Morph MORPH
SIGN IN SIGN UP
sqlmapproject / sqlmap UNCLAIMED

Automatic SQL injection and database takeover tool

0 0 1 Python

COMMITS

/ lib/request/connect.py
0.9
April 8, 2011
M
greater flexibility for --batch when default is None
Miroslav Stampar committed
83feb09
April 4, 2011
M
minor revisit of tampering script(s) functionality (urlencode one is removed as it's currently obsolete regarding the whole process of automatic urlencoding)
Miroslav Stampar committed
e957c44
April 3, 2011
M
important improvement of data handling (POST data and header values)
Miroslav Stampar committed
305115a
March 29, 2011
M
proper update regarding last commit
Miroslav Stampar committed
dd01d66
M
minor cosmetics
Miroslav Stampar committed
850328d
M
minor update
Miroslav Stampar committed
9f707fe
M
adding support for meta HTML header 'refresh' - popular one amongst login pages (stumbled when tested blind injections on Mutillidae login page)
Miroslav Stampar committed
d28ca58
March 28, 2011
M
making an update for special case of timed out response
Miroslav Stampar committed
ae53ad4
March 18, 2011
M
minor fix and some refactoring
Miroslav Stampar committed
b53c9a2
March 17, 2011
B
Minor layout adjustments
Bernardo Damele committed
9526f0c
March 11, 2011
M
minor refactoring
Miroslav Stampar committed
e64f225
M
minor update (added comment)
Miroslav Stampar committed
2fd3f0d
M
this was bothering me for some time (POST and/or GET payloads needs to be urlencoded throughly)
Miroslav Stampar committed
5eae525
March 9, 2011
M
improvement of url encoding technique (implemented failsafe routine for shortening too long GET queries)
Miroslav Stampar committed
5c97f9a
February 28, 2011
M
redo of the last commit with comments added
Miroslav Stampar committed
9856cb7
M
removal of obsolete item
Miroslav Stampar committed
ade31b2
February 27, 2011
M
further reflective value handling improvement
Miroslav Stampar committed
21041f8
February 25, 2011
M
some update (if header key is non-unicode comformant)
Miroslav Stampar committed
63b8156
M
incorporation of method for neutralization of reflective values
Miroslav Stampar committed
aa88361
February 22, 2011
M
minor refactoring
Miroslav Stampar committed
3f8eadf
M
minor refactoring
Miroslav Stampar committed
dcad541
M
fix for that non-HTML stuff
Miroslav Stampar committed
17c39fe
February 19, 2011
B
Reflect new switch name
Bernardo Damele committed
60b05ff
February 11, 2011
M
implementation of referer feature
Miroslav Stampar committed
535eb9f
February 8, 2011
B
Directory restyling
Bernardo Damele committed
156d8cd
February 3, 2011
M
refactoring
Miroslav Stampar committed
e4933f0
February 2, 2011
M
removing urlencode from UA
Miroslav Stampar committed
402c1b6
January 31, 2011
B
Just.. cosmetics ;)
Bernardo Damele committed
6761933
M
minor update
Miroslav Stampar committed
35b6d72
M
now union technique parses headers too
Miroslav Stampar committed
60a2364
January 30, 2011
M
minor refactoring (removed URL_ENCODE_PAYLOAD)
Miroslav Stampar committed
fc9c626
January 27, 2011
M
centralization of urlencoding should be (only) in connect.py and we are from now on handling non-urlencoded data at other levels
Miroslav Stampar committed
8e74c57
M
major bug fix reported by Ahmed Shawky (there was a possibility of double url encoding of parameter values)
Miroslav Stampar committed
81722b6
M
minor refactoring before a huge bug fix reported by Ahmed Shawky (we are falsely urlencoding ORIGINAL part of the injection payload)
Miroslav Stampar committed
03413bd
January 25, 2011
M
minor fixes
Miroslav Stampar committed
430fd5c
M
fix for a bug reported by mhackmail@gmail.com (local variable 'code' referenced before assignment)
Miroslav Stampar committed
cab8687
January 24, 2011
M
added parseTargetUrl to redirect choice
Miroslav Stampar committed
4093599
January 15, 2011
M
code reviewing part 2
Miroslav Stampar committed
1fa8f0c
January 14, 2011
M
refactoring, code clearing and removal of obsolete switch --longest-common
Miroslav Stampar committed
fb9d7cd
January 11, 2011
B
Minor code refactoring and cosmetics
Bernardo Damele committed
06230e4
January 7, 2011
B
Code refactoring and cosmetics
Bernardo Damele committed
1c86ec3
January 4, 2011
M
fix for a bug reported by shaohua pan (UnicodeDecodeError: 'ascii' codec can't decode...)
Miroslav Stampar committed
709a7d1
M
minor update
Miroslav Stampar committed
d288c6d
January 3, 2011
M
important fix for a bug reported by x <deep_freeze@mail.ru> (along with normal fixes, getUnicode now uses kb.pageEncoding)
Miroslav Stampar committed
08ccbf2
M
bug fix for time based injections with keepalive (keepalive module has timeout argument which screwed tbMsg); also, bug fix for cases when remote hosts forcefully disconnects the user on some tests (instead of retrying and critically going out, continue with further tests)
Miroslav Stampar committed
0712937
January 2, 2011
M
added support for displaying HTTP error codes (particularly interesting ones are 403 and 406 which screw up data retrieval and DBMS fingerprinting badly)
Miroslav Stampar committed
da138c4
January 1, 2011
M
there is a huge problem with urllib2 connections that sockets are left opened causing problems with lots of disposable connections used (like in --threads) (http://mail.python.org/pipermail/python-bugs-list/2007-January/036873.html, http://mail.python.org/pipermail/python-bugs-list/2007-January/036873.html)
Miroslav Stampar committed
ef27fd5
December 28, 2010
M
"patch" for a problem reported by black zero (v = self._sslobj.write(data)...UnicodeError)
Miroslav Stampar committed
93838fb
December 26, 2010
M
noticed little DoS behavior and lots of connections in netstat (best way to deal with zombie connections is to explicitly close them if not needed any more)
Miroslav Stampar committed
f237312
M
important improvement
Miroslav Stampar committed
569e060