Commit Graph

337 Commits

Author SHA1 Message Date
Miroslav Stampar e6c66fa37c update regarding expectingNone in fingerprinting mode to cancel drop down to other techniques available 2010-12-11 17:55:28 +00:00
Miroslav Stampar e32fa9df43 further update regarding bugtrace's report 2010-12-11 17:32:15 +00:00
Miroslav Stampar 5d18c98ec2 quick fix for a bug reported by bugtrace (not using __goBooleanProxy because we don't have a proper vector this moment) 2010-12-11 17:20:39 +00:00
Miroslav Stampar 03447acc1d avoiding some trashy match ratios 2010-12-11 17:12:19 +00:00
Miroslav Stampar 3dc0a51d34 major bug fix with boolean expressions 2010-12-11 08:46:19 +00:00
Miroslav Stampar ac9080c07b update 2010-12-11 08:24:29 +00:00
Miroslav Stampar 66db80804d fix 2010-12-10 16:03:32 +00:00
Miroslav Stampar 435f48b8cc polite cosmetics 2010-12-10 15:28:56 +00:00
Miroslav Stampar 977988c0ab cosmetics 2010-12-10 15:24:25 +00:00
Miroslav Stampar fa8d378e80 another update 2010-12-10 15:18:15 +00:00
Miroslav Stampar 1ef44cfe60 fix 2010-12-10 15:06:53 +00:00
Miroslav Stampar fe186cde55 proper fix 2010-12-10 13:26:31 +00:00
Miroslav Stampar 9957881040 you won't believe commit 2010-12-10 13:20:59 +00:00
Miroslav Stampar 1fc9ed10a8 minor refactoring 2010-12-10 12:30:36 +00:00
Miroslav Stampar 4d8628e8fb fix for booleans 2010-12-10 12:26:01 +00:00
Miroslav Stampar 471d9ccd65 another fix of my lala 2010-12-10 10:11:25 +00:00
Miroslav Stampar 029a6abba2 quick fix 2010-12-10 09:54:25 +00:00
Miroslav Stampar 441fc8dbd9 update regarding boolean based expressions 2010-12-09 21:15:18 +00:00
Miroslav Stampar 1492823de0 it wasn't pretty, now it's pretty 2010-12-09 20:06:20 +00:00
Bernardo Damele 9230877d98 cosmetics 2010-12-09 13:57:38 +00:00
Miroslav Stampar 196131bbca minor cosmetics 2010-12-09 10:42:00 +00:00
Miroslav Stampar 3fd1c37d53 update 2010-12-09 07:49:18 +00:00
Bernardo Damele b5c6527c72 Minor fix 2010-12-09 00:25:48 +00:00
Bernardo Damele f5ce739bdf Added support for time-based blind SQL injection via stacked queries too. Need to add vectors for some DBMS yet. 2010-12-08 23:52:31 +00:00
Miroslav Stampar 54f6673609 update 2010-12-08 22:38:26 +00:00
Miroslav Stampar d6077273e0 update 2010-12-08 22:14:42 +00:00
Miroslav Stampar 40fadf2f35 minor update 2010-12-08 14:33:10 +00:00
Miroslav Stampar 01cf1394a4 code refactoring 2010-12-08 14:26:40 +00:00
Miroslav Stampar 6223f25dd9 code beautification 2010-12-08 13:04:48 +00:00
Miroslav Stampar 64cc2588f1 now resume is available for time-based blinds too 2010-12-08 12:49:26 +00:00
Miroslav Stampar 537b619165 removing junk 2010-12-08 12:30:25 +00:00
Miroslav Stampar b5e45939e3 sqlmap premiere of blind time based query/bisection 2010-12-08 12:28:54 +00:00
Miroslav Stampar 47bb31fb47 code refactoring 2010-12-08 11:30:25 +00:00
Miroslav Stampar 1ae2fa7f1a update regarding time based payloads 2010-12-08 11:26:54 +00:00
Miroslav Stampar bdff4aba6a switching to quick_ratio 2010-12-07 23:57:43 +00:00
Miroslav Stampar c1b82cf09c ratio() gives a considerable lag on real life cases, as real_quick_ratio() gives almost as good results 2010-12-07 23:53:44 +00:00
Miroslav Stampar a4a63f5b1e minor update 2010-12-07 23:49:00 +00:00
Miroslav Stampar 293ce18fed two major bug fixes regarding time calculation (previously comparison was also a part of "delta", which screwed results in cases with large pages; other was a standard distribution based one) 2010-12-07 23:32:33 +00:00
Miroslav Stampar dc651d59ec little mathematics here and there (used "Rules for normally distributed data") 2010-12-07 19:19:12 +00:00
Bernardo Damele 81e7465ed2 Cosmetics 2010-12-07 17:16:21 +00:00
Miroslav Stampar 294119d2ec more advanced time technique(s) 2010-12-07 16:04:53 +00:00
Miroslav Stampar e53fef546e update regarding session page templates 2010-12-07 14:35:31 +00:00
Miroslav Stampar add6235b16 removed pageTemplate from injection(s), it's not longer stored in session, and it's reloaded when resuming from session 2010-12-07 14:06:54 +00:00
Miroslav Stampar 0dc630203f code refactoring 2010-12-07 13:34:06 +00:00
Miroslav Stampar d77ddbee47 OR based inference works for the first time in history and fingerprint of 4 major DBMSes is now injection based (instead of AND) 2010-12-06 18:20:57 +00:00
Bernardo Damele 17449754fe Got rid of UNION false cond 2010-12-05 16:16:15 +00:00
Miroslav Stampar 9e5f933ace some updates 2010-12-04 15:47:02 +00:00
Miroslav Stampar eeb199375b usage of compiled regexes in case of dynamic markings and other refactoring 2010-12-04 13:23:28 +00:00
Miroslav Stampar 0fc7a8f9e8 code refactoring 2010-12-04 10:13:18 +00:00
Miroslav Stampar 04714374f9 now you can use kb.pageTemplate to set a page which will be used as a template in comparison process (at least in '-[RANDNUM] OR' cases we'll need to use different template(s)) 2010-12-04 10:05:18 +00:00