Bernardo Damele e9291932e5 Apply --level also to User-Agent (level >= 4) and Cookie (level >= 3). ...

GET and POST parameters are always tested.

2010-11-29 16:33:20 +00:00

doc

Added new switch --union-char to be able to provide the character used in union-test and exploit (default is still NULL, but can be any)

2010-11-19 14:56:20 +00:00

extra

foundations for dictionary attack support combined with the sqlmap's password/hash retrieval functionality (--password switch)

2010-11-20 13:14:13 +00:00

lib

Apply --level also to User-Agent (level >= 4) and Cookie (level >= 3).

2010-11-29 16:33:20 +00:00

plugins

Removed --error-test, --stacked-test and --time-test switches and adapted the code accordingly. This is due to the fact that the new XML based detection engine already supports all of those tests (and more).

2010-11-29 11:47:58 +00:00

shell

removed a trailer blank like (cosmetics)

2010-11-24 14:25:16 +00:00

tamper

further refactoring (all enumerations are now put into enums.py)

2010-11-08 09:20:02 +00:00

txt

more code refactoring

2010-11-23 14:50:47 +00:00

udf

Removed duplicate UDFs files

2010-07-20 10:44:27 +00:00

xml

Minor adjustment to detect the proper parameter type based upon --prefix and --suffix values

2010-11-29 12:13:42 +00:00

sqlmap.conf

Removed --error-test, --stacked-test and --time-test switches and adapted the code accordingly. This is due to the fact that the new XML based detection engine already supports all of those tests (and more).

2010-11-29 11:47:58 +00:00

sqlmap.py

Minor code refactoring

2010-10-20 22:09:03 +00:00

S

Description

Automatic SQL injection and database takeover tool

117 MiB

Languages

Python 99.4%

Shell 0.3%

C 0.2%