Commit Graph

1305 Commits

Author SHA1 Message Date
Miroslav Stampar 9cf33ec997 now status is no longer represented in percentage (impossible in cases where we need to support too small and too large dictionaries - technical issues regarding counting) but by the rotating char 2011-07-15 13:24:13 +00:00
Miroslav Stampar ff8fc90ac7 bug fix 2011-07-13 06:44:15 +00:00
Miroslav Stampar 5c162efbd8 more optimization 2011-07-12 23:21:15 +00:00
Miroslav Stampar 9933edc718 optimization of reflective removal mechanism 2011-07-12 22:28:19 +00:00
Miroslav Stampar 3583d6dd1b quick fixes, more work to do 2011-07-12 20:32:19 +00:00
Miroslav Stampar f5e45bf113 quick fix for a bug reported by jovon.itwaru@gmail.com 2011-07-11 08:54:39 +00:00
Miroslav Stampar 0d6afca7db adding new switch '--smart' by request 2011-07-10 15:16:58 +00:00
Miroslav Stampar 1e182e6c72 quick fix 2011-07-08 22:34:44 +00:00
Bernardo Damele 651349e229 More verbose critical message 2011-07-08 13:12:53 +00:00
Bernardo Damele b5dd4d4a63 Minor bug fix for Microsoft Access case expressions (like --common-tables) in UNION query SQL injection 2011-07-08 10:19:01 +00:00
Miroslav Stampar 02bfd05b20 more general approach 2011-07-08 10:03:14 +00:00
Miroslav Stampar 5443e06430 cosmetics (in debug mode [0] is used) 2011-07-08 09:43:52 +00:00
Miroslav Stampar c463c411b9 minor update 2011-07-08 09:32:58 +00:00
Miroslav Stampar ba2c06c9dc quick fix 2011-07-08 09:01:32 +00:00
Miroslav Stampar c517e97a44 few fixes and minor cosmetics 2011-07-08 06:02:31 +00:00
Bernardo Damele aedcf8c8d7 Changed homepage address 2011-07-07 20:10:03 +00:00
Bernardo Damele 067354b97f Revert of last commit and proper fix to detect UNION query SQL injection against Microsoft Access 2011-07-07 13:20:40 +00:00
Bernardo Damele fcd4e94c04 Higher chances to detect UNION query SQL injection against Microsoft Access 2011-07-06 23:52:44 +00:00
Bernardo Damele 23b4efdcaf Revamp of tamper scripts, now supporting dependencies() function as well. Improved a lot the docstring and retested all. Added a new one from Ahmad too. 2011-07-06 21:04:45 +00:00
Bernardo Damele 6f6038b534 Quick fix (revert..) 2011-07-06 11:32:12 +00:00
Miroslav Stampar 93b296e02c few bug fixes (NTLM credential parsing was wrong), some switch reordering (few Misc to General), implemented --check-waf switch (irony is that this will also be called highly experimental/unstable while other things will be called "major/turbo/super bug fix/implementation") 2011-07-06 05:44:47 +00:00
Miroslav Stampar b8ffcf9495 few fixes here and there and multi-core processing for dictionary based hash attack 2011-07-04 19:58:41 +00:00
Miroslav Stampar 34d9a91af1 bulk of fixes 2011-07-02 22:48:56 +00:00
Bernardo Damele 861cdb1b14 cosmetics 2011-07-01 10:04:34 +00:00
Miroslav Stampar 4513ef409e massive (like really massive) dictionary support 2011-06-30 23:44:49 +00:00
Miroslav Stampar 43db6b03a7 update with a feature request (file with list of wordlist files) 2011-06-30 08:42:43 +00:00
Miroslav Stampar be9b8bca78 bug fix 2011-06-29 17:39:58 +00:00
Miroslav Stampar 4be55c811f minor update 2011-06-27 21:48:26 +00:00
Miroslav Stampar 5b4eaf48d9 minor fix (for those blank suffixes out of nowhere at the end of payload - not related to "-- ") 2011-06-27 21:34:49 +00:00
Miroslav Stampar 8a8b94883b minor update (that default quit in --batch was bothering me - my original idea and it was bad :) 2011-06-27 14:14:49 +00:00
Miroslav Stampar d72db1bf91 minor update (all misc options are alphabetically ordered) 2011-06-27 08:21:33 +00:00
Bernardo Damele 36c96ef796 Added DB2 support - patch provided by Sebastian Bittig 2011-06-25 09:44:24 +00:00
Miroslav Stampar aa83fe5c66 minor update 2011-06-24 18:19:33 +00:00
Miroslav Stampar 21010f702c minor beautification 2011-06-24 17:46:54 +00:00
Miroslav Stampar 96190cf594 minor update 2011-06-24 17:15:15 +00:00
Bernardo Damele 406f2cda09 Got rid of useless TAB completion in --sql-shell 2011-06-24 13:05:13 +00:00
Bernardo Damele 35ce6dedcf Got rid of useless imports 2011-06-24 09:59:11 +00:00
Bernardo Damele a78f5b4eb3 Minor adjustment to avoid function and variables with same name 2011-06-24 09:29:11 +00:00
Miroslav Stampar eaa2a4202f changing to: --crawl=CRAWLDEPTH 2011-06-24 05:40:03 +00:00
Miroslav Stampar 3717b8423f cleanest fix this moment (conf.dbms will for sure deal problems later in any form) 2011-06-22 15:48:44 +00:00
Miroslav Stampar 5190440ea2 minor fix 2011-06-22 15:36:59 +00:00
Miroslav Stampar 97d8729d71 probable fix for a bug reported by m4l1c3 (RuntimeError: maximum recursion depth exceeded) 2011-06-22 15:28:49 +00:00
Miroslav Stampar 52ba3c281e minor update 2011-06-22 14:59:49 +00:00
Miroslav Stampar 4ca37901da thread safe logging+stdout (no more overlapping of log messages and raw output) 2011-06-22 14:53:42 +00:00
Miroslav Stampar 84bc8c3a37 update 2011-06-22 14:39:31 +00:00
Miroslav Stampar 938db1b513 replacing xmlobject logic with our own 2011-06-22 14:33:52 +00:00
Bernardo Damele 1cb12ea659 replaced third-party library python-mysql with python pymysql, http://code.google.com/p/pymysql/ (MIT license) 2011-06-22 13:31:07 +00:00
Miroslav Stampar 2a4a284a29 crawler fix (skip binary files) 2011-06-20 22:41:38 +00:00
Miroslav Stampar d6062e8fc9 minor fix for crawler and far less message overlaps in future 2011-06-20 21:18:12 +00:00
Miroslav Stampar 8968c708a0 minor update 2011-06-20 14:27:24 +00:00