25 Commits

Author SHA1 Message Date
Miroslav Stampar c7f615f707 Renaming payload files (consistency with the rest of the project) 2016-07-17 00:21:16 +02:00
Miroslav Stampar f7cae68378 More formal language 2016-05-22 21:44:17 +02:00
Miroslav Stampar d0d676ccce Update of copyright string 2016-01-06 00:06:12 +01:00
Miroslav Stampar 3454e356f9 Fixes #1621 2015-12-23 08:55:45 +01:00
Miroslav Stampar 2c754b57bb Minor patch 2015-10-23 14:29:48 +02:00
Miroslav Stampar 16f8e4c8ba Removing unused imports 2015-07-12 12:25:02 +02:00
Bernardo Damele daa8e0d8c5 minor fix 2015-02-18 10:13:28 +00:00
Bernardo Damele 32ab52b8ca code refactoring: split boundaries and payloads XML files 2015-02-15 16:31:35 +00:00
Miroslav Stampar 45bdefd29b Update of copyright 2015-01-06 15:02:16 +01:00
Miroslav Stampar cdbfb17408 Patch for an Issue #919 2014-11-10 13:41:53 +01:00
Bernardo Damele 43a4e85749 updated copyright 2014-01-13 17:24:49 +00:00
Bernardo Damele 4b9d8ed673 reverted a previous commit as not all distributions create a link file /usr/bin/python2 to the Python interpreter 2013-02-14 11:32:17 +00:00
Bernardo Damele a67ef4117f make sure to use Python 2 interpreter when default system Python is version 3 2013-02-14 11:25:04 +00:00
Bernardo Damele a43202f3c0 updated copyright 2013-01-18 14:07:51 +00:00
Miroslav Stampar 6433be8b3d Style update 2012-12-10 17:20:04 +01:00
Bernardo Damele 162da75a04 modified homepage address 2012-07-12 18:38:03 +01:00
jekil c39e5a85ba Removed $id$ tags 2012-06-27 20:56:43 +02:00
Miroslav Stampar 95f89ab63a updating copyright date 2012-01-11 14:59:46 +00:00
Miroslav Stampar c517e97a44 few fixes and minor cosmetics 2011-07-08 06:02:31 +00:00
Bernardo Damele aedcf8c8d7 Changed homepage address 2011-07-07 20:10:03 +00:00
Miroslav Stampar 0387654166 update of copyright string (until year) 2011-04-15 12:33:18 +00:00
Bernardo Damele a9d4b37987 Code cleanup and minor refactoring 2010-12-03 10:51:27 +00:00
Bernardo Damele 089c16a1b8 Added tag <epayload> to the payloads.xml's <test> tag to define which payload to use when exploiting the test type.
Removed some useless tests.
Moved <error> from queries.xml to payloads.xml as it makes more sense.
Beeps at sql inj found only if --beep is provided.
Minor fix in order to be able to pickle advancedDict() objects.
Minor code refactoring.
Removed useless folders.
2010-12-01 17:09:52 +00:00
Bernardo Damele c8f943f5e4 Now, if the back-end dbms type has been identified by the detection engine, skips the fingerprint phase.
Major code refactoring and commenting to detection engine.
Ask user whether or not to proceed to test remaining parameters after an injection point has been identified.
Restore beep at SQL injection find.
Avoid reuse of same variable in DBMS handler code.
Minor adjustment of payloads XML file.
2010-11-30 22:40:25 +00:00
Bernardo Damele 7e3b24afe6 Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own.
All (hopefully) functionalities should still be working.
Added two switches, --level and --risk to specify which injection tests and boundaries to use.
The main advantage now is that sqlmap is able to identify initially which injection types are present so for instance if boolean-based blind is not supported, but error-based is, sqlmap will keep going and work!
2010-11-28 18:10:54 +00:00