75f286cf6d
minor update conformant to http://dev.mysql.com/doc/refman/4.1/en/comments.html
2011-04-10 23:41:00 +00:00
3177c6023d
lol. re-revert
2011-04-10 23:30:56 +00:00
6fa2fd139c
implemented support for __pivotDumpTable on MSSQL as normal tables tend to not play well with normal TOP 1 ..NOT IN..ORDER BY mechanism if the argument for ORDER BY is not the unique one (returns only number of rows equal to the number of distinct values for that field)
2011-04-08 15:17:57 +00:00
e27afef6be
minor update regarding --current-db on Oracle
2011-04-01 15:56:11 +00:00
73e5d20ade
bulk commit for safe/unsafe identificator naming (done and tested for all 4 major DBMSes) and one bug fix for --search-column on MSSQL (inside queries)
2011-03-28 11:01:55 +00:00
82ab4c8dc2
minor fix (ORDER BY 1 screws things up in blind mode)
2011-03-24 14:19:32 +00:00
06a5c39efe
fix related to the bug reported by Alone Shell
2011-03-24 14:03:40 +00:00
b72cdfe9e6
fix for mssql regarding usage of schema names reported by jabra@spl0it.org
2011-03-23 10:40:34 +00:00
4889764114
minor update regarding last commit
2011-03-21 11:40:27 +00:00
5291fe35c9
proper implementation of --dbs on Oracle (we are using now schema names as a counterpart to dbs in other DBMSes)
2011-03-21 11:29:43 +00:00
0535225fe7
throwing out obsolete ORDER BY 1 from inband queries
2011-03-16 14:18:12 +00:00
3dc31f6273
removing spaces after , in our queries
2011-03-08 14:07:26 +00:00
3e8c204121
Major bug fix to properly prepare UNION technique statement for --os-pwn and --is-dba
2011-02-21 16:00:56 +00:00
68a95fd1b1
minor update
2011-02-20 22:45:23 +00:00
aac817935a
further improvement of MaxDB support
2011-02-20 22:41:42 +00:00
a3ba8b6928
--dump now works on MaxDB too
2011-02-20 22:07:12 +00:00
59e666d16e
--is-dba (related) update for Sybase
2011-02-20 17:28:06 +00:00
67ec691eb1
more updates regarding Sybase
2011-02-20 16:28:48 +00:00
823e4351b5
minor change
2011-02-20 12:34:09 +00:00
f30dea74f3
more Sybase updates
2011-02-19 18:36:26 +00:00
b71bb321dd
some more Sybase updates
2011-02-19 18:04:27 +00:00
e0efe453ab
minor update regarding Sybase support
2011-02-19 14:07:08 +00:00
5f4ffc9287
update regarding Sybase dumping
2011-02-19 00:36:47 +00:00
394ccb5cc5
Added query for MSSQL/--privileges
2011-02-10 15:52:55 +00:00
5050a76b59
update regarding reading of table names from access system tables
2011-02-09 10:33:29 +00:00
1a5a66870e
problem fixed
2011-02-07 11:57:41 +00:00
4bb7ffcb3a
minor update
2011-02-03 13:18:43 +00:00
8397c526d8
Minor adjustment
2011-01-31 21:20:23 +00:00
440264341c
minor update
2011-01-24 17:43:25 +00:00
0eea5665b2
minor update
2011-01-24 17:41:36 +00:00
6c490bfc8f
Avoid a traceback elsewhere
2011-01-20 21:43:41 +00:00
f6d79f58bc
another fix (LIMIT is not a good idea to have in inband queries)
2011-01-20 21:13:28 +00:00
ff1a44c335
probably a fix for that SQLite bug reported by Ahmed Shawky
2011-01-20 20:30:18 +00:00
2c8115eed9
further improvement for ms access table dumping
2010-12-26 01:04:30 +00:00
fb099615e2
minor update
2010-12-25 11:16:35 +00:00
272476773f
getPageTextWordsSet on tableExists is pretty powerful stuff
2010-12-25 09:37:33 +00:00
706d8e0b88
development update (basic ms access dumping implemented)
2010-12-24 19:53:11 +00:00
edcf1a0872
few bug fixes
2010-12-24 18:40:48 +00:00
c9ab8ae60e
Bug fix to properly identify if current user is DBA (--is-dba) on MySQL
2010-12-22 14:06:01 +00:00
3ee44584d4
i've found a way! thank you hesus! fyea (ASC(MID) was just crashing when MID returned 'empty string')
2010-12-14 12:57:59 +00:00
33639578ee
minor update for MS Access
2010-12-12 15:25:19 +00:00
b1babeefe5
update regarding dumping of tables with blind on Sqlite
2010-12-11 22:00:16 +00:00
fe2039f5ba
coollyy little commits
2010-12-10 11:32:46 +00:00
094baadc5b
bug fix (in SELECT based heavy queries COUNT(*) should be used; otherwise multiple row error happens without proper delay)
2010-12-09 10:17:04 +00:00
69c4f94980
update
2010-12-08 15:40:01 +00:00
41e1b95c6c
Minor code refactoring and finally make exploitation work also on OR boolean-based injections
2010-12-05 11:25:44 +00:00
089c16a1b8
Added tag <epayload> to the payloads.xml's <test> tag to define which payload to use when exploiting the test type.
...
Removed some useless tests.
Moved <error> from queries.xml to payloads.xml as it makes more sense.
Beeps at sql inj found only if --beep is provided.
Minor fix in order to be able to pickle advancedDict() objects.
Minor code refactoring.
Removed useless folders.
2010-12-01 17:09:52 +00:00
e32be2b4e7
Minor adjustment
2010-11-23 15:06:40 +00:00
c6545f5c9f
we had a bug (nooooooooo!!!! :))
2010-11-19 10:36:47 +00:00
42272ca78c
minor update
2010-11-11 22:26:36 +00:00
Miroslav Stampar