Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5443

#5459

#5475

#5478

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5649

#5658

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5849

#5849

#5852

#5859

#5860

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5883

#5890

#5893

#5910

#5913

#5923

#5923

#5930

#5931

#5932

#5940

#5944

#5945

#5945

#5952

#5953

#5957

#5959

#5963

#5963

#5965

#5967

#5970

#5973

#5973

#5980

#5984

#5985

#5995

#5999

#6000

#6001

#6004

#6004

#6012

#6013

#6015

#6016

#6016

#6018

#6018

#6019

#6021

#6021

#6027

#6028

#6048

#6048

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.10

1.10.2

1.10.3

1.10.4

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.10

1.9.11

1.9.12

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

1.9.8

1.9.9

Mono Color

• 0916117447 improvement of error-based testing (no more sqlmap aborting on error-based payloads which happens very often on MySQL servers); also, minor improvement on brute forcing of column names Miroslav Stampar 2011-03-30 18:32:10 +00:00
• dd01d66f13 proper update regarding last commit Miroslav Stampar 2011-03-29 22:10:08 +00:00
• 850328df6c minor cosmetics Miroslav Stampar 2011-03-29 22:03:48 +00:00
• b6af80bab3 refactoring, cleanup and improvement Miroslav Stampar 2011-03-29 21:54:15 +00:00
• adfbfef8c1 minor refactoring Miroslav Stampar 2011-03-29 21:01:47 +00:00
• 12f3024c8a removing that boring message "reflective value found and filtered out" for headers case (we always include Uri header) Miroslav Stampar 2011-03-29 20:45:21 +00:00
• 9f707febf5 minor update Miroslav Stampar 2011-03-29 15:43:17 +00:00
• d0861a00e2 minor improvement Miroslav Stampar 2011-03-29 15:37:57 +00:00
• d28ca5809b adding support for meta HTML header 'refresh' - popular one amongst login pages (stumbled when tested blind injections on Mutillidae login page) Miroslav Stampar 2011-03-29 14:16:28 +00:00
• 7cf4ba83dc minor refactoring and comment update Miroslav Stampar 2011-03-29 12:08:07 +00:00
• 1821a008af Ctrl+C in dictionary attack phase will now not abort the whole enumeration; also, question for common suffixes will now be asked only once Miroslav Stampar 2011-03-29 12:00:29 +00:00
• 5560196648 minor fix Miroslav Stampar 2011-03-29 11:50:12 +00:00
• e20d460809 Bernardo will kill me (added --wizard for total beginners) Miroslav Stampar 2011-03-29 11:42:55 +00:00
• 4d78eac938 revert of that thingy as requested by Bernardo Miroslav Stampar 2011-03-29 10:06:35 +00:00
• a9f5d828c6 minor fix avoiding problems with hashing strange characters in usernames Miroslav Stampar 2011-03-29 07:50:07 +00:00
• b7813f9e68 incrementing level for MySQL stacked payloads Miroslav Stampar 2011-03-29 07:31:56 +00:00
• e8debbe724 minor cosmetics and one minor fix (|= is a nono with None) Miroslav Stampar 2011-03-29 06:38:19 +00:00
• 86f93713d3 fix for a bug reported by m4l1c3 (object of type 'NoneType' has no len()) and minor update Miroslav Stampar 2011-03-29 06:25:17 +00:00
• a2d5358b08 minor fix Miroslav Stampar 2011-03-28 23:40:46 +00:00
• 9e900ccbac minor comment update Miroslav Stampar 2011-03-28 23:12:04 +00:00
• a61e287d23 making updates for dummy Windows users Miroslav Stampar 2011-03-28 23:09:19 +00:00
• bf0e3c4662 improvement for --forms with empty fields Miroslav Stampar 2011-03-28 22:48:00 +00:00
• 1823c116bb minor update for special cases of union testing results Miroslav Stampar 2011-03-28 21:45:38 +00:00
• ae53ad4c30 making an update for special case of timed out response Miroslav Stampar 2011-03-28 21:05:04 +00:00
• 1e22ff45de minor update regarding testing of GET parameters if --data and/or --forms is used Miroslav Stampar 2011-03-28 16:14:08 +00:00
• 625f124263 little info message Miroslav Stampar 2011-03-28 12:13:17 +00:00
• 4312a42b5d another minor fix Miroslav Stampar 2011-03-28 12:04:39 +00:00
• 3173adbf6b minor update Miroslav Stampar 2011-03-28 12:02:31 +00:00
• 73e5d20ade bulk commit for safe/unsafe identificator naming (done and tested for all 4 major DBMSes) and one bug fix for --search-column on MSSQL (inside queries) Miroslav Stampar 2011-03-28 11:01:55 +00:00
• 19a6f86954 Minor update Bernardo Damele 2011-03-27 16:37:57 +00:00
• 08d052d9b8 minor update of THANKS file Miroslav Stampar 2011-03-27 13:45:19 +00:00
• 47924fb92e fix for a bug reported by malice.anon@gmail.co​m (AttributeError: 'unicode' object has no attribute 'geturl') Miroslav Stampar 2011-03-27 13:41:54 +00:00
• 76b7e3517d minor update Miroslav Stampar 2011-03-27 07:58:15 +00:00
• dba32306b0 minor update Miroslav Stampar 2011-03-26 22:03:46 +00:00
• d2eb4c6a39 update of THANKS file Miroslav Stampar 2011-03-26 21:48:36 +00:00
• d8f7c4bc4c minor update regarding support for crypt(3) Miroslav Stampar 2011-03-26 21:41:37 +00:00
• 4f00b9fa4b minor fix Miroslav Stampar 2011-03-26 21:10:31 +00:00
• afe2be6a9f implementation of Standard DES hashing (crypt) Miroslav Stampar 2011-03-26 20:46:25 +00:00
• 04c4578df7 minor fix Miroslav Stampar 2011-03-26 05:55:49 +00:00
• 58f8703ecd minor update before bedtime Miroslav Stampar 2011-03-25 22:59:18 +00:00
• ae12dee990 minor update Miroslav Stampar 2011-03-25 22:08:54 +00:00
• c9baa0094b going global for protection of non-standard identificator naming Miroslav Stampar 2011-03-25 22:02:28 +00:00
• 5a1f733a43 minor update (_ is part of normal identificator naming) Miroslav Stampar 2011-03-25 21:49:20 +00:00
• 1a98095a93 minor improvement for that MySQL identification naming Miroslav Stampar 2011-03-25 21:46:49 +00:00
• 1119a85f39 it's a must after all - partial union is specific and as there is no output for fetched value, we have to display something to the user. also, there is a bug fix (removed the leftover parseUnionPage) Miroslav Stampar 2011-03-25 21:31:26 +00:00
• 48c4460e2c bug fixed (there was a huge problem with space containing identifiers - fixed and tested for MySQL) Miroslav Stampar 2011-03-25 21:22:06 +00:00
• 6c6133e8aa revert of the last commit (i was doing some testing against a test case with lots of None(s) which drove me to the conclusion that we need that progress - in normal cases it's fine as it is) Miroslav Stampar 2011-03-25 20:46:37 +00:00
• 737b4abf13 this is a must for partial union. there are lots of cases with dumping of huge tables and user doesn't know a squirt if sqlmap is running or not (compromise is that this is only displayed if the verbose level is not touched by the user) Miroslav Stampar 2011-03-25 20:30:15 +00:00
• af39a441fa minor improvement when --dbs returns no database names (like in many cases with MySQL 4) Miroslav Stampar 2011-03-25 19:50:06 +00:00
• 5eb7787fc9 adding partial union cases to the live tests Miroslav Stampar 2011-03-25 15:56:15 +00:00
• 670aa7f99b update for live tests (added dumping of columns and table values) Miroslav Stampar 2011-03-25 15:37:11 +00:00
• 422967fbcd just an minor update related to the last commit Miroslav Stampar 2011-03-25 12:21:53 +00:00
• c5b6d377fb fix for a bug reported by Kirill Morozov (we haven't expected mixed case/copied results in partial union pages) Miroslav Stampar 2011-03-25 12:14:19 +00:00
• af5342c495 fix for partial inband queries on MSSQL Miroslav Stampar 2011-03-25 11:19:15 +00:00
• e80c9e08d8 minor update regarding --live-test Miroslav Stampar 2011-03-25 09:03:08 +00:00
• ea52d7acad minor revisit of inference Miroslav Stampar 2011-03-24 20:10:40 +00:00
• 1f1c4c0e61 better update related to the last commit Miroslav Stampar 2011-03-24 20:04:20 +00:00
• c0cc5d1dad minor update Miroslav Stampar 2011-03-24 17:18:03 +00:00
• f3858a5fcf another fix related to the bug reported by Alone Shell Miroslav Stampar 2011-03-24 17:08:14 +00:00
• 82ab4c8dc2 minor fix (ORDER BY 1 screws things up in blind mode) Miroslav Stampar 2011-03-24 14:19:32 +00:00
• 06a5c39efe fix related to the bug reported by Alone Shell Miroslav Stampar 2011-03-24 14:03:40 +00:00
• cef2c0879d adding live test cases for --technique=1 too Miroslav Stampar 2011-03-24 12:19:40 +00:00
• e42cdfd138 adding possibility to run only one live test (e.g. --run-case=8) Miroslav Stampar 2011-03-24 12:07:47 +00:00
• 33c01726dd adding basic live tests for MSSQL too Miroslav Stampar 2011-03-24 12:01:53 +00:00
• 2b15ad57c2 basic live tests against 3 major DBMSes Miroslav Stampar 2011-03-24 11:47:01 +00:00
• ecbbfeba6e introduction of --fresh-queries Miroslav Stampar 2011-03-24 10:08:47 +00:00
• 762397854e fix for a bug reported by Kirill (unknown charset '8859-1') Miroslav Stampar 2011-03-24 09:27:19 +00:00
• d79fae724c minor refactoring Miroslav Stampar 2011-03-24 09:16:21 +00:00
• 0bb08d09d2 fix for a bug reported by Kirill (value is None in attack table phase) and minor fix for loading request file Miroslav Stampar 2011-03-24 08:43:40 +00:00
• bd75fd26e9 implementing a --page-rank switch as requested by l0rda@l0rda.biz Miroslav Stampar 2011-03-23 11:57:57 +00:00
• 02379c01a2 minor update (will do "schema update" for sybase some other time; that COUNT(*) blew my mind) Miroslav Stampar 2011-03-23 11:42:36 +00:00
• 0f7bce5c66 fixing a huge mess going on because of counting on error and union techniques Miroslav Stampar 2011-03-23 11:36:40 +00:00
• 7ea45e9032 minor update for Sybase regarding last commit Miroslav Stampar 2011-03-23 11:04:15 +00:00
• b72cdfe9e6 fix for mssql regarding usage of schema names reported by jabra@spl0it.org Miroslav Stampar 2011-03-23 10:40:34 +00:00
• 5a1aaecf16 minor fix so concatenated queries could be run in Oracle --sql-shell (e.g. select NAME||chr(58)||OWNER FROM ALL_SOURCE WHERE TYPE='FUNCTION') Miroslav Stampar 2011-03-22 13:07:37 +00:00
• 7613134515 it was a real pain in the ass to have SELECT COUNT(*) for all rows (it was processed by a limit logic) Miroslav Stampar 2011-03-22 12:37:05 +00:00
• 9479a68eb5 minor fix regarding last commit Miroslav Stampar 2011-03-22 12:21:56 +00:00
• c24ed6e622 minor fix related to a bug reported by warninggp@gmail.com Miroslav Stampar 2011-03-22 09:22:48 +00:00
• cbfb10cbd1 fix of a minor bug reported by syssecurity7@googlemail.com (missing iso-8858...) Miroslav Stampar 2011-03-21 16:43:46 +00:00
• 0d3f6edcc4 typo Bernardo Damele 2011-03-21 16:27:13 +00:00
• 7b1021d100 minor update of THANKS file Miroslav Stampar 2011-03-21 13:18:00 +00:00
• b5c9ccb755 Oracle XML based error payload has problems with char $ as with space Miroslav Stampar 2011-03-21 13:13:12 +00:00
• 1abcd507b8 hidding --group-concat switch Miroslav Stampar 2011-03-21 12:13:21 +00:00
• 4889764114 minor update regarding last commit Miroslav Stampar 2011-03-21 11:40:27 +00:00
• 5291fe35c9 proper implementation of --dbs on Oracle (we are using now schema names as a counterpart to dbs in other DBMSes) Miroslav Stampar 2011-03-21 11:29:43 +00:00
• f8a2cf0497 minor THANKS update Miroslav Stampar 2011-03-21 09:53:34 +00:00
• 19e2ed9803 Layout fix Bernardo Damele 2011-03-21 00:40:25 +00:00
• f7c1b7dc5f Updated Bernardo Damele 2011-03-21 00:39:54 +00:00
• 3ca5cddca7 massive BUG FIX (if NULL is one of dumping values it will screw everything in corner cases because "SELECT 1 WHERE NULL IN (NULL)" and "SELECT 1 WHERE NULL NOT IN (NULL)" will always return nothing/nadda/zero/not even NULL) Miroslav Stampar 2011-03-20 23:54:56 +00:00
• 9b1f2d82d0 minor update (that .strip() was a leftover) Miroslav Stampar 2011-03-20 23:20:47 +00:00
• db992a0a86 mssql likes to htmlescape error reports Miroslav Stampar 2011-03-20 23:16:34 +00:00
• 088c815567 minor update (exposing --tor switch) Miroslav Stampar 2011-03-19 18:28:51 +00:00
• 2cc91b8470 minor fix Miroslav Stampar 2011-03-19 17:44:34 +00:00
• 7c2b3afafb minor fix (-r required Content-Length which is a part of Burp log and as we share the parsing logic this was a headache for -r) Miroslav Stampar 2011-03-19 17:37:26 +00:00
• 139448eeb9 little stabilization regarding POST url(de/en)coding Miroslav Stampar 2011-03-19 16:53:14 +00:00
• 0fcd999e51 fix for a bug reported by malice Miroslav Stampar 2011-03-18 16:52:46 +00:00
• 58e9a074d3 masking some more command line arguments Miroslav Stampar 2011-03-18 16:47:18 +00:00
• 36233fac42 update regarding a feature request from andyroyalbattle@yahoo.it Miroslav Stampar 2011-03-18 16:35:30 +00:00
• 00b9d85ffc fix regarding bug report from andyroyalbattle@yahoo.it Miroslav Stampar 2011-03-18 16:26:39 +00:00
• 4e300baaf2 minor cosmetics Miroslav Stampar 2011-03-18 14:09:18 +00:00