146 Commits

Author SHA1 Message Date
Bernardo Damele bfbf58b04e Generated new user's manual html and pdf 2010-03-13 22:07:08 +00:00
Bernardo Damele ee89709042 Updated manual 2010-03-13 21:56:38 +00:00
Miroslav Stampar 4bef12a2b4 doc update 2010-03-13 14:35:56 +00:00
Bernardo Damele c42c4982c3 Updated documentation according to r1460 2010-03-12 22:59:03 +00:00
Bernardo Damele 7d8cc1a482 Get rid of Churrasco (Token kidnapping technique to --priv-esc). Reasons why:
1. there's kitrap0d (MS10-015) which is far more reliable, just recently fixed
2. works only to priv esc basically on MSSQL when it runs as NETWORK SERVICE and the machine is not patched against MS09-012 which is "rare" (hopefully) nowadays.
Now sqlmap relies on kitrap0d and incognito to privilege escalate the database process' user privileges to SYSTEM, both via Meterpreter.

Minor layout adjustments.
2010-03-12 22:43:35 +00:00
Bernardo Damele 054a4aaee7 Updated documentation, almost ready for 0.8 release! 2010-03-12 17:43:38 +00:00
Bernardo Damele b50a2288f4 Minor layout adjustments 2010-03-11 23:54:07 +00:00
Bernardo Damele b344a70ba1 Updated changelog 2010-03-11 01:10:55 +00:00
Bernardo Damele 4d53b17320 Updated THANKS 2010-03-10 22:08:54 +00:00
Bernardo Damele 6712b19df2 Updated ChangeLog 2010-03-10 01:14:23 +00:00
Bernardo Damele 8593741358 Minor bug fix 2010-03-05 15:25:53 +00:00
Bernardo Damele 7136c17f19 Minor log adjustments 2010-03-05 14:59:33 +00:00
Miroslav Stampar d618964ab6 more time adjustments 2010-03-05 14:30:50 +00:00
Miroslav Stampar 45fc58d267 update 2010-03-05 14:24:54 +00:00
Miroslav Stampar 071e897f4e minor time adjustments 2010-03-05 14:09:20 +00:00
Miroslav Stampar 6fd1f7f77c update 2010-03-05 14:06:03 +00:00
Bernardo Damele 20d8275f0e Minor doc adjustment 2010-03-05 10:20:45 +00:00
Bernardo Damele 5209b5929f update 2010-03-04 17:38:00 +00:00
Miroslav Stampar 5334a40451 added description for --flush-session option 2010-03-04 13:17:11 +00:00
Bernardo Damele a839566bb2 Added a link 2010-03-04 12:44:23 +00:00
Bernardo Damele 63880e3121 update 2010-03-03 22:02:48 +00:00
Bernardo Damele 1c7943f7b1 Update 2010-03-03 18:58:27 +00:00
Bernardo Damele 1704c73892 Update 2010-03-03 16:25:03 +00:00
Bernardo Damele e774578180 Updated documentation 2010-03-03 15:16:43 +00:00
Miroslav Stampar 759b720425 documentation update 2010-03-03 13:59:29 +00:00
Miroslav Stampar ddd8b277a6 updates, added #TODO marks for parts which have to be updated 2010-03-02 12:07:54 +00:00
Miroslav Stampar 0acef530ce update 2010-03-01 10:51:17 +00:00
Bernardo Damele dd3f65f0fb Updated ChangeLog 2010-02-26 15:37:24 +00:00
Bernardo Damele 3c34066d19 Added newly compiled PostgreSQL UDFs for Windows 2010-02-20 20:59:13 +00:00
Bernardo Damele 16599cf2cf typo fix 2010-02-16 22:54:22 +00:00
Bernardo Damele 7e0c411c0e Updated THANKS file 2010-02-11 23:46:50 +00:00
Miroslav Stampar bc0eb880df fix for that -- bug 2010-02-08 11:44:32 +00:00
Miroslav Stampar 4e6af8d6c9 some syntax corrections 2010-02-08 09:10:32 +00:00
Bernardo Damele 22995787d1 Updated THANKS file 2010-02-04 15:24:13 +00:00
Bernardo Damele 9ed0744510 Added some error messages to detect back-end DBMS 2010-01-30 22:24:20 +00:00
Bernardo Damele 267cf5dd1a Updated documentation 2010-01-30 00:08:10 +00:00
Bernardo Damele 7b8316728c Major bug fix in takeover functionalities on Microsoft SQL Server 2010-01-29 00:09:05 +00:00
Bernardo Damele c6cae7da41 Updated changelog 2010-01-28 23:10:54 +00:00
Bernardo Damele b4ce8fe361 Updated ChangeLog file 2010-01-18 15:43:06 +00:00
Bernardo Damele 070ccc30e9 Added automatic support in --os-pwn to use the web uploader/backdoor to upload and execute the Metasploit payload stager when stacked queries SQL injection is not supported, for instance on MySQL/PHP and MySQL/ASP.
Updated ChangeLog.
Major code refactoring.
2010-01-14 14:03:16 +00:00
Bernardo Damele 055b14a11a Updated Changelog 2010-01-13 12:14:29 +00:00
Bernardo Damele 473024bd6e Newline 2010-01-04 14:03:31 +00:00
Miroslav Stampar 6319eb6e5c just added PGP Key ID 2010-01-04 13:08:40 +00:00
Bernardo Damele 232f927dd0 Slightly updated the documentation 2010-01-04 12:53:58 +00:00
Bernardo Damele d5b1863dec Updated documentation and svn properties 2010-01-02 02:07:28 +00:00
Bernardo Damele c1c14dabd9 Minor bug fix 2009-12-21 11:21:18 +00:00
Bernardo Damele e6c4154cac Fixed minor bug in --reg-del 2009-12-21 11:04:54 +00:00
Bernardo Damele e4e081cdc6 sqlmap 0.8-rc2: minor enhancement based on msfencode 3.3.3-dev -t exe-small so that also PostgreSQL supports again the out-of-band via Metasploit payload stager optionally to shellcode execution in-memory via sys_bineval() UDF. Speed up OOB connect back. Cleanup target file system after --os-pwn too. Minor bug fix to correctly forge file system paths with os.path.join() all around. Minor code refactoring and user's manual update. 2009-12-17 22:04:01 +00:00
Bernardo Damele c332c72808 Minor update to user's manual to reflect new Metasploit release 2009-11-17 23:36:18 +00:00
Bernardo Damele aa14bea051 Test again 2009-11-01 12:30:30 +00:00