862395ced1
further refactoring (all enumerations are now put into enums.py)
2010-11-08 09:20:02 +00:00
91a3a582e8
Minor bug fix to avoid crash when running sqlmap behind a proxy server
2010-11-04 12:22:04 +00:00
6adee3792a
removed all trailing spaces from blank lines
2010-11-03 10:08:27 +00:00
c7c84c3089
Closes #111 (DECLARE/CHAR encode xp_cmdshell parameter in MSSQL).
2010-11-02 15:31:51 +00:00
685a8e7d2c
refactoring of hard coded dbms names
2010-11-02 11:59:24 +00:00
65a0a8d285
Delegate urlencoding to agent.py only
2010-10-31 13:28:05 +00:00
a0df231aa4
Avoid waiting 30 seconds when cleaning up the dbms and file system from sqlmap data
2010-10-29 13:09:53 +00:00
b3b2c3864a
Minor code refactoring
2010-10-29 10:51:09 +00:00
4f8e9da1b6
Minor bug fix to properly delete sqlmap temporary files on the database server file system at shutdown.
...
Minor improvements at ICMPsh tunnel to cleanup properly the dbms at shutdown and avoid checking/writing sys_bineval() UDF as it's a PE and needs to be called by sys_exec() only.
Got rid of useless doubleslash param in delRemoteFile() method.
Major code refactoring to xp_cmdshell.py methods and parent calls.
2010-10-28 00:19:40 +00:00
56c16cb471
Minor bug fixes and enhancements to ICMPsh tunnel
2010-10-27 23:01:17 +00:00
a391be833b
Implemented ICMP tunneling for out-of-band takeover (--os-pwn) as an alternative to TCP tunneling (Metasploit). It relies on icmpsh, the back-end dbms server has to be Windows as the icmpsh slave runs on Windows only for the moment. sqlmap needs to be executed as root to work.
2010-10-27 21:02:22 +00:00
bdb9c37a7e
Cosmetics
2010-10-25 15:17:59 +00:00
e6e48c5556
fix for Bug #204
2010-10-22 18:23:46 +00:00
1b2ec826bf
misc fixes regarding new query retrieval format
2010-10-21 23:17:06 +00:00
e73e06069b
Minor code refactoring
2010-10-20 22:09:03 +00:00
862cc9ac53
Minor cosmetic fixes
2010-10-20 21:58:33 +00:00
f95098693f
Removed unused functions
2010-10-20 21:16:28 +00:00
683184cc8f
Minor refactoring
2010-10-17 21:06:52 +00:00
f54c134d22
Minor adjustment
2010-10-16 22:43:05 +00:00
4f7f20b94f
sorry, cosmetics
2010-10-14 23:18:29 +00:00
8b48833136
large commit with copyright header modifications
2010-10-14 14:41:14 +00:00
49915f3c33
minor update
2010-09-30 19:49:14 +00:00
87abec16bd
probable fix for a bug reported by Prashant Jadhav
2010-09-30 18:52:33 +00:00
8dfe08a353
Minor bug fix to -d
2010-07-01 10:44:31 +00:00
12a5ec9f3d
more unicode refactoring
2010-06-02 12:45:40 +00:00
8be91a98cc
Minor bug fix and adjustment
2010-05-29 15:28:37 +00:00
89c721a451
More replacements from open() to codecs.open(). conf.dataEncoding has to be used only for non-binary files.
2010-05-29 10:10:28 +00:00
84778f0e6c
Minor fix, leave like this
2010-05-29 08:58:55 +00:00
d3e527aba3
minor update
2010-05-29 07:13:54 +00:00
10521b68eb
Major bug fix in multipartpost and minor adjustments elsewhere
2010-05-28 23:12:20 +00:00
06af405efd
Adapted and merged in patch to support XML output (-x switch) - still in beta.
...
Minor bug fixes and adjustments.
2010-05-28 16:43:04 +00:00
a3db3c03c1
str() -> unicode()
2010-05-28 13:05:02 +00:00
dc83f794ea
fix regarding proper string isinstance checking (including unicode)
2010-05-25 10:09:35 +00:00
a21a7fc56d
Minor code refactoring
2010-05-21 12:09:31 +00:00
4c91b5a896
Minor fix
2010-05-10 14:18:41 +00:00
a1b1f960cc
Finally fixed and adapted all code around to the new isWindowsDriveLetterPath() function
2010-04-23 16:34:20 +00:00
1bcec80e95
fix for that takeover bug Ethan Robish posted (Windows/PHP)
2010-04-22 10:31:33 +00:00
b19de015c5
Minor bugs fixes
2010-03-31 13:52:51 +00:00
d00e4a458a
Code cleanup
2010-03-21 00:39:44 +00:00
4c6c91a80b
another --reg-read fix
2010-03-12 23:12:06 +00:00
7d8cc1a482
Get rid of Churrasco (Token kidnapping technique to --priv-esc). Reasons why:
...
1. there's kitrap0d (MS10-015) which is far more reliable, just recently fixed
2. works only to priv esc basically on MSSQL when it runs as NETWORK SERVICE and the machine is not patched against MS09-012 which is "rare" (hopefully) nowadays.
Now sqlmap relies on kitrap0d and incognito to privilege escalate the database process' user privileges to SYSTEM, both via Meterpreter.
Minor layout adjustments.
2010-03-12 22:43:35 +00:00
6b1ae62753
final fix for reading registry keys (now both parse and non-parse reads work fine)
2010-03-12 22:26:06 +00:00
0a2fe651ab
some fixes regarding registry reading
2010-03-12 22:09:58 +00:00
b50a2288f4
Minor layout adjustments
2010-03-11 23:54:07 +00:00
cc611c0010
Minor layout adjustments
2010-03-09 22:14:26 +00:00
156fdd96ef
Updated copyright
2010-03-03 15:26:27 +00:00
2f452480b3
Minor bug fix in syntax
2010-03-01 14:40:18 +00:00
f53ef947f1
Slightly stealthier
2010-02-26 13:14:57 +00:00
694356821d
sqlmap does not save nor leave back in temporary folder any file named 'sqlmapRANDOM', only random names now, less suspicious
2010-02-26 13:13:50 +00:00
1f2a1bb24c
removed some redundant code
2010-02-26 12:36:41 +00:00
Miroslav Stampar