Morph MORPH
SIGN IN SIGN UP
sqlmapproject / sqlmap UNCLAIMED

Automatic SQL injection and database takeover tool

0 0 0 Python

COMMITS

/ xml/queries.xml
568bd2da835d32e5c519a1f8c0b2817171ff5cfe
December 21, 2012
M
Fixed unneeded trimming in --hex for MsSQL
Miroslav Stampar committed
a3f9741
December 20, 2012
M
Proper length function used now (fixing issues with international letters in multi threaded mode)
Miroslav Stampar committed
03215ef
December 19, 2012
B
handle "LIMIT num" as well as "LIMIT num, num" across all techniques - fixes issue #308
Bernardo Damele committed
dee56b1
November 29, 2012
M
Minor consistency update
Miroslav Stampar committed
2e2a7a3
October 28, 2012
M
Improvement and fix for pivotDumpTable mechanism
Miroslav Stampar committed
919f75d
September 7, 2012
M
Fix for an Issue #175
Miroslav Stampar committed
f26ea04
August 20, 2012
M
Making payloads a bit shorter (removing redundant space after comma character - e.g. in inband queries)
Miroslav Stampar committed
8ee9fea
July 21, 2012
M
Fix for an Issue #110
Miroslav Stampar committed
95e0d46
July 11, 2012
B
added --hostname switch to retrieve DBMS server hostname - closes issue #69
Bernardo Damele committed
53c0336
July 3, 2012
M
Update for Issue #55 (falling back to SELECT DB_NAME(N))
Miroslav Stampar committed
27fdccc
May 3, 2012
M
fix for proper (international character) inference on MsAccess
Miroslav Stampar committed
57234e1
March 9, 2012
B
Improvements to column(s) search: now it's possible to search column(s) in provided table(s) across all databases, search column(s) across all tables in provided database(s) or let sqlmap alone identify the databases' tables - this is now implemented for error-based, union query and direct connection. Work is still required for boolean-based and time-based.
Bernardo Damele committed
012fc21
February 21, 2012
M
minor update regarding --hex
Miroslav Stampar committed
686eacd
M
minor update
Miroslav Stampar committed
77723a7
M
adding hex conversion functions to queries.xml for 4 major DBMSes
Miroslav Stampar committed
d70f4b7
February 9, 2012
M
fixes, updates, patches
Miroslav Stampar committed
7bca926
February 3, 2012
M
added one more failsafe for MSSQL --tables
Miroslav Stampar committed
f86c365
February 1, 2012
M
minor update regarding support for Unicode characters in Oracle
Miroslav Stampar committed
f4e7bf1
M
proper retrieval of unicode characters in inference mode on MSSQL
Miroslav Stampar committed
704488a
M
some refactoring on MSSQL support
Miroslav Stampar committed
a6c2fc7
January 9, 2012
M
implemented --tables over information_schema for MSSQL as a failover option for BOOLEAN technique too
Miroslav Stampar committed
fecdce5
January 3, 2012
M
minor update for MSSQL --tables (fallback to other method)
Miroslav Stampar committed
f412706
December 16, 2011
M
minor fix
Miroslav Stampar committed
7d2fce1
M
minor patch for MSSQL 2008
Miroslav Stampar committed
cff2181
December 3, 2011
M
minor update
Miroslav Stampar committed
2adf358
December 2, 2011
M
fix for --search on Oracle
Miroslav Stampar committed
39b406c
October 18, 2011
M
minor update
Miroslav Stampar committed
b6ccc0c
July 12, 2011
M
quick fix
Miroslav Stampar committed
4cb9988
July 8, 2011
M
i've accidentally left table_schema removed while doing some tests. now it should be ok
Miroslav Stampar committed
93219b9
B
Minor bug fix for Microsoft Access case expressions (like --common-tables) in UNION query SQL injection
Bernardo Damele committed
b5dd4d4
M
few fixes and minor cosmetics
Miroslav Stampar committed
c517e97
June 27, 2011
B
Minor improvement at blind SQL inj technique for DB2
Bernardo Damele committed
9eb6835
June 25, 2011
B
Added DB2 support - patch provided by Sebastian Bittig
Bernardo Damele committed
36c96ef
June 24, 2011
B
Enabled --search -C also for Oracle
Bernardo Damele committed
b2e6cf3
June 15, 2011
M
fixes for Sybase
Miroslav Stampar committed
4188df0
May 6, 2011
B
SVN roll back, DB2 patch will be recommitted after testing:
Bernardo Damele committed
aae1400
M
applying contributed patch for DB2
Miroslav Stampar committed
6e392b6
April 30, 2011
B
Minor bug fixes and code restyling for --privileges and --passwords
Bernardo Damele committed
36a9dda
April 15, 2011
M
fix for a bug reported by m4l1c3 (TypeError: not all arguments converted during string formatting)
Miroslav Stampar committed
05a0e1d
April 10, 2011
M
minor update conformant to http://dev.mysql.com/doc/refman/4.1/en/comments.html
Miroslav Stampar committed
75f286c
M
lol. re-revert
Miroslav Stampar committed
3177c60
April 8, 2011
M
implemented support for __pivotDumpTable on MSSQL as normal tables tend to not play well with normal TOP 1 ..NOT IN..ORDER BY mechanism if the argument for ORDER BY is not the unique one (returns only number of rows equal to the number of distinct values for that field)
Miroslav Stampar committed
6fa2fd1
April 1, 2011
M
minor update regarding --current-db on Oracle
Miroslav Stampar committed
e27afef
March 28, 2011
M
bulk commit for safe/unsafe identificator naming (done and tested for all 4 major DBMSes) and one bug fix for --search-column on MSSQL (inside queries)
Miroslav Stampar committed
73e5d20
March 24, 2011
M
minor fix (ORDER BY 1 screws things up in blind mode)
Miroslav Stampar committed
82ab4c8
M
fix related to the bug reported by Alone Shell
Miroslav Stampar committed
06a5c39
March 23, 2011
M
fix for mssql regarding usage of schema names reported by jabra@spl0it.org
Miroslav Stampar committed
b72cdfe
March 21, 2011
M
minor update regarding last commit
Miroslav Stampar committed
4889764
M
proper implementation of --dbs on Oracle (we are using now schema names as a counterpart to dbs in other DBMSes)
Miroslav Stampar committed
5291fe3
March 16, 2011
M
throwing out obsolete ORDER BY 1 from inband queries
Miroslav Stampar committed
0535225