Bernardo Damele 300128042c First big commit to move UNION query tests to detection phase - there are some improvements and tuning to do yet though. ...

Major refactoring to Agent.payload() method.
Minor bug fixes, some code refactoring and a lot of core adjustments here and there.
Added more checks for injection in GROUP BY and ORDER BY.

2011-01-11 22:18:47 +00:00

doc

fixes for bugs reported by pragmatk@gmail.com

2011-01-06 16:59:58 +00:00

extra

same thing with mysql as in last commit

2011-01-05 14:41:38 +00:00

lib

First big commit to move UNION query tests to detection phase - there are some improvements and tuning to do yet though.

2011-01-11 22:18:47 +00:00

plugins

Minor code refactoring and cosmetics

2011-01-11 21:46:21 +00:00

shell

removed a trailer blank like (cosmetics)

2010-11-24 14:25:16 +00:00

tamper

further refactoring (all enumerations are now put into enums.py)

2010-11-08 09:20:02 +00:00

txt

adding user agent strings for opera >= 9.10 and safari >= 4.0

2011-01-03 15:26:42 +00:00

udf

bug fix for postgre's --os-shell (when there was an error in command executed and/or no output chars, garbled output was returned)

2011-01-05 14:36:41 +00:00

xml

First big commit to move UNION query tests to detection phase - there are some improvements and tuning to do yet though.

2011-01-11 22:18:47 +00:00

sqlmap.conf

Got rid of unreliable 'ORDER BY' technique to detect UNION query SQL injection, consequently switch --union-tech has gone now.

2010-11-29 17:18:38 +00:00

sqlmap.py

important update regarding restoring of potentially changed switch values in multi-target mode and/or missing switch values in resume mode

2011-01-02 10:37:32 +00:00

S

Description

Automatic SQL injection and database takeover tool

117 MiB

Languages

Python 99.4%

Shell 0.3%

C 0.2%