b3da473840
Minor bug fix when --dbs has only one DB name
2010-12-22 14:29:57 +00:00
c9ab8ae60e
Bug fix to properly identify if current user is DBA (--is-dba) on MySQL
2010-12-22 14:06:01 +00:00
c89021f0bb
some fixes
2010-12-22 11:46:18 +00:00
5d25da5135
better way to handle this one
2010-12-22 00:51:20 +00:00
306501363c
fuck, sorry, 0 was OK (STRCMP() returns 0 if the strings are the same)
2010-12-22 00:41:38 +00:00
d6e6afd6f2
minor fix ("To clarify a bit: STRCMP() is case-insensitive as of MySQL 4.0." - http://bugs.mysql.com/bug.php?id=2102 )
2010-12-22 00:38:54 +00:00
6f2ce15478
minor refactoring
2010-12-22 00:27:21 +00:00
cb61401c18
bug fix ( http://dev.mysql.com/doc/refman/5.0/es/news-5-0-11.html - "Added support of where clause for queries with FROM DUAL")
2010-12-22 00:20:56 +00:00
f905adb7c1
way better as there is no official release version for FOUND_ROWS() (it appears somewhere in alphas/betas of 4.0.x - i've stumbled upon one site with 4.0.22 and it didn't recognized FOUND_ROWS).
2010-12-21 22:18:27 +00:00
385e208f38
code refactoring regarding standard output suppression and some threading issues
2010-12-21 14:21:24 +00:00
6b37ddada4
removed some blank trailing spaces (with extra/shutils/blanks.sh)
2010-12-21 10:31:56 +00:00
1a3f57e5fe
Cosmetics
2010-12-21 09:23:00 +00:00
03b275ce33
update
2010-12-20 23:27:04 +00:00
518b3e094c
bug fix ( http://dev.mysql.com/doc/refman/5.0/en/information-functions.html#function_found-rows )
2010-12-20 23:00:03 +00:00
8fd3e7ba1f
thread based data added
2010-12-20 22:45:01 +00:00
364bc8e7d4
minor update
2010-12-20 11:25:18 +00:00
28da1141cf
some fixes (for MySQL < 4.0)
2010-12-20 11:23:57 +00:00
76024c455f
minor fix (using older commands for basic MySQL check)
2010-12-20 11:15:43 +00:00
36862e2efa
update
2010-12-18 15:57:47 +00:00
71cf0bd2a5
minor update
2010-12-18 13:08:37 +00:00
a067e805fa
minor update
2010-12-17 22:23:01 +00:00
108a96c6b4
some fixes
2010-12-17 21:45:20 +00:00
a19cb2c13a
code refactoring (added UNKNOWN_DBMS_VERSION instead of "Unknown")
2010-12-17 21:29:09 +00:00
b4450c6ddd
added one more level of MSSQL version check (if first fails for some reason)
2010-12-17 21:01:14 +00:00
3ee44584d4
i've found a way! thank you hesus! fyea (ASC(MID) was just crashing when MID returned 'empty string')
2010-12-14 12:57:59 +00:00
4c6e902471
removed obsolete comment
2010-12-14 07:49:30 +00:00
a02dd6b55b
Minor enhancement to speedup active dbms fingerprint (-f).
...
Code cleanup and refactoring.
2010-12-13 21:33:42 +00:00
e98d9c08e1
dumping table is now possible on Firebird too
2010-12-12 14:38:07 +00:00
f9bc6fc78f
minor fix
2010-12-11 22:14:35 +00:00
c93634b6c7
blind dumping of tables in sqlite implemented
2010-12-11 22:13:19 +00:00
b1babeefe5
update regarding dumping of tables with blind on Sqlite
2010-12-11 22:00:16 +00:00
e6c66fa37c
update regarding expectingNone in fingerprinting mode to cancel drop down to other techniques available
2010-12-11 17:55:28 +00:00
1beb1dd2cc
minor update
2010-12-11 09:30:38 +00:00
435f48b8cc
polite cosmetics
2010-12-10 15:28:56 +00:00
7c87ad4065
Minor speedup in -f mysql
2010-12-10 13:05:46 +00:00
b02bd55edc
minor refactoring
2010-12-10 13:04:36 +00:00
d71e51e765
Minor improvement
2010-12-10 11:31:27 +00:00
4741874e9e
Enhancement to speedup MySQL fingerprint
2010-12-10 11:27:36 +00:00
e98b81fe32
another update
2010-12-10 10:56:55 +00:00
d5e7a8d305
update
2010-12-10 10:54:17 +00:00
bbffea2cbc
bug fix
2010-12-09 17:10:22 +00:00
0eb2c408a9
code refactoring
2010-12-09 16:49:02 +00:00
cdff29ada7
update
2010-12-09 11:23:44 +00:00
81c16926c1
code refactoring some more
2010-12-08 14:46:07 +00:00
d77ddbee47
OR based inference works for the first time in history and fingerprint of 4 major DBMSes is now injection based (instead of AND)
2010-12-06 18:20:57 +00:00
17449754fe
Got rid of UNION false cond
2010-12-05 16:16:15 +00:00
5764816891
minor cosmetics
2010-12-03 22:28:09 +00:00
2cc167a42e
fix for a bug reported by ToR: "AttributeError: 'NoneType' object has no attribute 'isdigit'"
2010-12-02 18:57:43 +00:00
bf09b8a6d9
added Firebird error based (WHERE) attack vector
2010-12-02 15:09:21 +00:00
c8f943f5e4
Now, if the back-end dbms type has been identified by the detection engine, skips the fingerprint phase.
...
Major code refactoring and commenting to detection engine.
Ask user whether or not to proceed to test remaining parameters after an injection point has been identified.
Restore beep at SQL injection find.
Avoid reuse of same variable in DBMS handler code.
Minor adjustment of payloads XML file.
2010-11-30 22:40:25 +00:00
Bernardo Damele