c58dc4a6d8
isDbmsWithin() must stay like this, no getIdentifiedDbms() in there
2011-05-03 14:13:45 +00:00
742b0ef76e
major improvement of ERROR data retrieval on MSSQL
2011-05-03 13:25:20 +00:00
2a7838928e
minor fancier --replicate update
2011-05-03 11:48:04 +00:00
b202d73b46
bug fix for MSSQL identificators which were starting with d, b, o and . Thing is that .lstrip strips all occurances of the given chars :) (spotted ancidentally)
2011-05-03 11:09:30 +00:00
1840b0e43b
fix for a bug reported by k1971@live.co.uk (OperationalError: unknown database dbo)
2011-05-03 10:22:38 +00:00
1e6c2fea74
update regarding warning for --random-agent during connection timeout in connection test phase
2011-05-03 10:05:42 +00:00
6cff3e97f4
cosmetics
2011-05-02 21:48:08 +00:00
06498796b9
minor cosmetics
2011-05-02 20:51:53 +00:00
5e9620198c
fix for a privately reported bug ("AttributeError: item is disabled")
2011-05-02 18:18:04 +00:00
93dee30895
better fix for the previous commit
2011-05-02 13:34:55 +00:00
20ad1c1f2f
minor update to not confuse users when using -o
2011-05-02 13:24:35 +00:00
f8c3086d15
minor minor update
2011-05-02 12:37:54 +00:00
098f53d57a
patch for a problem reported by m.martin2311@yahoo.com (unknown charset 'is0-8859-1')
2011-05-02 12:34:35 +00:00
ac2550535c
Proper fix for --technique=U bug
2011-05-01 23:42:41 +00:00
900ee0ff93
fix for a major bug reported by k1971@live.co.uk (1..9 99..)
2011-05-01 15:47:00 +00:00
494503b334
proper way to deal with generic cases
2011-05-01 08:04:08 +00:00
fcd69ba9c7
fix for a --technique=U
2011-05-01 07:37:22 +00:00
41fc9f9d54
fix for an issue reported by andrew.gecse@upcmail.hu (unknown web page charset 'hungarian-iso-8859-2')
2011-04-30 22:41:54 +00:00
955dbc85e7
Minor variable rename
2011-04-30 15:29:59 +00:00
b3a0424269
More Backend class method usage refactoring
2011-04-30 15:24:15 +00:00
00f14bec5f
layout adjustment
2011-04-30 15:22:33 +00:00
9a4ae7d9e2
More code refactoring of Backend class methods used
2011-04-30 14:54:29 +00:00
f56d135438
Minor code restyling
2011-04-30 13:20:05 +00:00
983546d6bf
proper fix
2011-04-30 07:01:21 +00:00
a5968fff3e
Added --count switch to count the number of entries for a specific table (when -T is provided), all database's tables (when only -D is provided) or all databases' tables when neither -D nor -T are provided
2011-04-30 00:22:22 +00:00
956e75e2b5
Minor adjustment to --mobile.
...
Bug fix to --random-agent.
2011-04-29 21:50:48 +00:00
a23ca952e4
Actually brute-force switches make more sense just after their "normal" version. Also, getSchema() method is preferably to be called before getColumns(), see next commit for reason
2011-04-29 21:09:07 +00:00
46f96f3c4c
removing Kindle from list as it's not really a smartphone
2011-04-29 19:32:30 +00:00
11124b21f9
implemented --mobile switch
2011-04-29 19:27:23 +00:00
b299912de4
fix for a bug reported by ahmed@isecur1ty.org (UnicodeDecodeError: 'ascii' codec can't decode byte 0x84 in position 396: ordinal not in range(128)) for multipartpost
2011-04-29 16:56:02 +00:00
6bb4dce3aa
minor refactoring
2011-04-29 15:22:32 +00:00
a2bb0d72e8
fix for a bug reported by rdsears@mtu.edu (TypeError: expected string or buffer)
2011-04-29 14:40:28 +00:00
edac0b2558
Added switch --schema to enumerate DBMS schema and now --columns does not require a mandatory table (-T) anymore, instead it will act as an alias for --schema
2011-04-28 23:59:00 +00:00
441c288dd9
cosmeticados
2011-04-25 00:36:09 +00:00
98f9f3e774
Minor bug fix in local shellcodeexec for Windows path
2011-04-25 00:03:12 +00:00
e35f25b2cb
Major recode of --os-pwn functionality. Now the Metasploit shellcode can not be run as a Metasploit generated payload stager anymore. Instead it can be run on the target system either via sys_bineval() (as it was before, anti-forensics mode, all the same) or via shellcodeexec executable. Advantages are that:
...
* It is stealthier as the shellcode itself does not touch the filesystem, it's an argument passed to shellcodeexec at runtime.
* shellcodeexec is not (yet) recognized as malicious by any (Avast excluded) AV product.
* shellcodeexec binary size is significantly smaller than a Metasploit payload stager (even when packed with UPX).
* UPX now is not needed anymore, so sqlmap package is also way smaller and less likely to be detected itself as malicious by your AV software.
shellcodeexec source code, compilation files and binaries are in extra/shellcodeexec/ folder now - copied over from https://github.com/inquisb/shellcodeexec .
Minor code refactoring.
2011-04-24 23:01:21 +00:00
d0dff82ce0
Minor code refactoring relating set/get back-end DBMS operating system and minor bug fix to properly enforce OS value with --os switch
2011-04-23 16:25:09 +00:00
75142b383d
huge speed up (4x times faster)
2011-04-22 21:00:42 +00:00
f88aa4b165
implemented suppressResumeInfo mechanism (huge slowdown on large tables)
2011-04-22 19:58:10 +00:00
493b9adf8e
speed up of resume values (compiled regexes used)
2011-04-22 19:27:41 +00:00
7b3b9e6a87
it seems that this was indeed not meant to be here
2011-04-22 15:07:09 +00:00
304500a2e8
implemented checkFalsePositives method (simple Turing like tests)
2011-04-22 12:24:16 +00:00
f3088079c0
error message adjustment
2011-04-21 22:31:02 +00:00
eabb5a2ba7
More adjustments to the error message when no sql injections are detected
2011-04-21 22:04:20 +00:00
6d07dddf60
updated doc and minor layout adjustments
2011-04-21 21:53:35 +00:00
06a00fe85e
For development version, print also the revision number in the banner
2011-04-21 21:34:57 +00:00
770b1523ff
More verbose output when no SQL injections are detected
2011-04-21 21:31:16 +00:00
edc2d75702
Cosmetics and major bug fix
2011-04-21 21:15:23 +00:00
d2f102f5a1
cosmetics
2011-04-21 20:21:37 +00:00
b667c50588
store/resume info on xp_cmd available in session file
2011-04-21 14:25:04 +00:00
Bernardo Damele