 2010-12-09 15:24:48 +00:00
Bernardo Damele 4bb40c0a06 Higher the level for Oracle stacked tests just in case the SQL inj is within a PL/SQL function ('cause of no support for stacked queries by design on Oracle) 2010-12-09 15:14:18 +00:00
Miroslav Stampar d8edc5b244 adding stacked-query vector for Firebird 2010-12-09 15:11:21 +00:00
Bernardo Damele 13b522efc2 Added error-based support for MySQL < 5.0 - closes #14 2010-12-09 15:09:03 +00:00
Miroslav Stampar 5aafd19957 added vector for SQLite's stacked query payload 2010-12-09 15:06:40 +00:00
Bernardo Damele df5f6bc1b7 Little precaution 2010-12-09 14:06:43 +00:00
Bernardo Damele 9230877d98 cosmetics 2010-12-09 13:57:38 +00:00
Miroslav Stampar 5114c887ea minor minor update 2010-12-09 13:51:44 +00:00
Bernardo Damele 5fb04515d3 Added hidden (for the moment) switch --technique 2010-12-09 13:47:17 +00:00
Miroslav Stampar b80a86a669 that's it for common stuff today 2010-12-09 12:59:22 +00:00
Miroslav Stampar b26e09fc71 another minor update 2010-12-09 12:49:29 +00:00
Miroslav Stampar f712d2477e removed duplicate entries inside common wordlists (tables & columns) and added a script which does that automatically 2010-12-09 12:41:16 +00:00
Miroslav Stampar c5b1f336ee another update 2010-12-09 12:07:06 +00:00
Miroslav Stampar 06395b5408 update 2010-12-09 12:03:10 +00:00
Miroslav Stampar cdff29ada7 update 2010-12-09 11:23:44 +00:00
Miroslav Stampar 196131bbca minor cosmetics 2010-12-09 10:42:00 +00:00
Miroslav Stampar 71761ba9a5 another fix for another beautiful heavy query payload which took a few 100 megs and 5 mins to run 2010-12-09 10:35:18 +00:00
Miroslav Stampar 094baadc5b bug fix (in SELECT based heavy queries COUNT(*) should be used; otherwise multiple row error happens without proper delay) 2010-12-09 10:17:04 +00:00
Miroslav Stampar ec5c08ca7a cosmetics 2010-12-09 09:24:20 +00:00
Miroslav Stampar 3fd1c37d53 update 2010-12-09 07:49:18 +00:00
Miroslav Stampar db39dc32fc minor update 2010-12-09 00:59:39 +00:00
Bernardo Damele 0c01be0eeb Ugly work-around to avoid unescaping WAITFOR DELAY time between single quotes (unescaped CHAR(..) value does not work). 2010-12-09 00:34:02 +00:00
Bernardo Damele 9c61adb21d Cosmetics 2010-12-09 00:26:06 +00:00
Bernardo Damele b5c6527c72 Minor fix 2010-12-09 00:25:48 +00:00
Bernardo Damele 3b293c4ea7 Added possible stacked queries time-based blind vector for MSSQL 2010-12-08 23:55:42 +00:00
Bernardo Damele f5ce739bdf Added support for time-based blind SQL injection via stacked queries too. Need to add vectors for some DBMS yet. 2010-12-08 23:52:31 +00:00
Bernardo Damele 10ef2b5de8 Minor bug fix 2010-12-08 23:09:42 +00:00
Miroslav Stampar 54f6673609 update 2010-12-08 22:38:26 +00:00
Miroslav Stampar d6077273e0 update 2010-12-08 22:14:42 +00:00
Miroslav Stampar 5aee1fd8e0 updated THANKS file 2010-12-08 21:19:46 +00:00
Miroslav Stampar 258e9fb50e fix for a "bug" reported by Spencer J. McIntyre (os.makedirs(conf.outputPath, 0755) -> permission denied) 2010-12-08 21:16:18 +00:00
Miroslav Stampar 69c4f94980 update 2010-12-08 15:40:01 +00:00
Miroslav Stampar 81c16926c1 code refactoring some more 2010-12-08 14:46:07 +00:00
Miroslav Stampar 40fadf2f35 minor update 2010-12-08 14:33:10 +00:00
Miroslav Stampar 95b48746a6 cosmetics 2010-12-08 14:29:09 +00:00
Miroslav Stampar ed09c53ee4 minor minor update 2010-12-08 14:27:37 +00:00
Miroslav Stampar 01cf1394a4 code refactoring 2010-12-08 14:26:40 +00:00
Miroslav Stampar af22679605 minor update 2010-12-08 13:09:27 +00:00
Miroslav Stampar 6223f25dd9 code beautification 2010-12-08 13:04:48 +00:00
Miroslav Stampar 64cc2588f1 now resume is available for time-based blinds too 2010-12-08 12:49:26 +00:00
Miroslav Stampar 537b619165 removing junk 2010-12-08 12:30:25 +00:00
Miroslav Stampar b5e45939e3 sqlmap premiere of blind time based query/bisection 2010-12-08 12:28:54 +00:00
Miroslav Stampar ad00fe13c1 another fix for MySQL time based payloads 2010-12-08 12:00:27 +00:00
Miroslav Stampar 8227e6d3cf bug fix for BENCHMARK time-based vectors 2010-12-08 11:49:55 +00:00
Miroslav Stampar 47bb31fb47 code refactoring 2010-12-08 11:30:25 +00:00