196131bbca
minor cosmetics
2010-12-09 10:42:00 +00:00
3fd1c37d53
update
2010-12-09 07:49:18 +00:00
b5c6527c72
Minor fix
2010-12-09 00:25:48 +00:00
f5ce739bdf
Added support for time-based blind SQL injection via stacked queries too. Need to add vectors for some DBMS yet.
2010-12-08 23:52:31 +00:00
54f6673609
update
2010-12-08 22:38:26 +00:00
d6077273e0
update
2010-12-08 22:14:42 +00:00
40fadf2f35
minor update
2010-12-08 14:33:10 +00:00
01cf1394a4
code refactoring
2010-12-08 14:26:40 +00:00
6223f25dd9
code beautification
2010-12-08 13:04:48 +00:00
64cc2588f1
now resume is available for time-based blinds too
2010-12-08 12:49:26 +00:00
537b619165
removing junk
2010-12-08 12:30:25 +00:00
b5e45939e3
sqlmap premiere of blind time based query/bisection
2010-12-08 12:28:54 +00:00
47bb31fb47
code refactoring
2010-12-08 11:30:25 +00:00
1ae2fa7f1a
update regarding time based payloads
2010-12-08 11:26:54 +00:00
bdff4aba6a
switching to quick_ratio
2010-12-07 23:57:43 +00:00
c1b82cf09c
ratio() gives a considerable lag on real life cases, as real_quick_ratio() gives almost as good results
2010-12-07 23:53:44 +00:00
a4a63f5b1e
minor update
2010-12-07 23:49:00 +00:00
293ce18fed
two major bug fixes regarding time calculation (previously comparison was also a part of "delta", which screwed results in cases with large pages; other was a standard distribution based one)
2010-12-07 23:32:33 +00:00
dc651d59ec
little mathematics here and there (used "Rules for normally distributed data")
2010-12-07 19:19:12 +00:00
81e7465ed2
Cosmetics
2010-12-07 17:16:21 +00:00
294119d2ec
more advanced time technique(s)
2010-12-07 16:04:53 +00:00
e53fef546e
update regarding session page templates
2010-12-07 14:35:31 +00:00
add6235b16
removed pageTemplate from injection(s), it's not longer stored in session, and it's reloaded when resuming from session
2010-12-07 14:06:54 +00:00
0dc630203f
code refactoring
2010-12-07 13:34:06 +00:00
d77ddbee47
OR based inference works for the first time in history and fingerprint of 4 major DBMSes is now injection based (instead of AND)
2010-12-06 18:20:57 +00:00
17449754fe
Got rid of UNION false cond
2010-12-05 16:16:15 +00:00
9e5f933ace
some updates
2010-12-04 15:47:02 +00:00
eeb199375b
usage of compiled regexes in case of dynamic markings and other refactoring
2010-12-04 13:23:28 +00:00
0fc7a8f9e8
code refactoring
2010-12-04 10:13:18 +00:00
04714374f9
now you can use kb.pageTemplate to set a page which will be used as a template in comparison process (at least in '-[RANDNUM] OR' cases we'll need to use different template(s))
2010-12-04 10:05:18 +00:00
5764816891
minor cosmetics
2010-12-03 22:28:09 +00:00
5d37df6104
Ugly code to set the cookies when got them from a 302 redirect too
2010-12-03 17:41:10 +00:00
11058667e4
Better naming
2010-12-03 14:45:13 +00:00
22de82634a
Important update to parse correctly the <where> tag during exploitation phase.
...
Minor code cleanup.
2010-12-03 10:44:16 +00:00
283a04e29a
On my way to properly parse test's <where> tag in exploitation phase
2010-12-01 23:32:58 +00:00
089c16a1b8
Added tag <epayload> to the payloads.xml's <test> tag to define which payload to use when exploiting the test type.
...
Removed some useless tests.
Moved <error> from queries.xml to payloads.xml as it makes more sense.
Beeps at sql inj found only if --beep is provided.
Minor fix in order to be able to pickle advancedDict() objects.
Minor code refactoring.
Removed useless folders.
2010-12-01 17:09:52 +00:00
025361c970
Higher precedence to union query sql inj than error-based
2010-12-01 10:57:17 +00:00
e735f2960a
minor update
2010-11-29 15:25:45 +00:00
472f4465a6
Prioritize DBMS fingerprint based on DBMS (<dbms>) identified during the detection phase.
...
Minor bug fix to properly handle the case that no injections are found.
Nicer display of injection vulnerabilities detected.
Minor code refactoring.
2010-11-28 21:27:47 +00:00
7e3b24afe6
Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own.
...
All (hopefully) functionalities should still be working.
Added two switches, --level and --risk to specify which injection tests and boundaries to use.
The main advantage now is that sqlmap is able to identify initially which injection types are present so for instance if boolean-based blind is not supported, but error-based is, sqlmap will keep going and work!
2010-11-28 18:10:54 +00:00
253eafb643
paranoid cosmetics
2010-11-24 12:03:01 +00:00
17486e472a
Proper english (--postfix is now --suffix) and --string/--regexp does not necessarily need to match into the original response body, it might well be in the injected True condition only!
2010-11-17 22:00:09 +00:00
3d25071d06
another minor improvement regarding logging of http traffic
2010-11-17 12:16:48 +00:00
3e569a1693
minor update
2010-11-17 12:04:33 +00:00
5abbea4a9f
fix for a bug reported by nightman (unknown charset 'null')
2010-11-17 09:57:32 +00:00
3487429eac
minor cosmetics
2010-11-16 14:41:46 +00:00
3640dbf745
fix for --parse-errors (on IIS HTTP error is raised which need to be processed)
2010-11-16 14:33:30 +00:00
6232397129
minor update
2010-11-16 10:52:49 +00:00
6ef3846400
update regarding error parsing (and reporting)
2010-11-16 10:42:42 +00:00
71cb982039
Another bug fix to --union-test
2010-11-15 21:42:56 +00:00
Miroslav Stampar