aedcf8c8d7
Changed homepage address
2011-07-07 20:10:03 +00:00
955dbc85e7
Minor variable rename
2011-04-30 15:29:59 +00:00
f56d135438
Minor code restyling
2011-04-30 13:20:05 +00:00
0387654166
update of copyright string (until year)
2011-04-15 12:33:18 +00:00
ecaf5729fd
revert
2011-02-06 22:14:18 +00:00
caaac72029
minor update regarding last commit
2011-02-06 20:15:03 +00:00
ddf23ba7cc
refactoring
2011-01-30 11:36:03 +00:00
367d0639f0
refactoring (class names should always be Capital cased)
2011-01-28 16:36:09 +00:00
50969d238b
minor update
2011-01-24 17:51:56 +00:00
0eea5665b2
minor update
2011-01-24 17:41:36 +00:00
a3e3387113
fix for proper Firebird resume of version
2011-01-24 11:04:32 +00:00
50c02fbb37
Done with previous refactoring
2011-01-20 00:01:06 +00:00
bade0e3124
Major code refactoring - centralized all kb.dbms* info for both retrieval and set.
2011-01-19 23:06:15 +00:00
e4e9b11b79
Minor code refactoring and adjustments - kb.dbms is needed in fingerprint.py, not getIdentifiedDBMS because when checkDbms() method is called, it's within the fingerprint phase and at that stage, getIdentifiedDBMS() would always return kb.misc.fpDbms.
2011-01-14 12:47:07 +00:00
3c95d71ea5
Minor bug fix - restored of so called kb.misc.testedDbms (now kb.misc.fpDbms) to force the DBMS (only) during the fingerprint phase
2011-01-14 11:55:20 +00:00
2ac8debea0
Major code refactoring - moved to one location only (getIdentifiedDBMS() in common.py) the retrieval of identified/fingerprinted DBMS.
...
Minor bug fixes thanks to previous refactoring too.
2011-01-13 17:36:54 +00:00
5f9b6b2254
code refactoring
2011-01-02 16:51:21 +00:00
4c6e902471
removed obsolete comment
2010-12-14 07:49:30 +00:00
a02dd6b55b
Minor enhancement to speedup active dbms fingerprint (-f).
...
Code cleanup and refactoring.
2010-12-13 21:33:42 +00:00
e98d9c08e1
dumping table is now possible on Firebird too
2010-12-12 14:38:07 +00:00
f9bc6fc78f
minor fix
2010-12-11 22:14:35 +00:00
c93634b6c7
blind dumping of tables in sqlite implemented
2010-12-11 22:13:19 +00:00
e6c66fa37c
update regarding expectingNone in fingerprinting mode to cancel drop down to other techniques available
2010-12-11 17:55:28 +00:00
e98b81fe32
another update
2010-12-10 10:56:55 +00:00
d5e7a8d305
update
2010-12-10 10:54:17 +00:00
bbffea2cbc
bug fix
2010-12-09 17:10:22 +00:00
0eb2c408a9
code refactoring
2010-12-09 16:49:02 +00:00
cdff29ada7
update
2010-12-09 11:23:44 +00:00
bf09b8a6d9
added Firebird error based (WHERE) attack vector
2010-12-02 15:09:21 +00:00
c8f943f5e4
Now, if the back-end dbms type has been identified by the detection engine, skips the fingerprint phase.
...
Major code refactoring and commenting to detection engine.
Ask user whether or not to proceed to test remaining parameters after an injection point has been identified.
Restore beep at SQL injection find.
Avoid reuse of same variable in DBMS handler code.
Minor adjustment of payloads XML file.
2010-11-30 22:40:25 +00:00
66c82d72e4
Typo fix
2010-11-12 10:02:02 +00:00
42272ca78c
minor update
2010-11-11 22:26:36 +00:00
862395ced1
further refactoring (all enumerations are now put into enums.py)
2010-11-08 09:20:02 +00:00
27ce4b0cf0
Set proper verbose level for dbms direct error messages
2010-11-07 22:14:06 +00:00
d3e7e89e60
major improvement with display of payloads (all payloads are displayed now) and removal of "pesky" spaces
2010-11-07 21:18:09 +00:00
6adee3792a
removed all trailing spaces from blank lines
2010-11-03 10:08:27 +00:00
70f6eab715
minor update
2010-11-02 12:08:28 +00:00
685a8e7d2c
refactoring of hard coded dbms names
2010-11-02 11:59:24 +00:00
4f7f20b94f
sorry, cosmetics
2010-10-14 23:18:29 +00:00
8b48833136
large commit with copyright header modifications
2010-10-14 14:41:14 +00:00
48cc87f6a9
added support for fingerprinting SAP MaxDB (Issue 143)
2010-08-30 13:29:19 +00:00
660bf0b077
fix for that struct pack error
2010-06-10 12:14:24 +00:00
ac55e1b75f
fix for localhost firebird direct db access
2010-06-10 12:02:48 +00:00
12a5ec9f3d
more unicode refactoring
2010-06-02 12:45:40 +00:00
a3db3c03c1
str() -> unicode()
2010-05-28 13:05:02 +00:00
65a05452f7
Added option --search to work in conjunction with -D (done), -T (soon) or -C (replaces --dump -C) - See #190 :
...
* --search -D foobar: searches all database names like the ones provided
* --search -T foobar: searches all databases' table names like the ones provided (soon)
* --search -C foobar: replaces --dump -C
2010-05-07 13:40:57 +00:00
4f299f22bf
removed timeout keyword which is not supported on linux build
2010-04-13 10:11:14 +00:00
eecee3b274
Added resume functionality to -d and fixed logging with -d
2010-04-12 09:35:20 +00:00
e2810003ae
more update
2010-04-06 15:12:52 +00:00
c24f1cc07c
some update
2010-04-06 14:59:31 +00:00
Bernardo Damele