b3bd4144f5
removing of unused imports together with some general code refactoring
2012-02-22 10:40:11 +00:00
dcf7277a0f
some more refactorings
2012-02-16 14:42:28 +00:00
7bca926a0b
fixes, updates, patches
2012-02-09 10:16:58 +00:00
d8c343a88a
minor update
2012-01-30 13:29:43 +00:00
accac776fe
some fixes
2012-01-13 14:10:53 +00:00
95f89ab63a
updating copyright date
2012-01-11 14:59:46 +00:00
ff52931140
some refactoring (skipping duplicate messages in case that UNION/ERROR techniques failed and BOOLEAN/TIMED/STACKED are not available)
2012-01-07 19:30:35 +00:00
39b406c5c1
fix for --search on Oracle
2011-12-02 18:13:27 +00:00
440b7efe55
minor optimization
2011-11-20 20:14:47 +00:00
25f0ec3597
some minor range to xrange conversion (where safe to do)
2011-10-21 22:34:27 +00:00
aedcf8c8d7
Changed homepage address
2011-07-07 20:10:03 +00:00
f7196007ca
--search on Oracle is now consistent with other plugins
2011-06-24 14:33:30 +00:00
ca6f9acf30
minor fix for resuming in multi threading mode
2011-06-18 12:23:18 +00:00
a397baa89a
fix for a bug reported by viniciusmaxdaloop@gmail.com and few related patches
2011-05-26 08:17:21 +00:00
dac59a55bc
leftover
2011-05-03 14:14:39 +00:00
c58dc4a6d8
isDbmsWithin() must stay like this, no getIdentifiedDbms() in there
2011-05-03 14:13:45 +00:00
955dbc85e7
Minor variable rename
2011-04-30 15:29:59 +00:00
f56d135438
Minor code restyling
2011-04-30 13:20:05 +00:00
0387654166
update of copyright string (until year)
2011-04-15 12:33:18 +00:00
b6af80bab3
refactoring, cleanup and improvement
2011-03-29 21:54:15 +00:00
73e5d20ade
bulk commit for safe/unsafe identificator naming (done and tested for all 4 major DBMSes) and one bug fix for --search-column on MSSQL (inside queries)
2011-03-28 11:01:55 +00:00
4889764114
minor update regarding last commit
2011-03-21 11:40:27 +00:00
5291fe35c9
proper implementation of --dbs on Oracle (we are using now schema names as a counterpart to dbs in other DBMSes)
2011-03-21 11:29:43 +00:00
a2c20acf94
Minor fixes once more
2011-02-10 11:34:16 +00:00
ecaf5729fd
revert
2011-02-06 22:14:18 +00:00
caaac72029
minor update regarding last commit
2011-02-06 20:15:03 +00:00
367d0639f0
refactoring (class names should always be Capital cased)
2011-01-28 16:36:09 +00:00
50c02fbb37
Done with previous refactoring
2011-01-20 00:01:06 +00:00
bade0e3124
Major code refactoring - centralized all kb.dbms* info for both retrieval and set.
2011-01-19 23:06:15 +00:00
daebb0010b
Major bug fix to properly process custom queries (--sql-query/--sql-shell) when technique in use is error-based.
...
Alignment of SQL statement payload packing/unpacking between all of the techniques.
Minor bug fix to use the proper charset (2, numbers) when dealing with COUNT() in custom queries too.
Minor code cleanup.
2011-01-18 23:02:11 +00:00
2d9b151883
Minor bug fix
2011-01-15 10:14:05 +00:00
e4e9b11b79
Minor code refactoring and adjustments - kb.dbms is needed in fingerprint.py, not getIdentifiedDBMS because when checkDbms() method is called, it's within the fingerprint phase and at that stage, getIdentifiedDBMS() would always return kb.misc.fpDbms.
2011-01-14 12:47:07 +00:00
3c95d71ea5
Minor bug fix - restored of so called kb.misc.testedDbms (now kb.misc.fpDbms) to force the DBMS (only) during the fingerprint phase
2011-01-14 11:55:20 +00:00
2ac8debea0
Major code refactoring - moved to one location only (getIdentifiedDBMS() in common.py) the retrieval of identified/fingerprinted DBMS.
...
Minor bug fixes thanks to previous refactoring too.
2011-01-13 17:36:54 +00:00
8a67aea754
One more step to fully working UNION exploitation after merge into detection phase
2011-01-12 01:13:32 +00:00
5f9b6b2254
code refactoring
2011-01-02 16:51:21 +00:00
42e7b1b3a7
bug fix
2010-12-30 22:40:37 +00:00
108a96c6b4
some fixes
2010-12-17 21:45:20 +00:00
a02dd6b55b
Minor enhancement to speedup active dbms fingerprint (-f).
...
Code cleanup and refactoring.
2010-12-13 21:33:42 +00:00
e6c66fa37c
update regarding expectingNone in fingerprinting mode to cancel drop down to other techniques available
2010-12-11 17:55:28 +00:00
b02bd55edc
minor refactoring
2010-12-10 13:04:36 +00:00
bbffea2cbc
bug fix
2010-12-09 17:10:22 +00:00
0eb2c408a9
code refactoring
2010-12-09 16:49:02 +00:00
d77ddbee47
OR based inference works for the first time in history and fingerprint of 4 major DBMSes is now injection based (instead of AND)
2010-12-06 18:20:57 +00:00
c8f943f5e4
Now, if the back-end dbms type has been identified by the detection engine, skips the fingerprint phase.
...
Major code refactoring and commenting to detection engine.
Ask user whether or not to proceed to test remaining parameters after an injection point has been identified.
Restore beep at SQL injection find.
Avoid reuse of same variable in DBMS handler code.
Minor adjustment of payloads XML file.
2010-11-30 22:40:25 +00:00
66c82d72e4
Typo fix
2010-11-12 10:02:02 +00:00
862395ced1
further refactoring (all enumerations are now put into enums.py)
2010-11-08 09:20:02 +00:00
27ce4b0cf0
Set proper verbose level for dbms direct error messages
2010-11-07 22:14:06 +00:00
d3e7e89e60
major improvement with display of payloads (all payloads are displayed now) and removal of "pesky" spaces
2010-11-07 21:18:09 +00:00
70f6eab715
minor update
2010-11-02 12:08:28 +00:00
Miroslav Stampar