Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5459

#5475

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5649

#5658

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5849

#5849

#5852

#5859

#5860

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5883

#5890

#5893

#5910

#5913

#5923

#5930

#5931

#5932

#5940

#5944

#5945

#5952

#5953

#5957

#5959

#5963

#5965

#5967

#5970

#5973

#5980

#5984

#5985

#5995

#5999

#6000

#6001

#6004

#6012

#6013

#6015

#6016

#6018

#6018

#6019

#6021

#6027

#6028

#6048

#6055

#6056

#6060

#6062

#6063

#6064

#6065

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.10

1.10.2

1.10.3

1.10.4

1.10.5

1.10.6

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.10

1.9.11

1.9.12

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

1.9.8

1.9.9

Mono Color

• 493b9adf8e speed up of resume values (compiled regexes used) Miroslav Stampar 2011-04-22 19:27:41 +00:00
• 7b3b9e6a87 it seems that this was indeed not meant to be here Miroslav Stampar 2011-04-22 15:07:09 +00:00
• 304500a2e8 implemented checkFalsePositives method (simple Turing like tests) Miroslav Stampar 2011-04-22 12:24:16 +00:00
• 7df954dd9f paranoy Bernardo Damele 2011-04-21 23:41:25 +00:00
• 0764c4c752 parenthesis were missing; banning OR NOT from payloads Miroslav Stampar 2011-04-21 23:32:53 +00:00
• 41924a6ead fix for a bug reported by saccurso@skygear.com​.ar (UnicodeDecodeError: 'ascii' codec can't decode byte 0xe9 in position 0: ordinal not in range(128)) Miroslav Stampar 2011-04-21 23:17:16 +00:00
• 1d61611145 leftover Bernardo Damele 2011-04-21 22:46:43 +00:00
• f3088079c0 error message adjustment Bernardo Damele 2011-04-21 22:31:02 +00:00
• eabb5a2ba7 More adjustments to the error message when no sql injections are detected Bernardo Damele 2011-04-21 22:04:20 +00:00
• 6d07dddf60 updated doc and minor layout adjustments Bernardo Damele 2011-04-21 21:53:35 +00:00
• 06a00fe85e For development version, print also the revision number in the banner Bernardo Damele 2011-04-21 21:34:57 +00:00
• 770b1523ff More verbose output when no SQL injections are detected Bernardo Damele 2011-04-21 21:31:16 +00:00
• edc2d75702 Cosmetics and major bug fix Bernardo Damele 2011-04-21 21:15:23 +00:00
• 870f773d70 In some old versions of MySQL (perhaps others DBMS too) the NOT clause is not supported, hence we need also OR tests without NOT - tested and works like this Bernardo Damele 2011-04-21 20:36:50 +00:00
• d2f102f5a1 cosmetics Bernardo Damele 2011-04-21 20:21:37 +00:00
• 148fb26301 quick fix Miroslav Stampar 2011-04-21 17:34:26 +00:00
• e181d5412e fix for a bug reported by aboynes@gmail.com (@@datadir not available on MySQL 4) Miroslav Stampar 2011-04-21 17:33:07 +00:00
• bd4fbb3251 fix for a bug reported by l0rda@l0rda.biz (TypeError: cannot concatenate 'str' and 'NoneType' objects) Miroslav Stampar 2011-04-21 14:53:02 +00:00
• b667c50588 store/resume info on xp_cmd available in session file Bernardo Damele 2011-04-21 14:25:04 +00:00
• 930872cf3b fix Miroslav Stampar 2011-04-21 14:20:09 +00:00
• a313df4d37 Allow user to force temporary folder with --tmp-path even if it has been saved one in the session file Bernardo Damele 2011-04-21 14:05:37 +00:00
• fbe5ba5394 cosmetics Bernardo Damele 2011-04-21 10:54:12 +00:00
• e1a8d268d8 fix for UPX linux/macos Miroslav Stampar 2011-04-21 10:52:34 +00:00
• 8d8fc2bbd8 cosmetics Bernardo Damele 2011-04-21 10:17:41 +00:00
• 11ecd16099 cosmetics Bernardo Damele 2011-04-21 10:08:38 +00:00
• 9ccf720c05 removing funny remark Miroslav Stampar 2011-04-21 10:06:13 +00:00
• a91e6a8440 layout Bernardo Damele 2011-04-21 10:03:18 +00:00
• cbfe743bad added a comment Miroslav Stampar 2011-04-21 10:01:58 +00:00
• c84c4d835f minor update Miroslav Stampar 2011-04-21 09:31:35 +00:00
• 8e2e06a7a3 layout adjustment Bernardo Damele 2011-04-21 09:25:42 +00:00
• 5052013ffa minor update Miroslav Stampar 2011-04-20 14:48:23 +00:00
• f909ecb369 bug fix for mssqlserver escape Miroslav Stampar 2011-04-20 13:41:01 +00:00
• e4d3190f41 reverting back to NVARCHAR because of error technique Miroslav Stampar 2011-04-20 12:59:23 +00:00
• 3607f03a9e fix of a minor typo Miroslav Stampar 2011-04-20 12:42:35 +00:00
• 1286cc0913 now showing trimmed output in for of warning message (UNION and ERROR techniques affected) Miroslav Stampar 2011-04-20 12:41:58 +00:00
• 7993f3f12d way better for storing bulk of data (like BLOB on mysql) Miroslav Stampar 2011-04-20 11:44:52 +00:00
• 04653684cd revert Miroslav Stampar 2011-04-20 10:34:34 +00:00
• 4fadcf0615 improvement for UNION/ERROR case Miroslav Stampar 2011-04-20 10:17:42 +00:00
• 1c1c20fb64 minor update Miroslav Stampar 2011-04-20 09:34:00 +00:00
• 4b6c524d4c one more minor update regarding last commit Miroslav Stampar 2011-04-20 09:26:03 +00:00
• 44926757da minor update Miroslav Stampar 2011-04-20 09:23:08 +00:00
• 52c98afe93 minor fix Miroslav Stampar 2011-04-20 08:38:46 +00:00
• 24435a2c20 implemented "break a tie" request by Andres Riancho Miroslav Stampar 2011-04-20 08:35:47 +00:00
• df0331fe9b some more refactoring Miroslav Stampar 2011-04-19 23:04:10 +00:00
• 3b133303bf refactoring Miroslav Stampar 2011-04-19 22:54:13 +00:00
• de2479b864 dealing with http://bugs.python.org/issue1602 Miroslav Stampar 2011-04-19 22:33:03 +00:00
• 9a9838f1e6 cleaning a mess with UPX and virus scanners Miroslav Stampar 2011-04-19 21:57:04 +00:00
• 44bbef42f8 minor cosmetics Miroslav Stampar 2011-04-19 20:23:08 +00:00
• b7efa255d6 minor update of usage string Miroslav Stampar 2011-04-19 20:14:56 +00:00
• fc90974940 revert of last commit because of the situation in detection phase where payload is made at the starting point (can't change conf.timeSec in that phase) Miroslav Stampar 2011-04-19 14:50:09 +00:00
• 7abbd0c029 removing a leftover Miroslav Stampar 2011-04-19 14:29:51 +00:00
• 96b5fede5a automatic increasing of time delay on lagging connections Miroslav Stampar 2011-04-19 14:28:51 +00:00
• 13f8c001a7 minor update Miroslav Stampar 2011-04-19 11:13:53 +00:00
• 7a06af9a92 added "lagging" critical message Miroslav Stampar 2011-04-19 10:37:20 +00:00
• 959204cff9 minor cosmetics Miroslav Stampar 2011-04-19 09:55:35 +00:00
• 597f4dc445 adding procs directory for storing SQL procedure declarations Miroslav Stampar 2011-04-19 09:54:34 +00:00
• 9b0db33cc5 initial page request can result in unwanted lag (e.g. slow DNS response,...), hence it's response time shouldn't be a part of response time statistical model Miroslav Stampar 2011-04-19 08:55:38 +00:00
• a7c26366b4 doing that auto default value for --time-sec only for --tor Miroslav Stampar 2011-04-19 08:43:29 +00:00
• 4d48ac54dc automatically increasing default --time-sec value when --tor/--proxy used (not touching anything if explicit --time-sec set) Miroslav Stampar 2011-04-19 08:34:21 +00:00
• b79d4f70f3 cleaner solution for the problem solved with last commit Miroslav Stampar 2011-04-18 14:51:48 +00:00
• f5cff067c6 little hack for --time-sec Miroslav Stampar 2011-04-18 14:46:18 +00:00
• 6463cad8c5 minor update for SOAP payloads Miroslav Stampar 2011-04-18 14:29:52 +00:00
• c6a0209649 update of THANKS file Miroslav Stampar 2011-04-18 14:01:45 +00:00
• da9ec67869 removing leftover Miroslav Stampar 2011-04-18 13:43:22 +00:00
• 354a2ce249 'chardet' heuristic engine added to the project Miroslav Stampar 2011-04-18 13:38:46 +00:00
• b5aef9bcf9 fix for a bug reported by nightman (TypeError: unsupported operand type(s) for +: 'NoneType' and 'str') Miroslav Stampar 2011-04-18 10:16:38 +00:00
• 6fab44d635 minor refactoring and improving of used regex Miroslav Stampar 2011-04-17 22:37:00 +00:00
• 76d1f09b0a minor cosmetics Miroslav Stampar 2011-04-17 22:25:25 +00:00
• 9aae447553 minor update for matching SOAP messages Miroslav Stampar 2011-04-17 22:21:32 +00:00
• 4fa00121e4 that CONSTANT_RATIO was a pure black magic for dynamic pages. now we have better injection detection workflow than before (False, True, False) and it was just a matter of time for removing this one Miroslav Stampar 2011-04-17 21:58:34 +00:00
• a7366bf710 SOAP refactoring Miroslav Stampar 2011-04-17 21:39:00 +00:00
• c7ff5dcbeb minor update Miroslav Stampar 2011-04-17 08:48:13 +00:00
• ee88ccf0ac well, this could be important :) Miroslav Stampar 2011-04-17 08:33:46 +00:00
• ad53e3f551 update of doc/THANKS Miroslav Stampar 2011-04-17 07:39:49 +00:00
• 29ee760021 improving time based data retrieval mechanism Miroslav Stampar 2011-04-17 07:24:18 +00:00
• 5e70eac98c fix for a "popular" typo 'iso-5889-1' reported by David Guimaraes Miroslav Stampar 2011-04-16 06:44:29 +00:00
• 88c76147e1 removed few trailing whitespace lines Miroslav Stampar 2011-04-15 20:52:08 +00:00
• 877d5c1e7f update of few propsets Miroslav Stampar 2011-04-15 20:43:09 +00:00
• 79d5804519 added propset Bernardo Damele 2011-04-15 16:28:48 +00:00
• 48f916d5a4 Fixed a minor bug Bernardo Damele 2011-04-15 16:25:42 +00:00
• c16b74ce1a covering __pivotDumpTable for keyboard and connection exceptions too Miroslav Stampar 2011-04-15 14:21:13 +00:00
• 3b6f9945ae minor fix regarding report from nightman@email.de (...from time to time sqlmap lost the connection...) Miroslav Stampar 2011-04-15 14:15:29 +00:00
• c461fdca54 some refactoring Miroslav Stampar 2011-04-15 13:51:06 +00:00
• bf6ea35145 adding new tool safe2bin for decoding safe encoded values Miroslav Stampar 2011-04-15 13:41:50 +00:00
• a883316e22 i was on some heavy drugs (sys.stdout = fpOut) Miroslav Stampar 2011-04-15 12:58:56 +00:00
• 0387654166 update of copyright string (until year) Miroslav Stampar 2011-04-15 12:33:18 +00:00
• 4d8a49a87c more standard way to display hex encoded char (\xff instead of \ff) also compatible with python representation Miroslav Stampar 2011-04-15 11:53:20 +00:00
• 05a0e1d3b0 fix for a bug reported by m4l1c3 (TypeError: not all arguments converted during string formatting) Miroslav Stampar 2011-04-15 11:34:14 +00:00
• 467d1a50b3 removed debug message that could cause confusion Miroslav Stampar 2011-04-15 11:28:01 +00:00
• 8c6f7c7d5f explicit usage of --time-sec will implicitly turn off auto-adjustment of time delay Miroslav Stampar 2011-04-15 08:52:53 +00:00
• aed994192e disabling safecharencode for --banner Miroslav Stampar 2011-04-15 08:15:21 +00:00
• 3efd9e3959 improved htmlunescape (great for localized html escape codes) Miroslav Stampar 2011-04-14 21:36:13 +00:00
• 8ddac7fe5a minor fix and speedup when pivoting empty table Miroslav Stampar 2011-04-14 21:11:20 +00:00
• 384ca98ded don't let sqlmapNoneDataException for one table to break whole dumpAll() Miroslav Stampar 2011-04-14 20:56:12 +00:00
• dbbaefa79d minor update (pivot value should be safechardecoded) Miroslav Stampar 2011-04-14 20:38:03 +00:00
• ded28442fb minor fixes and refactoring regarding safecharencoding Miroslav Stampar 2011-04-14 15:54:00 +00:00
• 866cdb4cf7 speed of --replicate is now vastly improved Miroslav Stampar 2011-04-14 14:34:12 +00:00
• 96da7ba4eb just in case for Deprecated modules Miroslav Stampar 2011-04-14 14:01:47 +00:00
• eafab03d99 safe decoding values going into --replicate (as we should have a "replicate" and sqlite3 supports all chars) Miroslav Stampar 2011-04-14 13:53:56 +00:00
• 30bfefd638 minor fix Miroslav Stampar 2011-04-14 12:58:03 +00:00