Commit Graph

904 Commits

Author SHA1 Message Date
Miroslav Stampar 132a72c9bd Minor update of logging messages 2017-11-24 12:20:57 +01:00
Miroslav Stampar 26b81f58bb Fixes #2772 2017-11-13 11:19:25 +01:00
Miroslav Stampar 67b470245e Minor cleanup of NULL connection 2017-11-09 13:45:52 +01:00
Miroslav Stampar 58b87e4b6b Some more refactoring 2017-11-08 15:58:23 +01:00
Miroslav Stampar 496075ef20 Trivial refactoring 2017-10-31 10:10:22 +01:00
Miroslav Stampar 1f60dfc835 Minor patch for WAF mechanism 2017-10-16 11:42:11 +02:00
Miroslav Stampar 8c6b761044 Replacing doc/COPYING to LICENSE 2017-10-11 14:50:46 +02:00
Miroslav Stampar 12f802c70f Minor text update 2017-09-11 10:41:50 +02:00
Miroslav Stampar 96ffb4b911 Fixes #2693 2017-09-11 10:38:19 +02:00
Miroslav Stampar cb2258fea4 Fixes #2603 2017-08-28 13:02:08 +02:00
Miroslav Stampar c871cedae4 Adding hidden option '--force-dbms' to skip fingerprinting 2017-08-28 12:30:42 +02:00
Miroslav Stampar 8b0c50f25d Update related to the #2663 2017-08-23 13:17:37 +02:00
Miroslav Stampar 62ae149464 Minor patch 2017-07-29 03:35:05 +02:00
Miroslav Stampar 5745d650f8 Fixes #2635 2017-07-29 02:42:20 +02:00
Miroslav Stampar 0f9c81965b Implementation on request 2017-07-26 00:24:13 +02:00
Miroslav Stampar d12b65d38c Fixes #2624 2017-07-25 23:32:30 +02:00
Louis-Philippe Huberdeau e38267a61e Include tracking properties in the HAR to identify which test the requests were associated to 2017-07-18 15:46:52 -04:00
Miroslav Stampar 1678b606a2 Update for #2597 2017-07-03 16:55:24 +02:00
Louis-Philippe Huberdeau 0d756a8823 Parse request data and convert to HAR, include in injection data 2017-06-23 11:50:21 -04:00
Miroslav Stampar 864711b434 Minor improvement 2017-06-05 16:48:14 +02:00
Miroslav Stampar 996ad59126 Minor patch 2017-06-05 16:28:19 +02:00
Miroslav Stampar 359bfb2704 Minor adjustment 2017-05-26 14:14:35 +02:00
Miroslav Stampar 644ea2e3aa Minor patch 2017-05-26 14:08:08 +02:00
Miroslav Stampar 4ce08dcfa3 Patch for an Issue #2536 2017-05-17 00:22:18 +02:00
Miroslav Stampar d3a08a2d22 Implementation for an Issue #2505 2017-05-07 23:12:42 +02:00
Miroslav Stampar fc8eede952 Minor cleanup and one bug fix 2017-04-19 14:46:27 +02:00
Miroslav Stampar c8a0c525fc Fixes #2489 2017-04-19 14:19:39 +02:00
Miroslav Stampar 5f2bb88037 Some code refactoring 2017-04-18 15:48:05 +02:00
Miroslav Stampar 7ebba5614a Moving brute from techniques to utils 2017-04-18 13:53:41 +02:00
Miroslav Stampar d9a931f77a Minor cleanup 2017-04-14 13:14:53 +02:00
Miroslav Stampar 0e206da7c0 Minor patches (pydiatra) 2017-04-14 13:08:51 +02:00
Miroslav Stampar 9b3d229294 Fixes #2471 2017-04-10 19:21:22 +02:00
Miroslav Stampar 60e8c725f9 Fixes #2437 2017-03-12 23:24:13 +01:00
Miroslav Stampar 7960045cf9 Fixes #2277 and #2300 2017-02-27 13:58:07 +01:00
Miroslav Stampar 4b420e7579 Removing Google PageRank as it is dead now 2017-02-23 11:33:39 +01:00
Miroslav Stampar 38f16decef Update for an Issue #2384 2017-02-06 13:28:33 +01:00
Miroslav Stampar 03bbf552ef Patch for an Issue #2382 2017-02-06 11:14:45 +01:00
Miroslav Stampar 55272f7a3b New version preparation 2017-01-02 14:19:18 +01:00
Francisco Blas Izquierdo Riera (klondike) 025e9ac5b4 Fix the logic used for --param-exclude
The current logic will skip all existing parameters if no param-exclude is defined.
This breaks previous behaviour, makes it harder to use the tool and is quite confusing.

The new logic will always check the parameter is set before running any other checks instead of shortcircuit an empoty(always true) regexp.
2016-12-28 12:25:05 +01:00
Miroslav Stampar 89bbf5284c Adding new option --param-exclude on private request 2016-12-25 23:16:44 +01:00
Miroslav Stampar edc6f47758 Some refactoring 2016-12-19 23:47:39 +01:00
Hanno Heinrichs 2cc604e356 Fix several typos 2016-10-26 21:41:57 +02:00
Miroslav Stampar 24eaf55dc8 Removing bad decision for -d (user should be able to choose) 2016-10-17 22:32:23 +02:00
Miroslav Stampar 6130185ac6 Minor consistency update with the wiki 2016-10-11 00:35:39 +02:00
Miroslav Stampar 171cf6f54d Minor fine tuning for SQLi heuristic check 2016-10-04 11:32:06 +02:00
Miroslav Stampar dc8301689e Implementation for an Issue #2204 2016-10-02 11:13:40 +02:00
Miroslav Stampar 332726356c Minor language update 2016-09-29 14:03:46 +02:00
Miroslav Stampar 381deb68ff Implementation for an Issue #2137 2016-09-27 13:26:11 +02:00
Miroslav Stampar 7151df16f6 Adding extra validation step in case of boolean-based blind (e.g. if unexpected 500 occurs) 2016-09-27 11:21:12 +02:00
Miroslav Stampar 8994bf2dba Further dealing with time-based SQLi (Issue #1973) 2016-09-27 10:32:22 +02:00