Commit Graph

1786 Commits

Author SHA1 Message Date
Miroslav Stampar d1f5c1d7b7 now when we "decode page" based on a charset, sanitizeAsciiString only brings unneeded filtering 2010-12-29 15:10:42 +00:00
Miroslav Stampar 79e97824ef adding user names to the attack dictionary 2010-12-29 00:37:53 +00:00
Miroslav Stampar 93838fb155 "patch" for a problem reported by black zero (v = self._sslobj.write(data)...UnicodeError) 2010-12-28 14:40:34 +00:00
Miroslav Stampar 96c3ffd3d7 changing risk level to 0 - lots of MySQL databases around have information_schema unreadable, thus disabling first AND based error payload 2010-12-27 19:02:13 +00:00
Miroslav Stampar c0423761e8 minor update 2010-12-27 18:27:42 +00:00
Miroslav Stampar a77b186aca minor fix 2010-12-27 16:55:27 +00:00
Miroslav Stampar 5015f04826 minor update 2010-12-27 16:36:05 +00:00
Miroslav Stampar c8f8dbf0a7 minor update 2010-12-27 15:39:27 +00:00
Miroslav Stampar 9c1676bdfa minor cosmetics 2010-12-27 14:44:00 +00:00
Miroslav Stampar 9fb0e0fc85 resume of brute forced data is now available 2010-12-27 14:17:20 +00:00
Miroslav Stampar c7a160bf72 minor update (users want this to see) 2010-12-27 12:00:54 +00:00
Miroslav Stampar 3d23f226ae minor update 2010-12-27 11:47:50 +00:00
Miroslav Stampar 68462466f2 minor fix for a bug reported by shaohua pan (argument of type 'NoneType' is not iterable) 2010-12-27 11:36:36 +00:00
Miroslav Stampar 51a492e17d pretty important commit (now dumped tables are prone to dictionary attack) 2010-12-27 10:56:28 +00:00
Miroslav Stampar c8d5a6b980 update 2010-12-27 00:41:16 +00:00
Miroslav Stampar 269d6bde24 this one is pretty complicated (authentication handler tries to call keep alive module, while keep alive module tries to call authentication handler, leading to an infinite recursion) 2010-12-27 00:14:29 +00:00
Miroslav Stampar 89c2640d23 basic --search now works with MS Access 2010-12-26 23:50:16 +00:00
Miroslav Stampar f2373121d0 noticed little DoS behavior and lots of connections in netstat (best way to deal with zombie connections is to explicitly close them if not needed any more) 2010-12-26 14:36:51 +00:00
Miroslav Stampar c4d6a367e9 this way order given in -C is preserved 2010-12-26 14:11:42 +00:00
Miroslav Stampar c93f2a703d minor update 2010-12-26 14:02:16 +00:00
Miroslav Stampar ceeb6374e8 bug fix (TypeError: object of type 'NoneType' has no len()) 2010-12-26 13:27:24 +00:00
Miroslav Stampar 569e060aab important improvement 2010-12-26 13:20:52 +00:00
Miroslav Stampar fcd01b3018 minor update 2010-12-26 11:24:41 +00:00
Miroslav Stampar a555d1ad68 minor improvement 2010-12-26 11:15:02 +00:00
Miroslav Stampar 22ce464efc minor update with local names 2010-12-26 10:16:00 +00:00
Miroslav Stampar 320a6f9efb minor minor update 2010-12-26 09:55:33 +00:00
Miroslav Stampar 17d74fc83c cosmeticado 2010-12-26 09:53:40 +00:00
Miroslav Stampar cd337d9f39 minor fix 2010-12-26 09:46:09 +00:00
Miroslav Stampar eaf4b93856 minor update 2010-12-26 09:40:40 +00:00
Miroslav Stampar 562a6440d1 fix for a bug reported by nightman (same as http://bugs.python.org/issue8797) 2010-12-26 09:33:04 +00:00
Miroslav Stampar 6c72e41972 minor fix/update 2010-12-26 02:19:10 +00:00
Miroslav Stampar e41acb6fc2 further ms access improvements 2010-12-26 02:13:56 +00:00
Miroslav Stampar 2c8115eed9 further improvement for ms access table dumping 2010-12-26 01:04:30 +00:00
Miroslav Stampar 64523212a4 added site:cn 2010-12-26 00:06:47 +00:00
Miroslav Stampar 5249762794 update 2010-12-25 16:46:33 +00:00
Miroslav Stampar f85bb96221 columns updated with localized items 2010-12-25 16:26:05 +00:00
Miroslav Stampar 561121b536 major update adding new table names (based on site:? localization) 2010-12-25 15:15:03 +00:00
Miroslav Stampar fb099615e2 minor update 2010-12-25 11:16:35 +00:00
Miroslav Stampar c5c4aae3d5 minor update (to prevent adding too much items) 2010-12-25 10:42:36 +00:00
Miroslav Stampar b472b96f92 bug fix, refactoring and improved extractErrorMessage capabilities 2010-12-25 10:16:20 +00:00
Miroslav Stampar ea7ba19f6b minor update 2010-12-25 09:43:14 +00:00
Miroslav Stampar 272476773f getPageTextWordsSet on tableExists is pretty powerful stuff 2010-12-25 09:37:33 +00:00
Miroslav Stampar 9853c1ec7f fix for a bug reported by alessio.dallapiazza@gmail.com (AttributeError: users) 2010-12-25 09:13:57 +00:00
Miroslav Stampar 6845d402fa well, here and there, merry Christmas to all :) 2010-12-24 20:17:53 +00:00
Miroslav Stampar 706d8e0b88 development update (basic ms access dumping implemented) 2010-12-24 19:53:11 +00:00
Miroslav Stampar 2d115e0350 one more fix 2010-12-24 18:44:13 +00:00
Miroslav Stampar edcf1a0872 few bug fixes 2010-12-24 18:40:48 +00:00
Miroslav Stampar 96a06351a1 minor fix (in testing phase raise404 should be set to False) 2010-12-24 12:36:00 +00:00
Miroslav Stampar 2c23a59ba5 fix for one of those more complex bugs (comparison was returning None while original page and/or page template were already had already DBMS error inside) 2010-12-24 12:13:48 +00:00
Miroslav Stampar aab14fa2d3 minor refactoring/cosmetics 2010-12-24 11:06:57 +00:00