Commit Graph

181 Commits

Author SHA1 Message Date
Bernardo Damele ba00a17205 Minor layout adjustment 2009-02-09 10:58:44 +00:00
Bernardo Damele 2355885712 Minor adjustment 2009-02-09 10:29:07 +00:00
Bernardo Damele 207e96e2b2 Major bug fix in the comparison algorithm to correctly handle also the
case that the url is stable and the False response changes the page
content very little.
2009-02-09 10:28:03 +00:00
Bernardo Damele c405fb51ab PDF regenerated 2009-02-04 16:32:06 +00:00
Bernardo Damele b12d955274 Updated packaging scripts, site and finalized the documentation to release version 0.6.4 0.6.4 2009-02-03 15:38:40 +00:00
Bernardo Damele 770e000cb4 Fixed another bug on Microsoft SQL Server custom "limited" query reported by Konrads Smelkovs 2009-02-02 23:44:19 +00:00
Bernardo Damele 9ab174a444 Almost ready with the user's manual for 0.6.4 release 2009-02-01 13:44:44 +00:00
Bernardo Damele 77d9d22ceb Minor update to the user's manual 2009-02-01 00:20:08 +00:00
Bernardo Damele dded57f1cd Minor bug fix to correctly unpack user's custom queries on Microsoft SQL Server 2009-01-30 23:58:48 +00:00
Bernardo Damele ad03684788 Added another PostgreSQL banner signature for Windows (it's specific
for PostgreSQL compiled by hand with MinGW/GCC or using the binary MSI
file of PostgreSQL version 8.2.x. PostgreSQL 8.3.x is compiled by
default using Visual C++)
2009-01-30 00:35:05 +00:00
Bernardo Damele 6054090191 sqlmap 0.6-rc5: major bug fix to make --sql-shell and --sql-query work properly also with mixed case statements (i.e oRDeR bY). Thanks Konrads Smelkovs to notifying. 2009-01-28 14:53:11 +00:00
Bernardo Damele a8d57bb031 Avoid DeprecationWarning with Python 2.6+ 2009-01-22 23:53:01 +00:00
Bernardo Damele 193482a62b Updated user's manual 2009-01-22 23:44:44 +00:00
Bernardo Damele 981c7a4428 Updated Microsoft SQL Server XML signature db 2009-01-22 22:30:45 +00:00
Bernardo Damele 793c323b2a Major bug fixes 2009-01-22 22:28:27 +00:00
Bernardo Damele d54a51a328 Updated the HTML manual for the MySQL UDF and consequently other files. Thanks Roland! 2009-01-22 21:28:56 +00:00
Bernardo Damele 69204afe1f Updated copyright 2009-01-22 00:41:57 +00:00
Bernardo Damele 9631dc115e Added PostgreSQL UDF to execute commands on the underlying system:
* sys_eval() to return the standard output
* sys_exec() to return the exit status

Inspired by lib_mysqludf_sys 0.0.3 (https://svn.sqlmap.org/sqlmap/trunk/sqlmap/extra/mysqludfsys/)
2009-01-22 00:35:17 +00:00
Bernardo Damele ae0f1985f3 Updated also the patch file 2009-01-21 20:54:14 +00:00
Bernardo Damele deeccf9b5e Updated tar.gz package 2009-01-21 00:53:10 +00:00
Bernardo Damele 1c5925ea2b Minor adjustments 2009-01-21 00:52:23 +00:00
Bernardo Damele 7adbf5892d Updated user's manual 2009-01-19 23:45:54 +00:00
Bernardo Damele c25b49e80e Major bugfix to avoid "IFNULL and CAST" on CASE 2009-01-19 21:27:51 +00:00
Bernardo Damele 96db179ffe Minor adjustment 2009-01-19 21:26:02 +00:00
Bernardo Damele f91843540f Major bug fix when the CU alias (current user) is given (with -U option)
together with --privileges or --password to work properly also on
MySQL >= 5.0.
2009-01-19 21:25:37 +00:00
Bernardo Damele 8f973ce574 Minor layout adjustments 2009-01-18 22:36:48 +00:00
Bernardo Damele 161590e121 Added MySQL UDF to execute commands on the underlying system:
* sys_eval() to return the standard output
* sys_exec() to return the exit status

It's a patched version of http://mysqludf.org/lib_mysqludf_sys/index.php
2009-01-17 00:13:16 +00:00
Bernardo Damele 6690b4c00a Added svn executable property 2009-01-17 00:05:47 +00:00
Bernardo Damele bc3b4c6936 Minor layout adjustments in the user's manual 2009-01-13 23:16:34 +00:00
Bernardo Damele fd7cb9101c Major bug fix to forge SQL injection payload on Oracle 2009-01-13 23:15:57 +00:00
Bernardo Damele bc448211c5 Minor layout adjustment 2009-01-13 23:15:23 +00:00
Bernardo Damele 73e713c5ba Minor adjustments 2009-01-12 23:59:07 +00:00
Bernardo Damele 26cb082fc3 Added a README for dbgtool 2009-01-12 23:17:15 +00:00
Bernardo Damele de393628d0 Added dbgtool to extras, a port in python of toolcrypt.org dbgtool. Inspired by sqlninja perl script makescr.pl. 2009-01-12 23:02:02 +00:00
Bernardo Damele 5560f0b68a Updated the copyright 2009-01-12 21:35:38 +00:00
Bernardo Damele 92645dd264 Minor adjustment 2009-01-10 14:51:12 +00:00
Bernardo Damele 9b0f11f879 Added an ASP uploader 2009-01-10 14:40:04 +00:00
Bernardo Damele e10ab5aa0e Major bug fixes 2009-01-10 14:39:27 +00:00
Bernardo Damele 9c125a2b57 Minor improvement to use Python ConfigParser library when --save if specified.
Minor update to the user's manual
2009-01-03 22:59:22 +00:00
Bernardo Damele 6ff8feb5cf Updated documentation 2009-01-03 01:25:43 +00:00
Bernardo Damele d0604ef513 Major bug fix to correctly handle custom SQL "limited" queries on Oracle 2009-01-03 01:19:04 +00:00
Bernardo Damele 2d87a3349f Fixed custom MSSQL "limited" query support also for Partial UNION query technique 2009-01-03 00:27:04 +00:00
Bernardo Damele 9c42a883be Major bug fix to make it work properly with MSSQL custom limited (SELECT
TOP ...) queries with both inferential blind and Full UNION query
injection
2009-01-02 23:26:45 +00:00
Bernardo Damele 2cc3bb2f6a Minor improvement to PostgreSQL signatures file to identify Windows.
Minor improvement to Microsoft SQL Server "limit" queries.
2009-01-02 23:23:55 +00:00
Bernardo Damele 9e0d890171 Fixed MySQL 5.1 extensive fingerprint 2009-01-02 23:21:31 +00:00
Bernardo Damele c1010c20d8 Minor adjustments 2008-12-30 21:24:01 +00:00
Bernardo Damele a4d62af2ea Minor layout adjustments to --union-tech 2008-12-29 18:48:23 +00:00
Bernardo Damele 9340bf59fb Updated Microsoft SQL Server signature XML file.
Minor layout adjustments to --update output messages/diff
2008-12-29 18:46:43 +00:00
Bernardo Damele 0e9873fd4f Preparing documentation for 0.6.4 2008-12-29 18:44:20 +00:00
Bernardo Damele c83593c044 Limited custom query now works also on Oracle in inferential blind SQL
injection technique
2008-12-23 23:34:50 +00:00