d2a3e8f44f
first time firebird error-based query success
2010-12-11 11:17:24 +00:00
d5e7a8d305
update
2010-12-10 10:54:17 +00:00
9c61adb21d
Cosmetics
2010-12-09 00:26:06 +00:00
81c16926c1
code refactoring some more
2010-12-08 14:46:07 +00:00
95b48746a6
cosmetics
2010-12-08 14:29:09 +00:00
01cf1394a4
code refactoring
2010-12-08 14:26:40 +00:00
b21eb88905
minor update
2010-12-07 22:45:38 +00:00
ecd4a5a532
added standard deviation check in time based tests
2010-12-07 16:39:31 +00:00
294119d2ec
more advanced time technique(s)
2010-12-07 16:04:53 +00:00
effd2ca0e3
Cosmetics
2010-12-07 12:32:58 +00:00
61f82fd274
introducing [DELAYED] for heavy query time based payloads when response time is non-deterministic
2010-12-07 00:27:26 +00:00
3f9450b9dc
minor fix
2010-12-04 14:43:35 +00:00
eeb199375b
usage of compiled regexes in case of dynamic markings and other refactoring
2010-12-04 13:23:28 +00:00
0fc7a8f9e8
code refactoring
2010-12-04 10:13:18 +00:00
b3a094b9d6
fix for a bug reported by ToR (when resuming: queries[kb.dbms] -> KeyError: u'mysql')
2010-12-03 22:44:29 +00:00
5764816891
minor cosmetics
2010-12-03 22:28:09 +00:00
612ee08a0b
added response time kb attribute
2010-12-03 13:19:34 +00:00
2cc167a42e
fix for a bug reported by ToR: "AttributeError: 'NoneType' object has no attribute 'isdigit'"
2010-12-02 18:57:43 +00:00
70e87d959e
update of dynamicity engine
2010-11-29 15:14:49 +00:00
7e3b24afe6
Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own.
...
All (hopefully) functionalities should still be working.
Added two switches, --level and --risk to specify which injection tests and boundaries to use.
The main advantage now is that sqlmap is able to identify initially which injection types are present so for instance if boolean-based blind is not supported, but error-based is, sqlmap will keep going and work!
2010-11-28 18:10:54 +00:00
6712f4da55
some refactoring and one less request for aspx maintanance during --os-shell
2010-11-24 14:20:43 +00:00
253eafb643
paranoid cosmetics
2010-11-24 12:03:01 +00:00
b2b521fc8a
gready regex bastard :)
2010-11-24 12:01:36 +00:00
9579a97039
now ASPX works too for --os-shell
2010-11-24 11:38:27 +00:00
f9f076ba97
code refactoring
2010-11-23 21:00:42 +00:00
7877a931d5
more cosmetics regarding dictionary attack
2010-11-23 20:54:40 +00:00
c4414df594
minor update
2010-11-23 15:33:13 +00:00
78024eafe0
little precaution
2010-11-23 15:31:23 +00:00
aa5d038f18
more code refactoring
2010-11-23 14:50:47 +00:00
3cae76627c
code refactoring regarding dictionary attack
2010-11-23 13:58:01 +00:00
ba4ea32603
first working version of dictionary attack
2010-11-23 13:24:02 +00:00
d757e4ae1c
bug fix (when user manually sets web root, that same directory should be used as one of potentionaly default dirs)
2010-11-17 09:46:04 +00:00
2a8e270bef
proper handling of carriage return character from Windows target machines
2010-11-16 15:11:03 +00:00
ab33651f96
minor bug fix for displaying text from windows machines (\r was interfering with normal dataToStdout behavior)
2010-11-16 15:02:22 +00:00
3487429eac
minor cosmetics
2010-11-16 14:41:46 +00:00
e7a66371f8
update regarding os shell-ing regarding JSP and ASPX
2010-11-16 13:46:46 +00:00
6ef3846400
update regarding error parsing (and reporting)
2010-11-16 10:42:42 +00:00
a777d59870
Minor bug fix
2010-11-12 15:17:12 +00:00
697b32554c
fix for a bug "ordinal not in range(128)" reported by bugtrace
2010-11-12 11:48:25 +00:00
a34c1b287c
Bug fix related to properly identify and parse the version from the banner (used for --stacked-test and other matters on MySQL/PgSQL)
2010-11-12 11:33:11 +00:00
66c82d72e4
Typo fix
2010-11-12 10:02:02 +00:00
7752b5efe9
minor update
2010-11-09 09:51:54 +00:00
221f976fbd
minor update
2010-11-09 01:23:54 +00:00
78d7b17483
More replacements for refactoring.
...
Minor layout adjustments.
Alignment of conffile/optiondict/cmdline parameters.
2010-11-08 12:36:48 +00:00
a3de10e3a2
new option -t
2010-11-08 11:22:47 +00:00
862395ced1
further refactoring (all enumerations are now put into enums.py)
2010-11-08 09:20:02 +00:00
8e44aa605a
refactoring regarding injection place (more left)
2010-11-08 08:02:36 +00:00
508b9cc763
dynamicity engine update
2010-11-07 00:12:00 +00:00
3619fc5127
minor update
2010-11-06 08:31:11 +00:00
06760182f1
cosmetics
2010-11-05 16:08:42 +00:00
Miroslav Stampar