Commit Graph

381 Commits

Author SHA1 Message Date
Miroslav Stampar 4df8a03c04 using OrderedDict to store parameters in order of appearance 2011-02-04 18:07:21 +00:00
Bernardo Damele fec88f6a6d Minor fix 2011-02-04 15:57:53 +00:00
Miroslav Stampar accf4e6ce0 one important fix (URI injection parameter '*' now can go anywhere) 2011-02-04 12:43:18 +00:00
Miroslav Stampar c229efba05 revert 2011-02-04 11:33:21 +00:00
Miroslav Stampar d211def899 minor adjustment (accepting strange new looking uri formats) 2011-02-04 10:55:03 +00:00
Miroslav Stampar 9a1a28c804 adding comments to filtering function 2011-02-03 23:09:08 +00:00
Miroslav Stampar 2dae57a56d cosmetics 2011-02-02 14:35:21 +00:00
Miroslav Stampar 6c87bd1c63 added maskSensitiveData function 2011-02-02 14:25:16 +00:00
Bernardo Damele 3d966bd569 You never know.. 2011-02-01 22:05:12 +00:00
Miroslav Stampar 705d45f4db minor cosmetics 2011-02-01 11:10:23 +00:00
Miroslav Stampar 196e2d35b2 maybe we could ask user "are you willing to import local data content into error report" and use this function respectably 2011-02-01 11:06:56 +00:00
Bernardo Damele 6761933f75 Just.. cosmetics ;) 2011-01-31 22:51:14 +00:00
Miroslav Stampar 25c175a9a5 minor bug fix 2011-01-31 22:34:57 +00:00
Bernardo Damele b04e1a0313 More detailed message for unhandled exception 2011-01-31 21:23:40 +00:00
Miroslav Stampar 8ef47307db added checking of header values for GREP (error); still UNION to do 2011-01-31 12:21:17 +00:00
Miroslav Stampar 5e768be509 minor bug fix 2011-01-31 09:34:54 +00:00
Miroslav Stampar f7feebe0df fix for a bug reported by malice.anon@gmail.com (TypeError: encode() takes no keyword arguments) 2011-01-31 09:28:16 +00:00
Miroslav Stampar ddf23ba7cc refactoring 2011-01-30 11:36:03 +00:00
Miroslav Stampar 367d0639f0 refactoring (class names should always be Capital cased) 2011-01-28 16:36:09 +00:00
Miroslav Stampar ddd296030d added some more info to unhandled exception message(s) 2011-01-28 16:15:45 +00:00
Miroslav Stampar 81722b6881 major bug fix reported by Ahmed Shawky (there was a possibility of double url encoding of parameter values) 2011-01-27 18:36:28 +00:00
Miroslav Stampar 6cc69f5e16 now --technique is appliable also after the injections have been identified 2011-01-24 16:47:24 +00:00
Miroslav Stampar 81011be0d7 minor update of parseTargetUrl method 2011-01-24 14:52:50 +00:00
Miroslav Stampar b18397fbc7 major revisit of --os-shell methods 2011-01-23 20:47:06 +00:00
Bernardo Damele 7d1c704575 Moved little precaution from checks.py to common.py.
Initial refactoring of kb.os* get/set.
2011-01-20 21:56:10 +00:00
Miroslav Stampar 345e2288e1 important fix regarding encoding stuff 2011-01-20 13:54:18 +00:00
Bernardo Damele bade0e3124 Major code refactoring - centralized all kb.dbms* info for both retrieval and set. 2011-01-19 23:06:15 +00:00
Miroslav Stampar aea43a1e43 minor refactoring 2011-01-19 15:26:57 +00:00
Miroslav Stampar eadaf680de fuck yea 2011-01-19 15:25:48 +00:00
Miroslav Stampar 89e0fd0709 back to roots 2011-01-19 14:06:26 +00:00
Bernardo Damele 33485198e1 Code cleanup 2011-01-18 23:05:32 +00:00
Bernardo Damele 47565f9459 Minor code refactoring 2011-01-17 21:13:59 +00:00
Miroslav Stampar 041abb56e2 you can't believe how much man can learn when having good testing points 2011-01-17 13:59:22 +00:00
Miroslav Stampar d225c5c9aa was wrong about this one (just now tested on a real site) 2011-01-17 11:00:09 +00:00
Miroslav Stampar ac0b5e6dbc proper way to handle this (console output has totally different encoding than the page one) 2011-01-17 10:27:36 +00:00
Miroslav Stampar 2041361695 minor cosmetics 2011-01-16 23:20:52 +00:00
Miroslav Stampar e2c821eb81 minor cosmetics 2011-01-16 22:35:54 +00:00
Miroslav Stampar e881465a9f minor improvement 2011-01-16 20:55:07 +00:00
Miroslav Stampar 30d6791968 update regarding time based data retrieval 2011-01-16 17:52:42 +00:00
Miroslav Stampar 2001bad7e1 automatic adjustment of timeSec for delayed queries 2011-01-16 12:04:32 +00:00
Miroslav Stampar 71391874eb slightly faster and thread safer inference 2011-01-16 10:52:42 +00:00
Miroslav Stampar 29ea0950b6 now False is also affected (along with None and "") 2011-01-15 23:43:26 +00:00
Bernardo Damele 558f3894f4 Minor improvement 2011-01-15 23:20:52 +00:00
Miroslav Stampar 5bdb50c224 code review part 3 2011-01-15 13:15:10 +00:00
Miroslav Stampar 6a0e0cde3c code review of modules in lib/core directory 2011-01-15 12:13:45 +00:00
Miroslav Stampar daf5662eab update 2011-01-14 15:33:49 +00:00
Bernardo Damele 1cfd6a6b9d Code cleanup 2011-01-14 15:16:34 +00:00
Miroslav Stampar 08f7e20c51 minor code refactoring 2011-01-14 14:55:59 +00:00
Miroslav Stampar fb9d7cdfaa refactoring, code clearing and removal of obsolete switch --longest-common 2011-01-14 14:37:03 +00:00
Bernardo Damele 3c95d71ea5 Minor bug fix - restored of so called kb.misc.testedDbms (now kb.misc.fpDbms) to force the DBMS (only) during the fingerprint phase 2011-01-14 11:55:20 +00:00