ffc520b35f
Minor refactoring
2012-07-24 14:35:56 +02:00
162da75a04
modified homepage address
2012-07-12 18:38:03 +01:00
e673033ac1
minor layout adjustment
2012-07-06 15:26:45 +01:00
fb7fe552b7
proper naming
2012-07-06 15:13:50 +01:00
6a05e3fd79
Fix for Issue #61
2012-07-06 14:24:44 +02:00
ab412da27f
I am back on stage and here to stay!!! to start.. a removal of confirm switch which masked cases where file write operations failed when set to False automatically, now at least it asks the user and defaults to Yes
2012-07-01 23:25:05 +01:00
c39e5a85ba
Removed $id$ tags
2012-06-27 20:56:43 +02:00
3a90105fbb
minor refactoring
2012-06-14 13:38:53 +00:00
4da03d898e
Added support to create files with a visual basic script - no longer reliant on debug.exe so works on Windows 64-bit too. Fixes #236
2012-04-25 07:40:42 +00:00
5e358b51f9
few fixes related to bug report by Shadow Folder (AttributeError: 'list' object has no attribute 'isdigit')
2012-04-04 09:25:05 +00:00
8b9c5c66cc
code refactoring regarding charsetType inside inference/bisection
2012-02-29 14:36:23 +00:00
b3bd4144f5
removing of unused imports together with some general code refactoring
2012-02-22 10:40:11 +00:00
95f89ab63a
updating copyright date
2012-01-11 14:59:46 +00:00
25f0ec3597
some minor range to xrange conversion (where safe to do)
2011-10-21 22:34:27 +00:00
aedcf8c8d7
Changed homepage address
2011-07-07 20:10:03 +00:00
f34b395c65
fixing typo
2011-06-07 14:58:22 +00:00
eceb5eca7b
fix for --file-read on MSSQL for error technique (again that unpacking was causing problems); also reverting that check for file paths as one user mentioned that network paths are also possible for usage on Windows machines (e.g. \\bla\bla)
2011-05-02 21:55:06 +00:00
b327a78522
minor minor update of the last commit
2011-05-02 19:24:49 +00:00
0bb7d715a7
more user friendliness/handiness for users which mix Linux and Windows paths where they shouldn't do that
2011-05-02 19:18:28 +00:00
b3a0424269
More Backend class method usage refactoring
2011-04-30 15:24:15 +00:00
9a4ae7d9e2
More code refactoring of Backend class methods used
2011-04-30 14:54:29 +00:00
f56d135438
Minor code restyling
2011-04-30 13:20:05 +00:00
bd4fbb3251
fix for a bug reported by l0rda@l0rda.biz (TypeError: cannot concatenate 'str' and 'NoneType' objects)
2011-04-21 14:53:02 +00:00
0387654166
update of copyright string (until year)
2011-04-15 12:33:18 +00:00
fbf8e7f32d
Minor bug fix to --file-read
2011-04-10 19:53:42 +00:00
b48213783a
Removed senseless debug messsage
2011-02-08 17:09:35 +00:00
e16bab7117
re-enabled --read-file for MySQL with all techniques
2011-02-08 17:03:57 +00:00
008d434325
Important fix now that the file writing is unescaped too
2011-02-07 00:56:15 +00:00
2afc1e5021
Layout adjustments
2011-02-06 15:28:23 +00:00
a5a648f4fe
Correctly handle --read-file and --write-file if neither stacked queries nor union query SQL injection has been detected.
...
Support to read files on MySQL via error-based SQL injection technique will come as soon as we fix the MySQL/trim/error-based bug
2011-02-06 15:23:27 +00:00
367d0639f0
refactoring (class names should always be Capital cased)
2011-01-28 16:36:09 +00:00
bade0e3124
Major code refactoring - centralized all kb.dbms* info for both retrieval and set.
2011-01-19 23:06:15 +00:00
2ac8debea0
Major code refactoring - moved to one location only (getIdentifiedDBMS() in common.py) the retrieval of identified/fingerprinted DBMS.
...
Minor bug fixes thanks to previous refactoring too.
2011-01-13 17:36:54 +00:00
36862e2efa
update
2010-12-18 15:57:47 +00:00
435f48b8cc
polite cosmetics
2010-12-10 15:28:56 +00:00
5764816891
minor cosmetics
2010-12-03 22:28:09 +00:00
c22338ce90
Removed --error-test, --stacked-test and --time-test switches and adapted the code accordingly. This is due to the fact that the new XML based detection engine already supports all of those tests (and more).
2010-11-29 11:47:58 +00:00
862395ced1
further refactoring (all enumerations are now put into enums.py)
2010-11-08 09:20:02 +00:00
c7c84c3089
Closes #111 (DECLARE/CHAR encode xp_cmdshell parameter in MSSQL).
2010-11-02 15:31:51 +00:00
685a8e7d2c
refactoring of hard coded dbms names
2010-11-02 11:59:24 +00:00
4f8e9da1b6
Minor bug fix to properly delete sqlmap temporary files on the database server file system at shutdown.
...
Minor improvements at ICMPsh tunnel to cleanup properly the dbms at shutdown and avoid checking/writing sys_bineval() UDF as it's a PE and needs to be called by sys_exec() only.
Got rid of useless doubleslash param in delRemoteFile() method.
Major code refactoring to xp_cmdshell.py methods and parent calls.
2010-10-28 00:19:40 +00:00
32728d14b7
fix for --union-use with --error-test
2010-10-25 12:25:29 +00:00
4f7f20b94f
sorry, cosmetics
2010-10-14 23:18:29 +00:00
8b48833136
large commit with copyright header modifications
2010-10-14 14:41:14 +00:00
89c721a451
More replacements from open() to codecs.open(). conf.dataEncoding has to be used only for non-binary files.
2010-05-29 10:10:28 +00:00
2323d858a9
modification of temporary directory from C:/Windows/Temp to %TEMP%
2010-05-13 09:32:27 +00:00
b19de015c5
Minor bugs fixes
2010-03-31 13:52:51 +00:00
1416cd0d86
Major enhancement to directly connect to the dbms without passing via a sql injection: adapted code accordingly - see #158 . This feature relies on python third-party libraries to be able to connect to the database. For the moment it has been implemented for MySQL (with python-mysqldb module) and PostgreSQL (with python-psycopg2 module).
...
Minor layout adjustments.
2010-03-26 23:23:25 +00:00
09768a7b62
Major code refactoring: moved and split plugins (mysql, pgsql, mssql, oracle) more granularly and organized.
...
Todo for firebird, sqlite, access.
2010-03-22 22:57:57 +00:00
cc611c0010
Minor layout adjustments
2010-03-09 22:14:26 +00:00
Miroslav Stampar