Bernardo Damele 070ccc30e9 Added automatic support in --os-pwn to use the web uploader/backdoor to upload and execute the Metasploit payload stager when stacked queries SQL injection is not supported, for instance on MySQL/PHP and MySQL/ASP. ...

Updated ChangeLog.
Major code refactoring.

2010-01-14 14:03:16 +00:00

doc

Added automatic support in --os-pwn to use the web uploader/backdoor to upload and execute the Metasploit payload stager when stacked queries SQL injection is not supported, for instance on MySQL/PHP and MySQL/ASP.

2010-01-14 14:03:16 +00:00

extra

Added support for takeover functionalities on PgSQL 8.4 running on Linux too.

2010-01-14 10:50:03 +00:00

lib

Added automatic support in --os-pwn to use the web uploader/backdoor to upload and execute the Metasploit payload stager when stacked queries SQL injection is not supported, for instance on MySQL/PHP and MySQL/ASP.

2010-01-14 14:03:16 +00:00

plugins

Added automatic support in --os-pwn to use the web uploader/backdoor to upload and execute the Metasploit payload stager when stacked queries SQL injection is not supported, for instance on MySQL/PHP and MySQL/ASP.

2010-01-14 14:03:16 +00:00

shell

Minor patch to make the PHP web backdoor work also on Windows

2009-10-22 16:25:19 +00:00

txt

Minor enhancement to show the DBMS operating system (if fingerprinted)

2008-11-17 11:22:03 +00:00

udf

Added support for takeover functionalities on PgSQL 8.4 running on Linux too.

2010-01-14 10:50:03 +00:00

xml

Updated MSSQL xml signatures file

2010-01-13 14:50:13 +00:00

sqlmap.conf

Deprecate sqlmap update code, will use pysvn to update from latest development version from subversion repository.

2010-01-13 14:52:23 +00:00

sqlmap.py

sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.

2010-01-02 02:02:12 +00:00

S

Description

Automatic SQL injection and database takeover tool

117 MiB

Languages

Python 99.4%

Shell 0.3%

C 0.2%