8663b5b68b
minor fixes
2010-03-04 09:16:45 +00:00
b544405878
fixed some issue involving banner parsing
2010-03-04 09:15:26 +00:00
156fdd96ef
Updated copyright
2010-03-03 15:26:27 +00:00
aa62465aad
minor update, also for that banner error
2010-03-01 10:49:07 +00:00
694356821d
sqlmap does not save nor leave back in temporary folder any file named 'sqlmapRANDOM', only random names now, less suspicious
2010-02-26 13:13:50 +00:00
42f53f380f
Now can work 'cause isWindowsPath has been fixed, normalizePath called after ntToPosixSlashes
2010-02-26 12:40:23 +00:00
66c9885b96
Minor path fix
2010-02-26 11:34:48 +00:00
38a37b89f6
fix for those slashes
2010-02-26 11:07:23 +00:00
89dc99188d
--read-file on PostgreSQL now relies on the new sys_fileread() UDF so that also binary files can be read.
...
Fixed a minor bug in custom UDF injection feature --udf-inject.
Major code refactoring.
2010-02-11 22:57:50 +00:00
f728208ff7
Minor cosmetic fix
2010-02-10 15:51:52 +00:00
5c92fad5dc
Avoid to check for existence of not needed UDFs and minor code adjustment for cleanup() method
2010-02-05 23:14:16 +00:00
d291464cd4
code refactoring regarding path normalization
2010-02-04 14:50:54 +00:00
ec63fc4036
code refactoring - added functions posixToNtSlashes and ntToPosixSlashes
2010-02-04 14:37:00 +00:00
746cbdba96
Added support for takeover functionalities on PgSQL 8.4 running on Windows
2010-01-14 01:40:11 +00:00
b4ddfe8333
Minor bug fixed (variable undeclared)
2010-01-13 21:26:59 +00:00
4a72ad113a
Enhancements to PostgreSQL active fingerprint, now it covers also PostgreSQL 8.4 and minor speedups.
2010-01-12 11:44:47 +00:00
c7e1649655
Minor speedup
2010-01-12 11:43:32 +00:00
3a9f685e18
Enhancements to MySQL active fingerprint and comment injection fingerprint, now it covers also MySQL 5.5.x and improved on MySQL 5.1.x.
2010-01-12 11:21:28 +00:00
80bd146696
Added support for --dump with -C also on MSSQL
2010-01-10 19:12:54 +00:00
e5dc3f51c8
Display a better message for the moment while working on support for --dump -C on MSSQL
2010-01-10 00:30:45 +00:00
bb61010a45
Avoid useless checks for --os-bof (no need to check for DBA or for xp_cmdshell). Minor code restyling.
2010-01-04 15:02:56 +00:00
2eb24c6368
Avoid useless queries
2010-01-04 12:35:53 +00:00
ce022a3b6e
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 02:02:12 +00:00
6e36a6f8ed
Major enhancement to MSSQL MS09-004 exploit
2009-11-17 23:33:20 +00:00
89c43893d4
Merged back from personal branch to trunk (svn merge -r846:940 ...)
...
Changes:
* Major enhancement to the Microsoft SQL Server stored procedure
heap-based buffer overflow exploit (--os-bof) to automatically bypass
DEP memory protection.
* Added support for MySQL and PostgreSQL to execute Metasploit shellcode
via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an
option instead of uploading the standalone payload stager executable.
* Added options for MySQL, PostgreSQL and Microsoft SQL Server to
read/add/delete Windows registry keys.
* Added options for MySQL and PostgreSQL to inject custom user-defined
functions.
* Added support for --first and --last so the user now has even more
granularity in what to enumerate in the query output.
* Minor enhancement to save the session by default in
'output/hostname/session' file if -s option is not specified.
* Minor improvement to automatically remove sqlmap created temporary
files from the DBMS underlying file system.
* Minor bugs fixed.
* Major code refactoring.
2009-09-25 23:03:45 +00:00
458d59416c
Minor bug fix in MSSQL version fingerprint
2009-08-11 09:16:20 +00:00
3d4bfb3263
More appropriate warning message, got rid of a TODO
2009-07-24 23:20:22 +00:00
4b622ed860
Minor bug fix.
...
Adapted Metasploit wrapping functions to work with latest msf3 development version too.
2009-07-06 14:40:33 +00:00
03a6739fbf
Minor layout adjustments
2009-06-11 15:34:31 +00:00
f3e8d6db70
Fixed MySQL comment injection
2009-05-01 16:29:45 +00:00
16b4530bbe
Minor bug fixes to --os-shell (altought web backdoor functionality still to be reviewed).
...
Minor common library code refactoring.
Code cleanup.
Set back the default User-Agent to sqlmap for comparison algorithm reasons.
Updated THANKS.
2009-04-27 23:05:11 +00:00
06e8546177
Finally fixed MSSQL 2000 fingerprint
2009-04-24 10:26:01 +00:00
eeb34eb028
Again, minor fix to MSSQL 2000 fingerprint
2009-04-23 21:13:34 +00:00
8e88b32274
Minor fix in MSSQL 2000 fingerprint
2009-04-23 08:36:39 +00:00
8c0ac767f4
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
b997df740a
Minor bug fix
2009-02-25 20:11:14 +00:00
5560f0b68a
Updated the copyright
2009-01-12 21:35:38 +00:00
e10ab5aa0e
Major bug fixes
2009-01-10 14:39:27 +00:00
9e0d890171
Fixed MySQL 5.1 extensive fingerprint
2009-01-02 23:21:31 +00:00
c1010c20d8
Minor adjustments
2008-12-30 21:24:01 +00:00
24ddbdc89d
Minor layout adjustment
2008-12-22 23:34:22 +00:00
b0ad102efb
Better fingerprint technique for Microsoft SQL Server
2008-12-22 23:32:43 +00:00
79c8d63b88
Major speed increase in DBMS basic fingerprint
2008-12-22 23:26:44 +00:00
8d06975142
Major enhancement to make the comparison algorithm work properly also
...
on url not stables automatically by using the difflib SequenceMatcher
object: this changed a lot into the structure of the code, has to be
extensively beta-tested!
Please, do report bugs on sqlmap-users mailing list if you scout them.
Cheers,
Bernardo
2008-12-20 01:54:08 +00:00
c32ef9d751
Major bug fix to avoid tracebacks when multiple targets are specified and one
...
of them is not reachable.
Minor bug fix to make the --postfix work even if --prefix is not provided.
2008-12-18 20:38:57 +00:00
38c9627700
Minor enhancemet to support also --regexp, --excl-str and --excl-reg
...
options rather than only --string when comparing HTTP responses page
content
2008-12-05 15:34:13 +00:00
e75487a26c
Reverted last commit, cleaner this way
2008-12-01 23:33:15 +00:00
e2a805ef6a
Minor workaround because of latest bug fix
2008-12-01 23:32:14 +00:00
beea58f2e9
Updated MySQL versions
2008-12-01 23:02:52 +00:00
727664aea7
Minor enhancement to fingerprint the web server operating system and
...
the web application technology by parsing also HTTP response Server
header.
Refactor libraries and plugins that parses XML to fingerprint and show
on standard output the information.
Updated changelog.
2008-11-18 17:42:46 +00:00
Miroslav Stampar