4c6c91a80b
another --reg-read fix
2010-03-12 23:12:06 +00:00
7d8cc1a482
Get rid of Churrasco (Token kidnapping technique to --priv-esc). Reasons why:
...
1. there's kitrap0d (MS10-015) which is far more reliable, just recently fixed
2. works only to priv esc basically on MSSQL when it runs as NETWORK SERVICE and the machine is not patched against MS09-012 which is "rare" (hopefully) nowadays.
Now sqlmap relies on kitrap0d and incognito to privilege escalate the database process' user privileges to SYSTEM, both via Meterpreter.
Minor layout adjustments.
2010-03-12 22:43:35 +00:00
6b1ae62753
final fix for reading registry keys (now both parse and non-parse reads work fine)
2010-03-12 22:26:06 +00:00
0a2fe651ab
some fixes regarding registry reading
2010-03-12 22:09:58 +00:00
b50a2288f4
Minor layout adjustments
2010-03-11 23:54:07 +00:00
cc611c0010
Minor layout adjustments
2010-03-09 22:14:26 +00:00
156fdd96ef
Updated copyright
2010-03-03 15:26:27 +00:00
2f452480b3
Minor bug fix in syntax
2010-03-01 14:40:18 +00:00
f53ef947f1
Slightly stealthier
2010-02-26 13:14:57 +00:00
694356821d
sqlmap does not save nor leave back in temporary folder any file named 'sqlmapRANDOM', only random names now, less suspicious
2010-02-26 13:13:50 +00:00
1f2a1bb24c
removed some redundant code
2010-02-26 12:36:41 +00:00
e4c34ff86c
changed default web server language behaviour
2010-02-25 16:55:02 +00:00
0913d700a8
important update regarding default directories
2010-02-25 15:22:41 +00:00
4a3fa69f9d
minor adjustment
2010-02-25 15:07:54 +00:00
0df5b5fed9
Minor bug fix and code adjustments
2010-02-25 14:06:44 +00:00
24d3e24db0
more updates regarding --os-shell feature
2010-02-25 12:16:49 +00:00
b558712a47
more feature updates
2010-02-25 11:40:49 +00:00
15d1fcbb7f
now runcmd exe has random name too
2010-02-25 10:47:12 +00:00
2cafd5697b
new changes regarding --os-shell
2010-02-25 10:33:41 +00:00
858cb25975
update
2010-02-24 23:40:56 +00:00
2a07af2294
removed pdb tracing
2010-02-20 22:36:17 +00:00
0debc95ad4
some fixes
2010-02-20 22:31:54 +00:00
d1e3596382
Minor UPX adjustment
2010-02-20 19:02:55 +00:00
0ed5ba5559
minor update
2010-02-16 13:24:09 +00:00
c4951fd631
some updates regarding --os-shell option
2010-02-16 13:20:34 +00:00
dc06b40ddc
Minor exception message fix
2010-02-11 23:07:33 +00:00
89dc99188d
--read-file on PostgreSQL now relies on the new sys_fileread() UDF so that also binary files can be read.
...
Fixed a minor bug in custom UDF injection feature --udf-inject.
Major code refactoring.
2010-02-11 22:57:50 +00:00
00a23ace9a
some changes regarding web takeover
2010-02-09 14:27:41 +00:00
5c92fad5dc
Avoid to check for existence of not needed UDFs and minor code adjustment for cleanup() method
2010-02-05 23:14:16 +00:00
d291464cd4
code refactoring regarding path normalization
2010-02-04 14:50:54 +00:00
dbd52c52e4
minor fix
2010-02-04 14:39:24 +00:00
ec63fc4036
code refactoring - added functions posixToNtSlashes and ntToPosixSlashes
2010-02-04 14:37:00 +00:00
87239476af
more fixes :)
2010-02-04 10:10:41 +00:00
e4699f389d
some bug fixes regarding --os-shell usage against windows servers
2010-02-04 09:49:31 +00:00
ea045eaa2f
fixed serious issue with adding file paths into kb.absFilePaths (dirname was wrongly added, and afterwards getDirs used dirname of dirname)
...
also, fixed some issues with Windows paths
2010-02-03 16:40:12 +00:00
7c88e32f9d
bug fix for 404 program termination during shell upload attempt
2010-02-03 16:16:34 +00:00
565433097e
used normalizePath instead of os.path.normalize
2010-02-03 16:10:09 +00:00
87c8bdbc29
removed pdb tracing
2010-02-03 14:52:29 +00:00
c74b920f54
bug fix
2010-02-03 14:49:28 +00:00
979c919dc7
Minor logging message adjustment
2010-01-29 22:58:12 +00:00
e8b0fd90c8
Minor bug fix
2010-01-29 19:32:02 +00:00
767c67e37a
--priv-esc now relieas on more powerful and complete getsystem Meterpreter command that also implements kitrap0d as 4th technique
2010-01-29 14:57:33 +00:00
061794650f
minor fix
2010-01-29 10:15:05 +00:00
92817159dc
cloaked upx for windows (used mkstemp because of execution and file access rights problem)
2010-01-29 10:12:09 +00:00
200518724c
By default do not use Churrasco, but still let the user choose it.
...
The default technique to privilege escalate the OS user to SYSTEM when --priv-esc is provided now it 'run kitrap0d'.
2010-01-29 02:27:50 +00:00
7b8316728c
Major bug fix in takeover functionalities on Microsoft SQL Server
2010-01-29 00:09:05 +00:00
6f5d2ed171
Minor cosmetic adjustments
2010-01-28 17:07:34 +00:00
a2077bfc0e
quick fix
2010-01-28 16:56:00 +00:00
732ed48e2b
some refactoring regarding decloaking
2010-01-28 16:50:34 +00:00
dcbbad642d
Minor self fix, switched to rc6
2010-01-28 10:27:47 +00:00
Miroslav Stampar