GithubStar/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-24 01:24:49 +08:00
Code Issues Packages Projects Releases Wiki Activity
1,722 Commits 2 Branches 142 Tags
b3da4738400d752185a18f4b5e86a21cf4041e21
Commit Graph

288 Commits

Author SHA1 Message Date
Miroslav Stampar 6c1133c4d4 some code refactoring 2010-12-21 15:13:13 +00:00
Miroslav Stampar 385e208f38 code refactoring regarding standard output suppression and some threading issues 2010-12-21 14:21:24 +00:00
Miroslav Stampar 6b37ddada4 removed some blank trailing spaces (with extra/shutils/blanks.sh) 2010-12-21 10:31:56 +00:00
Bernardo Damele 1a3f57e5fe Cosmetics 2010-12-21 09:23:00 +00:00
Miroslav Stampar 116c141dfa another fix 2010-12-21 00:47:07 +00:00
Miroslav Stampar 8067365b93 fix for a bug reported by m4l1c3 (AttributeError: '_MainThread' object has no attribute 'ident') 2010-12-20 23:47:53 +00:00
Miroslav Stampar 8fd3e7ba1f thread based data added 2010-12-20 22:45:01 +00:00
Miroslav Stampar c9e8aae8a2 we'll need to do some cleanup around threading data model we use (some of the data we currently use we'll need to spread via copies around used threads) 2010-12-20 19:34:41 +00:00
Miroslav Stampar e09bc2406c minor refactoring 2010-12-20 19:24:20 +00:00
Miroslav Stampar 5852bad963 some refactoring 2010-12-20 18:56:06 +00:00
Miroslav Stampar 19d8733e9a this is strictly for educational purposes 2010-12-20 17:30:47 +00:00
Miroslav Stampar fe67d3827c code refactoring and some fixes 2010-12-18 09:51:34 +00:00
Miroslav Stampar a19cb2c13a code refactoring (added UNKNOWN_DBMS_VERSION instead of "Unknown") 2010-12-17 21:29:09 +00:00
Miroslav Stampar 7cfeb5447b minor update 2010-12-15 11:46:28 +00:00
Miroslav Stampar f8a01ddaf8 minor update 2010-12-15 11:21:47 +00:00
Miroslav Stampar b75d7fa348 minor cache based optimization 2010-12-14 12:22:17 +00:00
Bernardo Damele cfcee6439e Cosmetics 2010-12-13 21:55:30 +00:00
Miroslav Stampar e98d9c08e1 dumping table is now possible on Firebird too 2010-12-12 14:38:07 +00:00
Miroslav Stampar c93634b6c7 blind dumping of tables in sqlite implemented 2010-12-11 22:13:19 +00:00
Miroslav Stampar b1babeefe5 update regarding dumping of tables with blind on Sqlite 2010-12-11 22:00:16 +00:00
Miroslav Stampar 6a24048aa6 urllib2 doesn't play well with '\n' when non unescaped chars used 2010-12-11 21:17:54 +00:00
Miroslav Stampar d2a3e8f44f first time firebird error-based query success 2010-12-11 11:17:24 +00:00
Miroslav Stampar d5e7a8d305 update 2010-12-10 10:54:17 +00:00
Bernardo Damele 9c61adb21d Cosmetics 2010-12-09 00:26:06 +00:00
Miroslav Stampar 81c16926c1 code refactoring some more 2010-12-08 14:46:07 +00:00
Miroslav Stampar 95b48746a6 cosmetics 2010-12-08 14:29:09 +00:00
Miroslav Stampar 01cf1394a4 code refactoring 2010-12-08 14:26:40 +00:00
Miroslav Stampar b21eb88905 minor update 2010-12-07 22:45:38 +00:00
Miroslav Stampar ecd4a5a532 added standard deviation check in time based tests 2010-12-07 16:39:31 +00:00
Miroslav Stampar 294119d2ec more advanced time technique(s) 2010-12-07 16:04:53 +00:00
Bernardo Damele effd2ca0e3 Cosmetics 2010-12-07 12:32:58 +00:00
Miroslav Stampar 61f82fd274 introducing [DELAYED] for heavy query time based payloads when response time is non-deterministic 2010-12-07 00:27:26 +00:00
Miroslav Stampar 3f9450b9dc minor fix 2010-12-04 14:43:35 +00:00
Miroslav Stampar eeb199375b usage of compiled regexes in case of dynamic markings and other refactoring 2010-12-04 13:23:28 +00:00
Miroslav Stampar 0fc7a8f9e8 code refactoring 2010-12-04 10:13:18 +00:00
Miroslav Stampar b3a094b9d6 fix for a bug reported by ToR (when resuming: queries[kb.dbms] -> KeyError: u'mysql') 2010-12-03 22:44:29 +00:00
Miroslav Stampar 5764816891 minor cosmetics 2010-12-03 22:28:09 +00:00
Miroslav Stampar 612ee08a0b added response time kb attribute 2010-12-03 13:19:34 +00:00
Miroslav Stampar 2cc167a42e fix for a bug reported by ToR: "AttributeError: 'NoneType' object has no attribute 'isdigit'" 2010-12-02 18:57:43 +00:00
Miroslav Stampar 70e87d959e update of dynamicity engine 2010-11-29 15:14:49 +00:00
Bernardo Damele 7e3b24afe6 Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own. 
All (hopefully) functionalities should still be working.
Added two switches, --level and --risk to specify which injection tests and boundaries to use.
The main advantage now is that sqlmap is able to identify initially which injection types are present so for instance if boolean-based blind is not supported, but error-based is, sqlmap will keep going and work!
 2010-11-28 18:10:54 +00:00
Miroslav Stampar 6712f4da55 some refactoring and one less request for aspx maintanance during --os-shell 2010-11-24 14:20:43 +00:00
Bernardo Damele 253eafb643 paranoid cosmetics 2010-11-24 12:03:01 +00:00
Miroslav Stampar b2b521fc8a gready regex bastard :) 2010-11-24 12:01:36 +00:00
Miroslav Stampar 9579a97039 now ASPX works too for --os-shell 2010-11-24 11:38:27 +00:00
Miroslav Stampar f9f076ba97 code refactoring 2010-11-23 21:00:42 +00:00
Miroslav Stampar 7877a931d5 more cosmetics regarding dictionary attack 2010-11-23 20:54:40 +00:00
Miroslav Stampar c4414df594 minor update 2010-11-23 15:33:13 +00:00
Miroslav Stampar 78024eafe0 little precaution 2010-11-23 15:31:23 +00:00
Miroslav Stampar aa5d038f18 more code refactoring 2010-11-23 14:50:47 +00:00