367d0639f0
refactoring (class names should always be Capital cased)
2011-01-28 16:36:09 +00:00
b1d6040a48
Minor bug fix so that --search also works when the technique is error-based (which always return a list with lists inside)
2011-01-20 21:46:56 +00:00
50c02fbb37
Done with previous refactoring
2011-01-20 00:01:06 +00:00
bade0e3124
Major code refactoring - centralized all kb.dbms* info for both retrieval and set.
2011-01-19 23:06:15 +00:00
daebb0010b
Major bug fix to properly process custom queries (--sql-query/--sql-shell) when technique in use is error-based.
...
Alignment of SQL statement payload packing/unpacking between all of the techniques.
Minor bug fix to use the proper charset (2, numbers) when dealing with COUNT() in custom queries too.
Minor code cleanup.
2011-01-18 23:02:11 +00:00
2d9b151883
Minor bug fix
2011-01-15 10:14:05 +00:00
e4e9b11b79
Minor code refactoring and adjustments - kb.dbms is needed in fingerprint.py, not getIdentifiedDBMS because when checkDbms() method is called, it's within the fingerprint phase and at that stage, getIdentifiedDBMS() would always return kb.misc.fpDbms.
2011-01-14 12:47:07 +00:00
3c95d71ea5
Minor bug fix - restored of so called kb.misc.testedDbms (now kb.misc.fpDbms) to force the DBMS (only) during the fingerprint phase
2011-01-14 11:55:20 +00:00
2ac8debea0
Major code refactoring - moved to one location only (getIdentifiedDBMS() in common.py) the retrieval of identified/fingerprinted DBMS.
...
Minor bug fixes thanks to previous refactoring too.
2011-01-13 17:36:54 +00:00
8a67aea754
One more step to fully working UNION exploitation after merge into detection phase
2011-01-12 01:13:32 +00:00
8e1927fe31
minor fix
2011-01-02 18:12:18 +00:00
5f9b6b2254
code refactoring
2011-01-02 16:51:21 +00:00
7c06dbffc3
bug fix (AttributeError: 'unicode' object has no attribute 'sort')
2010-12-22 18:55:50 +00:00
1a3f57e5fe
Cosmetics
2010-12-21 09:23:00 +00:00
03b275ce33
update
2010-12-20 23:27:04 +00:00
108a96c6b4
some fixes
2010-12-17 21:45:20 +00:00
a19cb2c13a
code refactoring (added UNKNOWN_DBMS_VERSION instead of "Unknown")
2010-12-17 21:29:09 +00:00
b4450c6ddd
added one more level of MSSQL version check (if first fails for some reason)
2010-12-17 21:01:14 +00:00
a02dd6b55b
Minor enhancement to speedup active dbms fingerprint (-f).
...
Code cleanup and refactoring.
2010-12-13 21:33:42 +00:00
e6c66fa37c
update regarding expectingNone in fingerprinting mode to cancel drop down to other techniques available
2010-12-11 17:55:28 +00:00
435f48b8cc
polite cosmetics
2010-12-10 15:28:56 +00:00
b02bd55edc
minor refactoring
2010-12-10 13:04:36 +00:00
bbffea2cbc
bug fix
2010-12-09 17:10:22 +00:00
0eb2c408a9
code refactoring
2010-12-09 16:49:02 +00:00
d77ddbee47
OR based inference works for the first time in history and fingerprint of 4 major DBMSes is now injection based (instead of AND)
2010-12-06 18:20:57 +00:00
c8f943f5e4
Now, if the back-end dbms type has been identified by the detection engine, skips the fingerprint phase.
...
Major code refactoring and commenting to detection engine.
Ask user whether or not to proceed to test remaining parameters after an injection point has been identified.
Restore beep at SQL injection find.
Avoid reuse of same variable in DBMS handler code.
Minor adjustment of payloads XML file.
2010-11-30 22:40:25 +00:00
64b5de44a0
Converted to new XML object format
2010-11-12 10:11:13 +00:00
66c82d72e4
Typo fix
2010-11-12 10:02:02 +00:00
0c8918bf07
Minor bug fix, thanks Alex
2010-11-08 12:45:23 +00:00
862395ced1
further refactoring (all enumerations are now put into enums.py)
2010-11-08 09:20:02 +00:00
27ce4b0cf0
Set proper verbose level for dbms direct error messages
2010-11-07 22:14:06 +00:00
d3e7e89e60
major improvement with display of payloads (all payloads are displayed now) and removal of "pesky" spaces
2010-11-07 21:18:09 +00:00
685a8e7d2c
refactoring of hard coded dbms names
2010-11-02 11:59:24 +00:00
65a0a8d285
Delegate urlencoding to agent.py only
2010-10-31 13:28:05 +00:00
4f8e9da1b6
Minor bug fix to properly delete sqlmap temporary files on the database server file system at shutdown.
...
Minor improvements at ICMPsh tunnel to cleanup properly the dbms at shutdown and avoid checking/writing sys_bineval() UDF as it's a PE and needs to be called by sys_exec() only.
Got rid of useless doubleslash param in delRemoteFile() method.
Major code refactoring to xp_cmdshell.py methods and parent calls.
2010-10-28 00:19:40 +00:00
f5904d0bc0
Major bug fix to --union-test
2010-10-25 23:39:55 +00:00
32728d14b7
fix for --union-use with --error-test
2010-10-25 12:25:29 +00:00
1b2ec826bf
misc fixes regarding new query retrieval format
2010-10-21 23:17:06 +00:00
24e4429bf6
or better yet, there is no need for _ or *args on getPrivileges (tried with SQLite and MSSql which crashed)
2010-10-21 13:31:06 +00:00
fe3967bdec
fix for --privileges (on MSSql --privileges returned exception)
2010-10-21 13:28:29 +00:00
bc79eec702
removed queriesfile.py, implemented XMLObject approach (still shell.py and udf.py TODO)
2010-10-21 13:13:12 +00:00
82f44989ce
update of error based injection and bug fix for --roles on MSSQL server
2010-10-20 06:40:33 +00:00
4f7f20b94f
sorry, cosmetics
2010-10-14 23:18:29 +00:00
8b48833136
large commit with copyright header modifications
2010-10-14 14:41:14 +00:00
47022071cb
removed pdb
2010-10-12 19:17:48 +00:00
b4685aa77c
quick fix
2010-10-12 19:16:58 +00:00
f9f79ffbaf
basic stuff for sybase
2010-10-12 19:05:12 +00:00
1369529103
minor cosmetic update
2010-10-11 13:52:32 +00:00
12a5ec9f3d
more unicode refactoring
2010-06-02 12:45:40 +00:00
0362f4408d
Added unicode support also to MSSQL connector - see #184 .
2010-05-29 15:29:21 +00:00
Miroslav Stampar