Morph MORPH
SIGN IN SIGN UP
sqlmapproject / sqlmap UNCLAIMED

Automatic SQL injection and database takeover tool

0 0 1 Python

COMMITS

/ lib/request/inject.py
0.9
April 10, 2011
M
minor refactoring
Miroslav Stampar committed
723a744
April 9, 2011
M
added support for handling binary data values (no more garbish chars)
Miroslav Stampar committed
c714ac6
April 8, 2011
M
fix for those ugly DEBUG messages in brute mode
Miroslav Stampar committed
228cc68
B
cosmeticados ;)
Bernardo Damele committed
5b21352
February 27, 2011
B
Major bug fix to make --first and --last apply only to --dump's entries dump phase (in either of the blind SQL injection techs only)
Bernardo Damele committed
60605b6
February 20, 2011
M
minor fix
Miroslav Stampar committed
0c57f2a
February 13, 2011
B
Minor refactoring
Bernardo Damele committed
429ab63
February 12, 2011
M
one more update
Miroslav Stampar committed
1cd483f
M
we need this because of one pesky little bug going around (when union is recognized and the dbmses are fingerprinted, for those who don't have proper unescaping false TRUE is recognized in form of retrieved: %27%2B%28SELECT%20CAST...). tested on all major DBMSes.
Miroslav Stampar committed
25a3a64
February 10, 2011
B
Fixed store and resume of brute-forced tables/columns for MSSQL/Sybase
Bernardo Damele committed
864eade
February 9, 2011
M
imporant fix for boolean expression which return [None]
Miroslav Stampar committed
d9af01d
February 7, 2011
M
minor adjustment
Miroslav Stampar committed
71d1b72
February 6, 2011
B
Major bug fix for semi-centralize unescape() and cleanupPayload() into prefixQuery() and suffixQuery()
Bernardo Damele committed
0800d9e
February 1, 2011
B
Refactoring
Bernardo Damele committed
a37f5e0
B
Bug fixes and proper packing/unpacking of custom statements and predefined queries for both error-based and UNION query techniques.
Bernardo Damele committed
9b342a4
January 31, 2011
B
Minor adjustments
Bernardo Damele committed
2fd9621
January 28, 2011
M
refactoring (class names should always be Capital cased)
Miroslav Stampar committed
367d063
January 19, 2011
B
Major code refactoring - centralized all kb.dbms* info for both retrieval and set.
Bernardo Damele committed
bade0e3
January 18, 2011
B
Major bug fix to properly process custom queries (--sql-query/--sql-shell) when technique in use is error-based.
Bernardo Damele committed
daebb00
January 17, 2011
B
Major bug fix to properly deal with EXISTS() when forging query or retrieving the query columns.
Bernardo Damele committed
3822b49
January 16, 2011
M
update regarding time based data retrieval
Miroslav Stampar committed
30d6791
January 15, 2011
B
Minor refactoring
Bernardo Damele committed
6e4b65a
January 13, 2011
B
Major code refactoring - moved to one location only (getIdentifiedDBMS() in common.py) the retrieval of identified/fingerprinted DBMS.
Bernardo Damele committed
2ac8deb
January 12, 2011
B
Properly deal with partial (single entry) UNION injections.
Bernardo Damele committed
af97252
January 11, 2011
B
First big commit to move UNION query tests to detection phase - there are some improvements and tuning to do yet though.
Bernardo Damele committed
3001280
January 7, 2011
M
some fixes
Miroslav Stampar committed
b313a20
December 31, 2010
M
minor bug fix
Miroslav Stampar committed
281d124
December 27, 2010
M
resume of brute forced data is now available
Miroslav Stampar committed
9fb0e0f
December 26, 2010
M
minor fix
Miroslav Stampar committed
cd337d9
December 23, 2010
M
bug fix for boolean proxy when using time based payloads
Miroslav Stampar committed
8470de7
December 22, 2010
M
update regarding Sybase syntax
Miroslav Stampar committed
5be9c04
December 21, 2010
M
cosmetics
Miroslav Stampar committed
7a525f2
M
minor tuning (2 techniques MAX per value used)
Miroslav Stampar committed
b2e7f94
M
code refactoring regarding standard output suppression and some threading issues
Miroslav Stampar committed
385e208
December 20, 2010
M
some refactoring
Miroslav Stampar committed
5852bad
December 18, 2010
M
code refactoring and some fixes
Miroslav Stampar committed
fe67d38
December 17, 2010
M
added one more level of MSSQL version check (if first fails for some reason)
Miroslav Stampar committed
b4450c6
December 15, 2010
M
minor fix
Miroslav Stampar committed
95b2c08
M
code refactoring
Miroslav Stampar committed
cda00c7
M
minor cosmetics
Miroslav Stampar committed
3f34b06
M
minor cosmetics
Miroslav Stampar committed
445cc3b
M
quick fix of a fix
Miroslav Stampar committed
c1c525a
December 14, 2010
M
just in case as maybe there will be some boolean expression to check where we won't expect None, but explicitly True/False
Miroslav Stampar committed
270ae0f
December 13, 2010
B
Minor enhancement to speedup active dbms fingerprint (-f).
Bernardo Damele committed
a02dd6b
December 12, 2010
M
minor update (removing extra ())
Miroslav Stampar committed
6a3c448
December 11, 2010
M
update regarding expectingNone in fingerprinting mode to cancel drop down to other techniques available
Miroslav Stampar committed
e6c66fa
M
further update regarding bugtrace's report
Miroslav Stampar committed
e32fa9d
M
quick fix for a bug reported by bugtrace (not using __goBooleanProxy because we don't have a proper vector this moment)
Miroslav Stampar committed
5d18c98
M
major bug fix with boolean expressions
Miroslav Stampar committed
3dc0a51
M
update
Miroslav Stampar committed
ac9080c