fb9d7cdfaa
refactoring, code clearing and removal of obsolete switch --longest-common
2011-01-14 14:37:03 +00:00
dce9a762f1
important update regarding restoring of potentially changed switch values in multi-target mode and/or missing switch values in resume mode
2011-01-02 10:37:32 +00:00
e355f92f22
bug fix
2010-12-18 10:02:01 +00:00
ec5c08ca7a
cosmetics
2010-12-09 09:24:20 +00:00
db39dc32fc
minor update
2010-12-09 00:59:39 +00:00
258e9fb50e
fix for a "bug" reported by Spencer J. McIntyre (os.makedirs(conf.outputPath, 0755) -> permission denied)
2010-12-08 21:16:18 +00:00
c8f943f5e4
Now, if the back-end dbms type has been identified by the detection engine, skips the fingerprint phase.
...
Major code refactoring and commenting to detection engine.
Ask user whether or not to proceed to test remaining parameters after an injection point has been identified.
Restore beep at SQL injection find.
Avoid reuse of same variable in DBMS handler code.
Minor adjustment of payloads XML file.
2010-11-30 22:40:25 +00:00
9d7087e2ff
Proper saving and resuming when more than a parameter are injectable.
...
Minor bug fix to --stacked-test
Minor code refactoring.
2010-11-29 01:04:42 +00:00
a0df36beda
when in multi target mode this should be done (another bug was reported by ToR for using "old" data - kb was not properly cleared)
2010-11-17 15:33:07 +00:00
36c544f440
update (--forms acts now more like -g switch)
2010-11-15 11:34:57 +00:00
5f46a549ba
Cosmetics for --forms
2010-11-14 21:59:35 +00:00
78d7b17483
More replacements for refactoring.
...
Minor layout adjustments.
Alignment of conffile/optiondict/cmdline parameters.
2010-11-08 12:36:48 +00:00
d551423379
further enum refactoring
2010-11-08 09:44:32 +00:00
e1cec8c02b
fix for all that stable, dynamic mambo jambo :)
2010-11-04 16:44:34 +00:00
6adee3792a
removed all trailing spaces from blank lines
2010-11-03 10:08:27 +00:00
9c94a233a1
conf.md5hash thrown out
2010-10-25 13:52:21 +00:00
8df7c88174
implementation of a new dynamic content removal engine
2010-10-25 10:41:37 +00:00
4009ef385e
more update regarding error based injection support
2010-10-19 18:17:34 +00:00
729156e91c
proper fix
2010-10-18 21:39:46 +00:00
3d5494845c
minor bug fix
2010-10-18 21:32:50 +00:00
149837ebf5
added the same for proxy authorization header
2010-10-18 09:02:56 +00:00
aaebb4336e
fix for Bug #202
2010-10-18 08:54:08 +00:00
6211915da5
Cosmetic fix
2010-10-16 22:31:16 +00:00
2fa8836c01
bug fix
2010-10-15 11:14:59 +00:00
d0df8cdac9
fix for that duplicates
2010-10-15 00:34:16 +00:00
4f7f20b94f
sorry, cosmetics
2010-10-14 23:18:29 +00:00
8b48833136
large commit with copyright header modifications
2010-10-14 14:41:14 +00:00
73b77255e3
minor cosmetic update
2010-10-12 12:32:02 +00:00
7a5bb2b0d6
update
2010-10-10 19:50:10 +00:00
8fcad29bbf
new feature --forms (still unfinished)
2010-10-10 18:56:43 +00:00
adf2231edb
minor update
2010-10-06 13:38:03 +00:00
56dbf0038f
minor update (for future implementation of more advanced error page logic)
2010-10-06 12:10:00 +00:00
ff419f7384
more changes regarding path (URI) injection
2010-09-24 09:19:14 +00:00
da8ae5578b
first commit regarding Feature #144
2010-09-22 11:56:35 +00:00
8576817a2b
Added support for SOAP requests: fixed, extended and tested a user's patch - closes #196 .
2010-06-29 21:07:23 +00:00
c398353e06
support for loading 'faulty character set' session files
2010-06-09 16:07:47 +00:00
64ad3b03be
Minor bug fix
2010-06-02 11:01:41 +00:00
b798222dd7
Minor fixes
2010-05-30 14:53:13 +00:00
06af405efd
Adapted and merged in patch to support XML output (-x switch) - still in beta.
...
Minor bug fixes and adjustments.
2010-05-28 16:43:04 +00:00
1f07db875d
fix for that float() report from Shaohua Pan
2010-05-24 20:12:37 +00:00
0197f8db5c
code refactoring regarding issue #184
2010-05-24 11:12:40 +00:00
e9be60e1ac
added support for proper unicode session(s) storage/retrieval
2010-05-24 11:00:49 +00:00
1a8beebc8c
minor fix
2010-05-11 13:55:30 +00:00
1e5ecbaa97
speedup of initial session file handling
2010-05-11 13:36:30 +00:00
eecee3b274
Added resume functionality to -d and fixed logging with -d
2010-04-12 09:35:20 +00:00
fcceceed45
fix for bug reported by shiftzwei@gmail.com regarding formatDBMSfp with unknown DBMS version
2010-04-09 10:40:08 +00:00
63c70018ca
fix for that update (conf.cj) problem mentioned by shiftzwei@gmail.com
2010-04-09 10:16:15 +00:00
2d55ec19a3
Minor code restyling
2010-04-06 10:15:19 +00:00
0a363d3f2b
fix for not properly clearing cookies when in multiple targets scanning mode spotted by Kasper Fons
2010-04-04 14:38:48 +00:00
1416cd0d86
Major enhancement to directly connect to the dbms without passing via a sql injection: adapted code accordingly - see #158 . This feature relies on python third-party libraries to be able to connect to the database. For the moment it has been implemented for MySQL (with python-mysqldb module) and PostgreSQL (with python-psycopg2 module).
...
Minor layout adjustments.
2010-03-26 23:23:25 +00:00
Miroslav Stampar