Commit Graph

664 Commits

Author SHA1 Message Date
Miroslav Stampar 04aa39f0c6 Minor update 2013-01-15 13:51:19 +01:00
Miroslav Stampar a5a309212a Fix for an Issue #339 2013-01-14 16:18:03 +01:00
Miroslav Stampar 4b79269608 Minor bug fix 2013-01-11 11:10:18 +01:00
Miroslav Stampar ec4e49d771 Minor refactoring 2013-01-10 16:09:28 +01:00
Miroslav Stampar ca3d35a878 Some PEP8 related style cleaning 2013-01-10 13:18:44 +01:00
Miroslav Stampar ca1c0c2a1d Minor style update 2013-01-10 11:54:07 +01:00
Miroslav Stampar bf5544903b Minor style update 2013-01-09 16:10:26 +01:00
Miroslav Stampar 25f01a419f Minor style update (for the sake of consistency over the code and our PEP8 adaptation) 2013-01-09 15:38:41 +01:00
Bernardo Damele c155c6df84 minor bug fix for user's provided LIMIT'd statement when technique is full UNION SQLi 2013-01-07 23:31:11 +00:00
Miroslav Stampar 3abe87ac89 Minor fix with status update (Issue #305) 2013-01-07 18:53:08 +01:00
Miroslav Stampar a8f02916a9 Minor fix (Issue #305) 2013-01-07 18:39:35 +01:00
Miroslav Stampar e219fad8bf Added a short comment 2013-01-07 18:19:48 +01:00
Miroslav Stampar 76839ff9d6 Fix for an Issue #305 2013-01-07 12:52:55 +01:00
Miroslav Stampar dc21f3ce67 Minor just in case filtering of union results 2013-01-04 17:09:07 +01:00
Miroslav Stampar e4a3c015e5 Replacing old and deprecated raise Exception style (PEP8) 2013-01-03 23:20:55 +01:00
Miroslav Stampar 75edb84a71 Minor update 2012-12-30 11:10:32 +01:00
Miroslav Stampar 58ad2f1c5d Revert of last commit and proper fix 2012-12-29 10:35:05 +01:00
Miroslav Stampar 0e18fa9c5f Minor fix 2012-12-28 23:43:47 +01:00
Miroslav Stampar 77625e5af7 Minor revert 2012-12-21 19:31:05 +01:00
Miroslav Stampar 8b3e17ed4d Minor update (better approach for those old NOT IN cases in MsSQL - instead of standard pivot dump table) 2012-12-21 14:52:47 +01:00
Miroslav Stampar 0d5d84edc7 Minor cleanup 2012-12-20 21:03:41 +01:00
Miroslav Stampar 712cf4e4db Fix for an Issue #316 2012-12-20 20:55:59 +01:00
Miroslav Stampar c2c4601d6e Minor restyling 2012-12-20 11:06:52 +01:00
Bernardo Damele 282aeb734f ORDER BY does not play well with UNION query SQLi (related to issue #313) 2012-12-19 13:21:16 +00:00
Bernardo Damele 259b345f1f catch ImportError exception if libmagic is not installed 2012-12-19 13:10:54 +00:00
Bernardo Damele 9149d77cc8 removed duplicate code - fixes issue #310 2012-12-19 12:17:56 +00:00
Bernardo Damele d80744d3d5 preparation for issue #310 2012-12-19 11:40:00 +00:00
Bernardo Damele dee56b17c3 handle "LIMIT num" as well as "LIMIT num, num" across all techniques - fixes issue #308 2012-12-19 10:50:15 +00:00
Miroslav Stampar 92e338251a Finally working inference against MySQL/international letters (even chinese) 2012-12-19 10:44:02 +01:00
Bernardo Damele 8e95470415 minor refactoring 2012-12-19 00:46:23 +00:00
Miroslav Stampar 88d8494b5a Implementation for an Issue #307 2012-12-18 16:03:35 +01:00
Miroslav Stampar 7f47623876 Minor patch 2012-12-18 11:10:06 +01:00
Bernardo Damele 1fdd804e94 replaced instances of dataToStdout with logger 2012-12-17 13:30:21 +00:00
Bernardo Damele 064d443d60 replaced unnecessary dataToStdout() call with appropriate logger.info() call 2012-12-17 11:30:08 +00:00
Miroslav Stampar 562044577b Implementation for an Issue #292 2012-12-11 12:02:06 +01:00
Miroslav Stampar 996e882e78 Minor update 2012-12-10 17:13:00 +01:00
Miroslav Stampar 974407396e Doing some more style updating (capitalization of exception classes; using _ is enough for private members - __ is used in Python specific methods) 2012-12-06 14:14:19 +01:00
Miroslav Stampar ab67344448 Removed unused imports and variables (pyflake-ing) 2012-12-06 11:15:05 +01:00
Miroslav Stampar 775e0df04b Update for an Issue #278 2012-12-05 10:45:17 +01:00
Miroslav Stampar 7304971544 Patch for ORDER BY test on MsSQL on cases with 'The text, ntext, and image data types cannot be compared or sorted, except when using IS NULL or LIKE operator' 2012-11-29 11:43:49 +01:00
Miroslav Stampar 7c16bfe025 Fix for error-based MsSQL dumping (in some cases failed because of wrong order - e.g. MIN(SUBSTRING( instead of SUBSTRING(MIN ) 2012-11-29 10:51:59 +01:00
Miroslav Stampar 621ae587c7 Fix for an Issue #263 2012-11-28 00:03:17 +01:00
Miroslav Stampar a40d7a5bca Minor improvement (safer to use column name in COUNT than *, especially when only one column is needed) 2012-11-15 15:06:54 +01:00
Miroslav Stampar b75c52f93c Minor display fix (in --hex mode) 2012-10-28 12:30:21 +01:00
Miroslav Stampar 25a5073281 Bug fix for --hex/--technique=B (especially MsSQL) 2012-10-28 12:22:33 +01:00
Miroslav Stampar c1b8226329 Massive renaming (proper naming is inband = union & error techniques! - query naming stays as they are/in code things like forgeInbandQuery are renamed to forgeUnionQuery) 2012-10-28 00:36:09 +02:00
Miroslav Stampar 99ceea5eae Fix for an Issue #214 2012-10-23 17:05:45 +02:00
Miroslav Stampar 54d086f409 Minor fix 2012-10-23 10:02:10 +02:00
Miroslav Stampar 029143880a Displaying hex-decoded resulting output in --hex mode 2012-10-22 14:36:01 +02:00
Miroslav Stampar e61c4c22c9 Implementation for an Issue #200 2012-10-09 15:19:47 +02:00