Bernardo Damele 0c01be0eeb Ugly work-around to avoid unescaping WAITFOR DELAY time between single quotes (unescaped CHAR(..) value does not work).

2010-12-09 00:34:02 +00:00

doc

updated THANKS file

2010-12-08 21:19:46 +00:00

extra

foundations for dictionary attack support combined with the sqlmap's password/hash retrieval functionality (--password switch)

2010-11-20 13:14:13 +00:00

lib

Ugly work-around to avoid unescaping WAITFOR DELAY time between single quotes (unescaped CHAR(..) value does not work).

2010-12-09 00:34:02 +00:00

plugins

code refactoring some more

2010-12-08 14:46:07 +00:00

shell

removed a trailer blank like (cosmetics)

2010-11-24 14:25:16 +00:00

tamper

further refactoring (all enumerations are now put into enums.py)

2010-11-08 09:20:02 +00:00

txt

more code refactoring

2010-11-23 14:50:47 +00:00

udf

Removed duplicate UDFs files

2010-07-20 10:44:27 +00:00

xml

Added possible stacked queries time-based blind vector for MSSQL

2010-12-08 23:55:42 +00:00

sqlmap.conf

Got rid of unreliable 'ORDER BY' technique to detect UNION query SQL injection, consequently switch --union-tech has gone now.

2010-11-29 17:18:38 +00:00

sqlmap.py

Minor code refactoring

2010-10-20 22:09:03 +00:00

S

Description

Automatic SQL injection and database takeover tool

117 MiB

Languages

Python 99.4%

Shell 0.3%

C 0.2%