4a35f598b8
Minor refactoring
2011-01-15 22:09:53 +00:00
d2ce647113
one of my stupidest commits (just in case)
2011-01-15 18:17:46 +00:00
0f565c941e
bug fix and proper warning message
2011-01-15 16:59:53 +00:00
e105e1ea32
bug fix (some sites raise 404 during union tests)
2011-01-15 16:42:33 +00:00
3873d204bb
important update for dictionary attack
2011-01-15 15:56:11 +00:00
e17ac5fdca
update
2011-01-15 15:14:22 +00:00
44504746cf
minor update
2011-01-15 13:43:08 +00:00
5bdb50c224
code review part 3
2011-01-15 13:15:10 +00:00
1fa8f0cba7
code reviewing part 2
2011-01-15 12:53:40 +00:00
6a0e0cde3c
code review of modules in lib/core directory
2011-01-15 12:13:45 +00:00
2d9b151883
Minor bug fix
2011-01-15 10:14:05 +00:00
05b2a338fe
cosmetics
2011-01-14 16:12:44 +00:00
bff989d348
minor update
2011-01-14 15:43:53 +00:00
daf5662eab
update
2011-01-14 15:33:49 +00:00
1cfd6a6b9d
Code cleanup
2011-01-14 15:16:34 +00:00
08f7e20c51
minor code refactoring
2011-01-14 14:55:59 +00:00
fb9d7cdfaa
refactoring, code clearing and removal of obsolete switch --longest-common
2011-01-14 14:37:03 +00:00
534f51f9fc
Minor bug fix
2011-01-14 14:20:28 +00:00
e4e9b11b79
Minor code refactoring and adjustments - kb.dbms is needed in fingerprint.py, not getIdentifiedDBMS because when checkDbms() method is called, it's within the fingerprint phase and at that stage, getIdentifiedDBMS() would always return kb.misc.fpDbms.
2011-01-14 12:47:07 +00:00
3c95d71ea5
Minor bug fix - restored of so called kb.misc.testedDbms (now kb.misc.fpDbms) to force the DBMS (only) during the fingerprint phase
2011-01-14 11:55:20 +00:00
f209b7a65e
Updated
2011-01-14 09:56:55 +00:00
7d9fd5a7b7
Minor bug fix
2011-01-14 09:49:14 +00:00
b2c7ae77d4
minor update
2011-01-14 09:45:47 +00:00
676b95b30a
minor code refactoring
2011-01-14 09:44:56 +00:00
f8c04ce020
Minor bug fix
2011-01-13 20:59:13 +00:00
2ac8debea0
Major code refactoring - moved to one location only (getIdentifiedDBMS() in common.py) the retrieval of identified/fingerprinted DBMS.
...
Minor bug fixes thanks to previous refactoring too.
2011-01-13 17:36:54 +00:00
a1d1f69c3f
revert
2011-01-13 15:28:08 +00:00
d937e27b19
minor fix
2011-01-13 15:19:37 +00:00
b0fdbdb13b
minor update
2011-01-13 15:15:56 +00:00
877ea31521
Verbose docstring
2011-01-13 12:05:14 +00:00
ac5b49f555
update
2011-01-13 11:24:03 +00:00
af4ee81e62
Cosmetics
2011-01-13 11:23:07 +00:00
ece2eb31ca
minor update
2011-01-13 11:08:29 +00:00
ee4727850c
Minor bug fix
2011-01-13 10:29:47 +00:00
ca33728fbc
Minor fix to avoid query splitting/unpacking when the statement is EXISTS()
2011-01-13 10:00:40 +00:00
be6e2d6a31
Important bug fix.
...
Minor code restyling.
2011-01-13 09:41:55 +00:00
1b3717c79c
Improvement to make time-based blind to work also against login forms
2011-01-12 16:20:29 +00:00
b3a0f38f3f
Minor code refactoring and added internal debug prints
2011-01-12 12:03:23 +00:00
af9725214a
Properly deal with partial (single entry) UNION injections.
...
Got rid of kb.union*, now it's all stored/used from kb.injection.
Minor bug fix with where=2 detection phase.
2011-01-12 12:01:32 +00:00
d7a7993e0d
Minor comment fix
2011-01-12 11:57:36 +00:00
3cff42986f
Code cleanup
2011-01-12 01:17:04 +00:00
8a67aea754
One more step to fully working UNION exploitation after merge into detection phase
2011-01-12 01:13:32 +00:00
b5c6f7556f
Minor update
2011-01-12 00:53:48 +00:00
8bdb7ec58c
Ahead with UNION exploitation after UNION test moved to detection phase - a lot to do yet.
2011-01-12 00:47:39 +00:00
873951ab92
Proper fix to avoid UNION test false positives
2011-01-11 23:59:02 +00:00
c2e994e806
Minor adjustment
2011-01-11 23:56:04 +00:00
5c7c3c76c3
Fixed previous bug in getErrorParsedDBMSes() call in detection phase.
...
Added minor support to escape quotes in UNION payloads during detection phase.
2011-01-11 23:47:32 +00:00
aa49aa579f
Major bug fix
2011-01-11 23:09:06 +00:00
2f5995a7eb
Added generic and mysql UNION tests from 1 to 25 columns.
...
Adapted config file and command line removing now outdated --union-test switch.
Minor bug fix.
Minor code refactoring.
Got rid of some debug messages, standardized logging of UNION tests.
2011-01-11 22:56:21 +00:00
300128042c
First big commit to move UNION query tests to detection phase - there are some improvements and tuning to do yet though.
...
Major refactoring to Agent.payload() method.
Minor bug fixes, some code refactoring and a lot of core adjustments here and there.
Added more checks for injection in GROUP BY and ORDER BY.
2011-01-11 22:18:47 +00:00
Bernardo Damele