Commit Graph

1771 Commits

Author SHA1 Message Date
Miroslav Stampar 83feb097ef greater flexibility for --batch when default is None 2011-04-08 22:29:50 +00:00
Miroslav Stampar 6fa2fd139c implemented support for __pivotDumpTable on MSSQL as normal tables tend to not play well with normal TOP 1 ..NOT IN..ORDER BY mechanism if the argument for ORDER BY is not the unique one (returns only number of rows equal to the number of distinct values for that field) 2011-04-08 15:17:57 +00:00
Bernardo Damele beb98140b3 Minor improvement to --check-payload 2011-04-08 14:34:00 +00:00
Miroslav Stampar 228cc68747 fix for those ugly DEBUG messages in brute mode 2011-04-08 11:02:21 +00:00
Bernardo Damele 5b21352656 cosmeticados ;) 2011-04-08 10:39:07 +00:00
Miroslav Stampar be11e2535e one more minor update 2011-04-08 00:05:44 +00:00
Miroslav Stampar 3435d549a9 minor update regarding the last commit 2011-04-07 23:35:51 +00:00
Miroslav Stampar 726155383d higher compatibility with MSSQL 2000 ("ORDER BY items must appear in the select list if the statement contains a UNION operator.") as we always take the first field from the list as the one for referencing (field = expressionFieldsList[0]) 2011-04-07 23:32:07 +00:00
Miroslav Stampar b288e5ef57 implemented DNS caching mechanism 2011-04-07 21:39:18 +00:00
Miroslav Stampar ae4ea0af45 fix for a bug reported by m4l1c3 (AttributeError: 'NoneType' object has no attribute 'replace') 2011-04-07 13:57:07 +00:00
Miroslav Stampar 6a8a5db9aa minor code restyling 2011-04-07 13:27:29 +00:00
Miroslav Stampar e33a48d40f minor refactoring 2011-04-07 12:54:30 +00:00
Bernardo Damele c6b9d89d31 Accept [RANDNUM] as <char> in payloads.xml and handle it accordingly 2011-04-07 11:10:35 +00:00
Bernardo Damele 9e8c933333 cosmetics 2011-04-07 10:40:58 +00:00
Miroslav Stampar 68828d68a5 removed integers from --technique 2011-04-07 10:37:48 +00:00
Miroslav Stampar fced81b6be minor update 2011-04-07 10:32:39 +00:00
Miroslav Stampar 845533e92f minor refactoring 2011-04-07 10:27:22 +00:00
Bernardo Damele 1880f18367 Minor layout adjustments 2011-04-07 10:07:52 +00:00
Bernardo Damele 17844eb87c Refactoring to --technique 2011-04-07 10:00:47 +00:00
Bernardo Damele 05d12790f1 closes #219 - unhidden switch --technique and adapted code accordingly (renamed conf.technique to conf.tech to fit properly in the -h help message) 2011-04-06 14:41:44 +00:00
Bernardo Damele 8b14a9eaa7 Minor code adjustments 2011-04-06 14:40:45 +00:00
Miroslav Stampar a379463213 cosmeticado 2011-04-06 08:40:06 +00:00
Miroslav Stampar b327bbcd9b minor fix (it was quite ... to have this check at the later stage) 2011-04-06 08:39:24 +00:00
Miroslav Stampar fdef6726cf minor update 2011-04-06 08:30:50 +00:00
Bernardo Damele d436ba2da5 Minor "fix" when reading hashes from a local sqlite3 (result of --replicate) and there is an int as value 2011-04-06 08:19:56 +00:00
Bernardo Damele 81034140c0 Reduced number of threads to 3 when -o is provided 2011-04-06 08:15:20 +00:00
Miroslav Stampar 265fa52600 minor code cosmetics 2011-04-04 18:24:16 +00:00
Miroslav Stampar 018b6b9430 fix for a charset encoding reported by Kirill 2011-04-04 18:20:09 +00:00
Miroslav Stampar 2c01fc56e6 minor update regarding misusage of --proxy and --ignore-proxy switches 2011-04-04 09:19:43 +00:00
Miroslav Stampar e957c4400c minor revisit of tampering script(s) functionality (urlencode one is removed as it's currently obsolete regarding the whole process of automatic urlencoding) 2011-04-04 08:04:47 +00:00
Miroslav Stampar 305115a68b important improvement of data handling (POST data and header values) 2011-04-03 15:02:52 +00:00
Miroslav Stampar bbd4c128b0 minor update related to the last commit 2011-04-01 22:19:42 +00:00
Miroslav Stampar cd7e4f5afc improvement for lots of multiple-selection forms (now by default the first one is selected - till now it was left unchecked which lead to blank get/post data for the whole form) 2011-04-01 22:12:24 +00:00
Bernardo Damele c3b54cc222 Cosmetics 2011-04-01 16:40:28 +00:00
Miroslav Stampar e27afef6be minor update regarding --current-db on Oracle 2011-04-01 15:56:11 +00:00
Bernardo Damele eb99f68a7a Minor improvement to --wizard. This does not mean I like the kiddie feature though ;) 2011-04-01 14:55:39 +00:00
Miroslav Stampar de4e0c7346 minor update related to the problem with request files reported by jorge_a_santos@hotmail.com 2011-04-01 12:09:11 +00:00
Miroslav Stampar ee15988878 another minor update related to previous commit 2011-03-31 17:34:07 +00:00
Miroslav Stampar 156d24203f speed optimization 2011-03-31 17:16:26 +00:00
Miroslav Stampar 220366b6e8 minor update (ip addresses will not be confused any more for crypt_generic hashes) 2011-03-31 16:56:26 +00:00
Miroslav Stampar 557ed7d665 minor fix for a invalid charset reported by Kirill 2011-03-31 14:39:01 +00:00
Bernardo Damele fed57282fc Added one more warning message to show what's going on with ctrl+c 2011-03-31 14:26:14 +00:00
Bernardo Damele 3948cd9e77 Minor layout adjustments 2011-03-31 14:13:53 +00:00
Miroslav Stampar c5de903eab minor improvement ("quick defense against substr fields") 2011-03-31 09:35:09 +00:00
Miroslav Stampar ce51326bff quick fix 2011-03-31 08:43:17 +00:00
Miroslav Stampar 0916117447 improvement of error-based testing (no more sqlmap aborting on error-based payloads which happens very often on MySQL servers); also, minor improvement on brute forcing of column names 2011-03-30 18:32:10 +00:00
Miroslav Stampar dd01d66f13 proper update regarding last commit 2011-03-29 22:10:08 +00:00
Miroslav Stampar 850328df6c minor cosmetics 2011-03-29 22:03:48 +00:00
Miroslav Stampar b6af80bab3 refactoring, cleanup and improvement 2011-03-29 21:54:15 +00:00
Miroslav Stampar adfbfef8c1 minor refactoring 2011-03-29 21:01:47 +00:00