Commit Graph

564 Commits

Author SHA1 Message Date
Miroslav Stampar b0a8238774 minor fixes 2012-05-09 14:58:16 +00:00
Miroslav Stampar 9fa3619262 minor fix 2012-05-09 14:00:07 +00:00
Miroslav Stampar 56a3431be6 minor update for empty tables (skipping other techniques) 2012-05-09 10:34:21 +00:00
Miroslav Stampar e419177871 minor update 2012-05-08 17:28:19 +00:00
Miroslav Stampar eccd4da00f minor fix 2012-05-08 15:03:33 +00:00
Miroslav Stampar 938d9ff23e doing all the work for the users so they wouldn't strain their little hands 2012-05-08 15:00:23 +00:00
Miroslav Stampar 524dd75ff2 that query variable hasn't been used anywhere (obsolete for some time) 2012-05-08 14:34:40 +00:00
Miroslav Stampar 3532d23933 automatically extending ranges for UNION tests in case where at least one other injection technique is usable (boundaries has been established) 2012-04-23 13:41:36 +00:00
Miroslav Stampar 71b0acc16f minor fix (checking for full inband should be done with ORIGINAL - more concise) 2012-04-15 16:43:18 +00:00
Miroslav Stampar 5772c52f46 minor refactoring/fix (randQuery is just a part (e.g. abc) of phrase (def:abc:ghi) - phrase should be searched for, not just randQuery); both phrases should be inside the content for it to be full-inband injectable (...UNION ALL SELECT phrase UNION ALL SELECT phrase2....) 2012-04-15 16:33:47 +00:00
Miroslav Stampar ae8c70e895 another cosmetics 2012-04-13 15:11:44 +00:00
Miroslav Stampar d765cdc3a3 minor cosmetics 2012-04-13 15:10:40 +00:00
Miroslav Stampar 831f79b851 minor generalization 2012-04-12 09:30:19 +00:00
Miroslav Stampar 8c6eb4faa9 adding support for PgSQL DNS data exfiltration 2012-04-07 14:06:11 +00:00
Miroslav Stampar a5b69eaea4 removing unused imports 2012-04-04 13:18:14 +00:00
Bernardo Damele 52796bb4da revert 2012-04-04 13:02:50 +00:00
Miroslav Stampar a4b95ab7dd works against MySQL/Windows 2012-04-04 12:49:45 +00:00
Bernardo Damele a1d97e9d7b Add a space after a comment 2012-04-04 12:48:21 +00:00
Bernardo Damele 025c531d22 leftover 2012-04-04 12:44:25 +00:00
Bernardo Damele c0946ce2c9 Minor refactoring 2012-04-04 12:42:58 +00:00
Bernardo Damele d106fb5184 layout adjustments 2012-04-04 12:27:24 +00:00
Miroslav Stampar 556b349be3 minor fix for retrieving non-printable chars in inference and non-multi threading mode 2012-04-03 14:04:07 +00:00
Miroslav Stampar 33bb9c5f19 much cleaner approach in that "flat" representation of retrieved items in union technique 2012-04-03 13:56:11 +00:00
Miroslav Stampar 7fb190f3b1 minor fix 2012-04-03 12:35:19 +00:00
Miroslav Stampar 886aa22efc minor update 2012-04-03 12:19:37 +00:00
Miroslav Stampar 78f51fd2e5 minor fix 2012-04-03 10:18:03 +00:00
Miroslav Stampar e05109812f minor improvements regarding data retrieval through DNS channel 2012-04-03 09:18:30 +00:00
Miroslav Stampar 5f94987b0f fix for DNS method for MSSQL 2012-04-02 17:28:18 +00:00
Miroslav Stampar 2c28423cb8 minor update 2012-04-02 14:57:15 +00:00
Miroslav Stampar 8a9d09f79b minor fixes 2012-04-02 14:11:23 +00:00
Miroslav Stampar 1cd3c3f7af further update of DNS data retrieval mechanism through SQLi 2012-04-02 14:05:30 +00:00
Miroslav Stampar 7fd64df167 minor code cleaning 2012-03-28 13:31:07 +00:00
Miroslav Stampar 1b072f6415 laying foundation for DNS based data retrieval 2012-03-27 18:59:12 +00:00
Miroslav Stampar 8e7d360ea2 cleaner refactoring regarding last commit 2012-03-19 12:03:25 +00:00
Miroslav Stampar 401763b6f8 minor fix (it has to be level 1 array like it was with the previous re.findall mechanism) 2012-03-19 12:00:22 +00:00
Miroslav Stampar d66056fe39 one more related commit 2012-03-16 13:16:53 +00:00
Miroslav Stampar ac02a2d92c minor fix 2012-03-16 13:14:14 +00:00
Miroslav Stampar b130a9e14e minor fix (writing to HashDB on any interrupt) 2012-03-16 10:15:43 +00:00
Miroslav Stampar e38b59a2ae minor update 2012-03-14 13:16:49 +00:00
Miroslav Stampar cee9ff7885 proper parsing of content in partial union technique 2012-03-14 11:23:30 +00:00
Miroslav Stampar 5a83f1c5f7 minor update 2012-03-08 15:43:22 +00:00
Miroslav Stampar 9ca8bc4d51 minor bug fix 2012-03-08 09:52:33 +00:00
Miroslav Stampar ac5a752b12 Oracle's XMLType doesn't like '#' char too 2012-03-01 11:59:37 +00:00
Miroslav Stampar f4e410db16 minor fix 2012-03-01 10:17:39 +00:00
Miroslav Stampar 37db27b720 turning back on automatic adjusting of delays in time based queries 2012-02-29 15:51:23 +00:00
Miroslav Stampar 1bdc07c279 minor update 2012-02-29 15:02:24 +00:00
Miroslav Stampar c36cbbb3ae minor fix 2012-02-24 14:54:10 +00:00
Miroslav Stampar f94b91ad87 added helper function for HashDB data storing/retrieval 2012-02-24 13:07:20 +00:00
Miroslav Stampar b481c0352f minor update 2012-02-24 11:25:56 +00:00
Miroslav Stampar 5afbd52b61 more update related to last commits 2012-02-24 10:57:23 +00:00