Morph MORPH
SIGN IN SIGN UP
sqlmapproject / sqlmap UNCLAIMED

Automatic SQL injection and database takeover tool

0 0 1 Python

COMMITS

/ lib/request/comparison.py
0.9
February 22, 2011
M
minor JIC (just-in-case) update
Miroslav Stampar committed
12ede1e
February 18, 2011
M
not doing "basic" filtering in default cases because of a bug reported by Kazim
Miroslav Stampar committed
3badf92
February 4, 2011
M
huge bug fix
Miroslav Stampar committed
1af418d
February 3, 2011
M
refactoring
Miroslav Stampar committed
e4933f0
M
minor refactoring (now at the most basic level at least junky <script> and <style> tags are removed for the sake of better blind based detection)
Miroslav Stampar committed
1aecbe6
M
removing obsolete switches (--threshold, --excl-reg, --excl-str)
Miroslav Stampar committed
b56a77e
January 16, 2011
M
slightly faster and thread safer inference
Miroslav Stampar committed
7139187
January 15, 2011
M
code reviewing part 2
Miroslav Stampar committed
1fa8f0c
January 14, 2011
M
refactoring, code clearing and removal of obsolete switch --longest-common
Miroslav Stampar committed
fb9d7cd
December 27, 2010
M
minor update
Miroslav Stampar committed
c042376
December 26, 2010
M
important improvement
Miroslav Stampar committed
569e060
December 24, 2010
M
fix for one of those more complex bugs (comparison was returning None while original page and/or page template were already had already DBMS error inside)
Miroslav Stampar committed
2c23a59
M
minor refactoring/cosmetics
Miroslav Stampar committed
aab14fa
M
fix for a fundamentally bad presumtion (ratio should be > 0.6 in stable pages), especially today when we have stuff like where=2; also, just imagine 500s which could just say something like FALSE, while on ratio level it would be far below 0.6
Miroslav Stampar committed
d5eebb1
December 18, 2010
M
code refactoring and some fixes
Miroslav Stampar committed
fe67d38
December 11, 2010
M
avoiding some trashy match ratios
Miroslav Stampar committed
03447ac
December 7, 2010
M
switching to quick_ratio
Miroslav Stampar committed
bdff4ab
M
ratio() gives a considerable lag on real life cases, as real_quick_ratio() gives almost as good results
Miroslav Stampar committed
c1b82cf
December 4, 2010
M
usage of compiled regexes in case of dynamic markings and other refactoring
Miroslav Stampar committed
eeb1993
M
code refactoring
Miroslav Stampar committed
0fc7a8f
M
now you can use kb.pageTemplate to set a page which will be used as a template in comparison process (at least in '-[RANDNUM] OR' cases we'll need to use different template(s))
Miroslav Stampar committed
0471437
November 17, 2010
B
Proper english (--postfix is now --suffix) and --string/--regexp does not necessarily need to match into the original response body, it might well be in the injected True condition only!
Bernardo Damele committed
17486e4
November 16, 2010
M
update regarding error parsing (and reporting)
Miroslav Stampar committed
6ef3846
November 12, 2010
M
update (--string and --regex should be done regardless of wasLastRequestError)
Miroslav Stampar committed
27735b1
November 9, 2010
M
just a precaution (now i really need to go for a sleep)
Miroslav Stampar committed
19c1bfa
M
another update
Miroslav Stampar committed
88c00e6
M
minor fix (while we've calculated conf.matchRation for stable pages, we've put a constant value (0.900) for dynamic ones - so putting (ratio - conf.matchRatio) > DIFF_TOLERANCE for dynamic pages too would just effectively increase it's value to 0.900 + DIFF_TOLERANCE (in our case to 0.950) which is too narrow space for True result)
Miroslav Stampar committed
47720a4
M
another name change
Miroslav Stampar committed
5ebd5d9
M
name change
Miroslav Stampar committed
06f00cf
M
some fixes :)
Miroslav Stampar committed
fef60d5
B
Possible quick fix for missing of True/False comparison of stable-but-not-really pages
Bernardo Damele committed
1cc99e2
November 7, 2010
M
trust me, i know what i am doing :)
Miroslav Stampar committed
620fa1c
B
Cosmetics
Bernardo Damele committed
4d81da6
M
added powerful switch --longest-common for dealing with heavy dynamicity
Miroslav Stampar committed
00dfd55
M
dynamicity engine update
Miroslav Stampar committed
508b9cc
November 6, 2010
M
minor update
Miroslav Stampar committed
3619fc5
November 5, 2010
M
update of dynamicity testing and few misc fixes
Miroslav Stampar committed
0e895fa
November 4, 2010
M
cosmetics
Miroslav Stampar committed
29b7c53
M
fix for all that stable, dynamic mambo jambo :)
Miroslav Stampar committed
e1cec8c
November 3, 2010
M
several bug fixes
Miroslav Stampar committed
71d0b1b
M
fix for a bug reported by ToR (TypeError: unsupported operand type(s) for *: 'float' and 'NoneType')
Miroslav Stampar committed
44678fa
November 2, 2010
M
some code refactoring and beautification
Miroslav Stampar committed
5269cb8
M
one bug fix in dynamic content engine and some code refactoring
Miroslav Stampar committed
13e93f5
October 25, 2010
M
code refactoring
Miroslav Stampar committed
24c5d7b
M
conf.md5hash thrown out
Miroslav Stampar committed
9c94a23
M
update regarding comparison engine
Miroslav Stampar committed
7154309
M
implementation of a new dynamic content removal engine
Miroslav Stampar committed
8df7c88
October 14, 2010
M
sorry, cosmetics
Miroslav Stampar committed
4f7f20b
M
large commit with copyright header modifications
Miroslav Stampar committed
8b48833
October 12, 2010
M
added --text-only switch
Miroslav Stampar committed
d2ec132