Commit Graph

649 Commits

Author SHA1 Message Date
Miroslav Stampar 75edb84a71 Minor update 2012-12-30 11:10:32 +01:00
Miroslav Stampar 58ad2f1c5d Revert of last commit and proper fix 2012-12-29 10:35:05 +01:00
Miroslav Stampar 0e18fa9c5f Minor fix 2012-12-28 23:43:47 +01:00
Miroslav Stampar 77625e5af7 Minor revert 2012-12-21 19:31:05 +01:00
Miroslav Stampar 8b3e17ed4d Minor update (better approach for those old NOT IN cases in MsSQL - instead of standard pivot dump table) 2012-12-21 14:52:47 +01:00
Miroslav Stampar 0d5d84edc7 Minor cleanup 2012-12-20 21:03:41 +01:00
Miroslav Stampar 712cf4e4db Fix for an Issue #316 2012-12-20 20:55:59 +01:00
Miroslav Stampar c2c4601d6e Minor restyling 2012-12-20 11:06:52 +01:00
Bernardo Damele 282aeb734f ORDER BY does not play well with UNION query SQLi (related to issue #313) 2012-12-19 13:21:16 +00:00
Bernardo Damele 259b345f1f catch ImportError exception if libmagic is not installed 2012-12-19 13:10:54 +00:00
Bernardo Damele 9149d77cc8 removed duplicate code - fixes issue #310 2012-12-19 12:17:56 +00:00
Bernardo Damele d80744d3d5 preparation for issue #310 2012-12-19 11:40:00 +00:00
Bernardo Damele dee56b17c3 handle "LIMIT num" as well as "LIMIT num, num" across all techniques - fixes issue #308 2012-12-19 10:50:15 +00:00
Miroslav Stampar 92e338251a Finally working inference against MySQL/international letters (even chinese) 2012-12-19 10:44:02 +01:00
Bernardo Damele 8e95470415 minor refactoring 2012-12-19 00:46:23 +00:00
Miroslav Stampar 88d8494b5a Implementation for an Issue #307 2012-12-18 16:03:35 +01:00
Miroslav Stampar 7f47623876 Minor patch 2012-12-18 11:10:06 +01:00
Bernardo Damele 1fdd804e94 replaced instances of dataToStdout with logger 2012-12-17 13:30:21 +00:00
Bernardo Damele 064d443d60 replaced unnecessary dataToStdout() call with appropriate logger.info() call 2012-12-17 11:30:08 +00:00
Miroslav Stampar 562044577b Implementation for an Issue #292 2012-12-11 12:02:06 +01:00
Miroslav Stampar 996e882e78 Minor update 2012-12-10 17:13:00 +01:00
Miroslav Stampar 974407396e Doing some more style updating (capitalization of exception classes; using _ is enough for private members - __ is used in Python specific methods) 2012-12-06 14:14:19 +01:00
Miroslav Stampar ab67344448 Removed unused imports and variables (pyflake-ing) 2012-12-06 11:15:05 +01:00
Miroslav Stampar 775e0df04b Update for an Issue #278 2012-12-05 10:45:17 +01:00
Miroslav Stampar 7304971544 Patch for ORDER BY test on MsSQL on cases with 'The text, ntext, and image data types cannot be compared or sorted, except when using IS NULL or LIKE operator' 2012-11-29 11:43:49 +01:00
Miroslav Stampar 7c16bfe025 Fix for error-based MsSQL dumping (in some cases failed because of wrong order - e.g. MIN(SUBSTRING( instead of SUBSTRING(MIN ) 2012-11-29 10:51:59 +01:00
Miroslav Stampar 621ae587c7 Fix for an Issue #263 2012-11-28 00:03:17 +01:00
Miroslav Stampar a40d7a5bca Minor improvement (safer to use column name in COUNT than *, especially when only one column is needed) 2012-11-15 15:06:54 +01:00
Miroslav Stampar b75c52f93c Minor display fix (in --hex mode) 2012-10-28 12:30:21 +01:00
Miroslav Stampar 25a5073281 Bug fix for --hex/--technique=B (especially MsSQL) 2012-10-28 12:22:33 +01:00
Miroslav Stampar c1b8226329 Massive renaming (proper naming is inband = union & error techniques! - query naming stays as they are/in code things like forgeInbandQuery are renamed to forgeUnionQuery) 2012-10-28 00:36:09 +02:00
Miroslav Stampar 99ceea5eae Fix for an Issue #214 2012-10-23 17:05:45 +02:00
Miroslav Stampar 54d086f409 Minor fix 2012-10-23 10:02:10 +02:00
Miroslav Stampar 029143880a Displaying hex-decoded resulting output in --hex mode 2012-10-22 14:36:01 +02:00
Miroslav Stampar e61c4c22c9 Implementation for an Issue #200 2012-10-09 15:19:47 +02:00
Miroslav Stampar 687f3991de Cleaning/refactoring of bunch of stacked/suffix/comment stuff (e.g. 2012-09-26 11:27:43 +02:00
Miroslav Stampar 560e0fcb25 Minor cleanup 2012-09-25 14:21:57 +02:00
Miroslav Stampar cea5127ffd Update for an Issue #6 2012-09-06 15:51:38 +02:00
Miroslav Stampar 01f481c332 Minor refactoring of dictionaries 2012-08-21 11:19:15 +02:00
Miroslav Stampar 47073f4afd Implementation of an Issue #131 2012-07-30 21:50:46 +02:00
Miroslav Stampar 93d35fe522 Minor update regarding Issue #129 2012-07-30 21:43:32 +02:00
Miroslav Stampar cc2a916716 Fix for an Issue #126 2012-07-29 17:33:08 +02:00
Miroslav Stampar f8c9868cb6 Implementation for an Issue #118 2012-07-24 15:34:50 +02:00
Miroslav Stampar 0f64e1e6c1 Minor update for Issue #94 (not fixing it) 2012-07-16 15:43:02 +02:00
Miroslav Stampar 805120ac52 Minor refactoring 2012-07-14 11:01:30 +02:00
Bernardo Damele 162da75a04 modified homepage address 2012-07-12 18:38:03 +01:00
Bernardo Damele ea9c66108e cleanup for issue #68 2012-07-12 15:38:43 +01:00
Miroslav Stampar 8e18514e56 Minor refactoring for all that stickyness 2012-07-12 15:58:45 +02:00
Miroslav Stampar cba2a26b68 Finishing Issue #75 (inference dumping) 2012-07-12 14:46:57 +02:00
Miroslav Stampar 65639cdda6 First update for Issue #75 (error-based dumping) 2012-07-12 14:31:28 +02:00