8bab94de64
added two new functions: isBase64EncodedString and isHexEncodedString for Feature #71
2010-03-26 17:18:02 +00:00
f9a135e232
Minor bug fix and layout adjustment regarding --threading and standard output
2010-03-22 17:38:19 +00:00
d00e4a458a
Code cleanup
2010-03-21 00:39:44 +00:00
0d559d14df
Initial support for SQLite (90% approx).
...
Initial support for Firebird (30% approx).
Initial support for Access (10% approx).
Shared libraries code/installation scripts ported to 64bit, directory structure adapted.
Minor code adjustments.
2010-03-18 17:20:54 +00:00
3b3353e05b
Revert last commit
2010-03-16 13:56:36 +00:00
1dfe558d3d
Fix for Issue #177
2010-03-16 13:11:44 +00:00
5063401130
Minor bug fix, fixes #170
2010-03-15 11:00:14 +00:00
b544405878
fixed some issue involving banner parsing
2010-03-04 09:15:26 +00:00
a654a426ef
Minor adjustments
2010-03-03 16:19:17 +00:00
156fdd96ef
Updated copyright
2010-03-03 15:26:27 +00:00
694356821d
sqlmap does not save nor leave back in temporary folder any file named 'sqlmapRANDOM', only random names now, less suspicious
2010-02-26 13:13:50 +00:00
8c68d25b39
Major bug fix, be careful when editing isWindowsPath() and normalizePath() in common.py, they can break all
2010-02-26 12:00:47 +00:00
98496fd173
Show also site in the banner
2010-02-25 17:37:46 +00:00
404927d04a
Adjusted banner, increased release candidate to rc7
2010-02-25 17:34:54 +00:00
d95a8850c8
fix
2010-02-25 16:38:39 +00:00
0913d700a8
important update regarding default directories
2010-02-25 15:22:41 +00:00
a10adcfe08
Minor code cleanup
2010-02-25 15:16:41 +00:00
3721451cd6
default dirs update
2010-02-25 14:51:39 +00:00
9c014c0fd0
minor change
2010-02-20 23:11:05 +00:00
cef248a5ea
update for that invalid target url Otavio Augusto reported
2010-02-10 12:06:23 +00:00
00a23ace9a
some changes regarding web takeover
2010-02-09 14:27:41 +00:00
ec63fc4036
code refactoring - added functions posixToNtSlashes and ntToPosixSlashes
2010-02-04 14:37:00 +00:00
e4699f389d
some bug fixes regarding --os-shell usage against windows servers
2010-02-04 09:49:31 +00:00
ea045eaa2f
fixed serious issue with adding file paths into kb.absFilePaths (dirname was wrongly added, and afterwards getDirs used dirname of dirname)
...
also, fixed some issues with Windows paths
2010-02-03 16:40:12 +00:00
494e014a4a
minor update
2010-02-03 16:04:44 +00:00
894b9f0f80
minor minor update
2010-02-03 15:15:30 +00:00
25f1a9c7d0
upgrade of web directory parsing for things like C:/xampp/htdocs/sqlmap/mysql/get_int.php (XAMPP uses this)
2010-02-03 15:06:41 +00:00
c74b920f54
bug fix
2010-02-03 14:49:28 +00:00
92817159dc
cloaked upx for windows (used mkstemp because of execution and file access rights problem)
2010-01-29 10:12:09 +00:00
6f5d2ed171
Minor cosmetic adjustments
2010-01-28 17:07:34 +00:00
732ed48e2b
some refactoring regarding decloaking
2010-01-28 16:50:34 +00:00
645afee359
some changes
2010-01-28 00:25:36 +00:00
a4d8234875
minor update
2010-01-24 14:23:19 +00:00
98205cc488
another fix for Bug #148
2010-01-23 23:29:34 +00:00
4ce3abc56d
Minor adjustments
2010-01-15 17:42:46 +00:00
5f171340f5
introduced safe string formatting
2010-01-15 16:06:59 +00:00
dcf0b2a3c1
minor update
2010-01-15 11:45:48 +00:00
f5c422efb4
updated and renamed sanitizeCookie to urlEncodeCookieValues because of it's different nature than before
2010-01-15 11:44:05 +00:00
6a62a78b0a
More generic
2010-01-08 23:50:06 +00:00
80df1fdcf9
Minor bug fix with --sql-query/shell when providing a statement with DISTINCT
2010-01-05 16:15:31 +00:00
954a927cee
Minor bug fix to properly execute --time-test also on MySQL >= 5.0.12
2010-01-05 11:43:16 +00:00
71547a3496
getDocRoot changes
2010-01-05 11:30:33 +00:00
ce022a3b6e
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 02:02:12 +00:00
e4e081cdc6
sqlmap 0.8-rc2: minor enhancement based on msfencode 3.3.3-dev -t exe-small so that also PostgreSQL supports again the out-of-band via Metasploit payload stager optionally to shellcode execution in-memory via sys_bineval() UDF. Speed up OOB connect back. Cleanup target file system after --os-pwn too. Minor bug fix to correctly forge file system paths with os.path.join() all around. Minor code refactoring and user's manual update.
2009-12-17 22:04:01 +00:00
89c43893d4
Merged back from personal branch to trunk (svn merge -r846:940 ...)
...
Changes:
* Major enhancement to the Microsoft SQL Server stored procedure
heap-based buffer overflow exploit (--os-bof) to automatically bypass
DEP memory protection.
* Added support for MySQL and PostgreSQL to execute Metasploit shellcode
via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an
option instead of uploading the standalone payload stager executable.
* Added options for MySQL, PostgreSQL and Microsoft SQL Server to
read/add/delete Windows registry keys.
* Added options for MySQL and PostgreSQL to inject custom user-defined
functions.
* Added support for --first and --last so the user now has even more
granularity in what to enumerate in the query output.
* Minor enhancement to save the session by default in
'output/hostname/session' file if -s option is not specified.
* Minor improvement to automatically remove sqlmap created temporary
files from the DBMS underlying file system.
* Minor bugs fixed.
* Major code refactoring.
2009-09-25 23:03:45 +00:00
b4fd71e8b9
Minor adjustment to reflect Metasploit r6849 ( http://trac.metasploit.com/changeset/6849 ) and minor code refactoring.
2009-07-20 14:36:33 +00:00
cb3d2bac16
Minor improvement so that sqlmap tests also all parameters with no value (ig. par=).
2009-07-09 11:25:35 +00:00
516fdb9356
Avoid to upload the web backdoor to unexisting empty-name directory
2009-07-09 11:11:25 +00:00
150abc0f1e
sqlmap 0.7-rc3: Reset takeover OOB features (if any of --os-pwn, --os-smbrelay or --os-bof is selected) when running under Windows because msfconsole and msfcli are not supported on the native Windows Ruby interpreter. Correctly handle fcntl to be imported only on systems different from Windows. Minor code refactoring.
2009-06-11 15:01:48 +00:00
45dff4a00a
Added new function to search a file within the PATH environment variable paths:
...
it will be used when sqlmap will be packaged as DEB and RPM
2009-05-12 20:24:47 +00:00
Miroslav Stampar