Commit Graph

341 Commits

Author SHA1 Message Date
Miroslav Stampar 270ae0f080 just in case as maybe there will be some boolean expression to check where we won't expect None, but explicitly True/False 2010-12-14 09:05:00 +00:00
Bernardo Damele a02dd6b55b Minor enhancement to speedup active dbms fingerprint (-f).
Code cleanup and refactoring.
2010-12-13 21:33:42 +00:00
Miroslav Stampar 6a3c4485e6 minor update (removing extra ()) 2010-12-12 14:44:39 +00:00
Miroslav Stampar f7344a5fc3 update 2010-12-11 21:28:11 +00:00
Miroslav Stampar e6c66fa37c update regarding expectingNone in fingerprinting mode to cancel drop down to other techniques available 2010-12-11 17:55:28 +00:00
Miroslav Stampar e32fa9df43 further update regarding bugtrace's report 2010-12-11 17:32:15 +00:00
Miroslav Stampar 5d18c98ec2 quick fix for a bug reported by bugtrace (not using __goBooleanProxy because we don't have a proper vector this moment) 2010-12-11 17:20:39 +00:00
Miroslav Stampar 03447acc1d avoiding some trashy match ratios 2010-12-11 17:12:19 +00:00
Miroslav Stampar 3dc0a51d34 major bug fix with boolean expressions 2010-12-11 08:46:19 +00:00
Miroslav Stampar ac9080c07b update 2010-12-11 08:24:29 +00:00
Miroslav Stampar 66db80804d fix 2010-12-10 16:03:32 +00:00
Miroslav Stampar 435f48b8cc polite cosmetics 2010-12-10 15:28:56 +00:00
Miroslav Stampar 977988c0ab cosmetics 2010-12-10 15:24:25 +00:00
Miroslav Stampar fa8d378e80 another update 2010-12-10 15:18:15 +00:00
Miroslav Stampar 1ef44cfe60 fix 2010-12-10 15:06:53 +00:00
Miroslav Stampar fe186cde55 proper fix 2010-12-10 13:26:31 +00:00
Miroslav Stampar 9957881040 you won't believe commit 2010-12-10 13:20:59 +00:00
Miroslav Stampar 1fc9ed10a8 minor refactoring 2010-12-10 12:30:36 +00:00
Miroslav Stampar 4d8628e8fb fix for booleans 2010-12-10 12:26:01 +00:00
Miroslav Stampar 471d9ccd65 another fix of my lala 2010-12-10 10:11:25 +00:00
Miroslav Stampar 029a6abba2 quick fix 2010-12-10 09:54:25 +00:00
Miroslav Stampar 441fc8dbd9 update regarding boolean based expressions 2010-12-09 21:15:18 +00:00
Miroslav Stampar 1492823de0 it wasn't pretty, now it's pretty 2010-12-09 20:06:20 +00:00
Bernardo Damele 9230877d98 cosmetics 2010-12-09 13:57:38 +00:00
Miroslav Stampar 196131bbca minor cosmetics 2010-12-09 10:42:00 +00:00
Miroslav Stampar 3fd1c37d53 update 2010-12-09 07:49:18 +00:00
Bernardo Damele b5c6527c72 Minor fix 2010-12-09 00:25:48 +00:00
Bernardo Damele f5ce739bdf Added support for time-based blind SQL injection via stacked queries too. Need to add vectors for some DBMS yet. 2010-12-08 23:52:31 +00:00
Miroslav Stampar 54f6673609 update 2010-12-08 22:38:26 +00:00
Miroslav Stampar d6077273e0 update 2010-12-08 22:14:42 +00:00
Miroslav Stampar 40fadf2f35 minor update 2010-12-08 14:33:10 +00:00
Miroslav Stampar 01cf1394a4 code refactoring 2010-12-08 14:26:40 +00:00
Miroslav Stampar 6223f25dd9 code beautification 2010-12-08 13:04:48 +00:00
Miroslav Stampar 64cc2588f1 now resume is available for time-based blinds too 2010-12-08 12:49:26 +00:00
Miroslav Stampar 537b619165 removing junk 2010-12-08 12:30:25 +00:00
Miroslav Stampar b5e45939e3 sqlmap premiere of blind time based query/bisection 2010-12-08 12:28:54 +00:00
Miroslav Stampar 47bb31fb47 code refactoring 2010-12-08 11:30:25 +00:00
Miroslav Stampar 1ae2fa7f1a update regarding time based payloads 2010-12-08 11:26:54 +00:00
Miroslav Stampar bdff4aba6a switching to quick_ratio 2010-12-07 23:57:43 +00:00
Miroslav Stampar c1b82cf09c ratio() gives a considerable lag on real life cases, as real_quick_ratio() gives almost as good results 2010-12-07 23:53:44 +00:00
Miroslav Stampar a4a63f5b1e minor update 2010-12-07 23:49:00 +00:00
Miroslav Stampar 293ce18fed two major bug fixes regarding time calculation (previously comparison was also a part of "delta", which screwed results in cases with large pages; other was a standard distribution based one) 2010-12-07 23:32:33 +00:00
Miroslav Stampar dc651d59ec little mathematics here and there (used "Rules for normally distributed data") 2010-12-07 19:19:12 +00:00
Bernardo Damele 81e7465ed2 Cosmetics 2010-12-07 17:16:21 +00:00
Miroslav Stampar 294119d2ec more advanced time technique(s) 2010-12-07 16:04:53 +00:00
Miroslav Stampar e53fef546e update regarding session page templates 2010-12-07 14:35:31 +00:00
Miroslav Stampar add6235b16 removed pageTemplate from injection(s), it's not longer stored in session, and it's reloaded when resuming from session 2010-12-07 14:06:54 +00:00
Miroslav Stampar 0dc630203f code refactoring 2010-12-07 13:34:06 +00:00
Miroslav Stampar d77ddbee47 OR based inference works for the first time in history and fingerprint of 4 major DBMSes is now injection based (instead of AND) 2010-12-06 18:20:57 +00:00
Bernardo Damele 17449754fe Got rid of UNION false cond 2010-12-05 16:16:15 +00:00