Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5443

#5459

#5475

#5478

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5649

#5658

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5849

#5849

#5852

#5859

#5860

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5883

#5890

#5893

#5910

#5913

#5923

#5923

#5930

#5931

#5932

#5940

#5944

#5945

#5945

#5952

#5953

#5957

#5959

#5963

#5963

#5965

#5967

#5970

#5973

#5973

#5980

#5984

#5985

#5995

#5999

#6000

#6001

#6004

#6004

#6012

#6013

#6015

#6016

#6016

#6018

#6018

#6019

#6021

#6021

#6027

#6028

#6048

#6048

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.10

1.10.2

1.10.3

1.10.4

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.10

1.9.11

1.9.12

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

1.9.8

1.9.9

Mono Color

• 3628887110 los cosmeticados Miroslav Stampar 2011-03-18 14:08:36 +00:00
• 75c0e09f43 little refactoring Miroslav Stampar 2011-03-18 13:46:51 +00:00
• c301b245a9 adding default value for referer in case --referer was not defined and --level>=3 used (so it could be tested with default value) Miroslav Stampar 2011-03-18 13:39:51 +00:00
• b53c9a2599 minor fix and some refactoring Miroslav Stampar 2011-03-18 00:24:02 +00:00
• 3edb30968b Pff.. just layout Bernardo Damele 2011-03-17 12:37:50 +00:00
• 9526f0c4c2 Minor layout adjustments Bernardo Damele 2011-03-17 12:35:40 +00:00
• 03fac62592 Minor code restyle Bernardo Damele 2011-03-17 12:34:29 +00:00
• cbdd9e921e minor cosmetics Miroslav Stampar 2011-03-17 12:23:56 +00:00
• 6607a240cf added logging to redirecthandler Miroslav Stampar 2011-03-17 12:21:27 +00:00
• 9a513198dd minor fix regarding last couple of commits Miroslav Stampar 2011-03-17 11:25:37 +00:00
• 970cde5a8a minor update regarding last commit Miroslav Stampar 2011-03-17 09:23:46 +00:00
• beba69faa9 implementation of request from Santiago (look for error based responses in redirects) Miroslav Stampar 2011-03-17 09:12:28 +00:00
• 847ce863e3 refactoring Miroslav Stampar 2011-03-17 08:54:20 +00:00
• fbd0cfda29 minor update toward the implementation of request from Santiago Miroslav Stampar 2011-03-17 06:39:05 +00:00
• 0535225fe7 throwing out obsolete ORDER BY 1 from inband queries Miroslav Stampar 2011-03-16 14:18:12 +00:00
• f00aff5303 -v 0 shows both error, critical and raw_input messages Bernardo Damele 2011-03-11 22:02:38 +00:00
• d7d47b6257 Minor bug fix (revert) Bernardo Damele 2011-03-11 21:56:45 +00:00
• e64f225e65 minor refactoring Miroslav Stampar 2011-03-11 20:16:34 +00:00
• 2fd3f0d7b2 minor update (added comment) Miroslav Stampar 2011-03-11 20:07:52 +00:00
• 6cc745f789 removal of deprecated piece of code (replaced later with that getCurrentThreadData().disableStdOut) Miroslav Stampar 2011-03-11 20:04:15 +00:00
• 5eae525010 this was bothering me for some time (POST and/or GET payloads needs to be urlencoded throughly) Miroslav Stampar 2011-03-11 19:57:44 +00:00
• d8a76ebe34 Minor bug fix for counting of entries for error-based and partial UNION query SQL injection techs Bernardo Damele 2011-03-11 16:03:19 +00:00
• 3cb0ca4b63 Minor bug fix for --privileges on PgSQL with error-based SQL inj technique Bernardo Damele 2011-03-11 15:24:25 +00:00
• 5af7410cb1 Another bug fix for --privileges on PgSQL with UNION query technique Bernardo Damele 2011-03-11 15:13:09 +00:00
• 74ef1e53c7 Minor bug fixes to --privileges for PostgreSQL query (corner case) Bernardo Damele 2011-03-11 14:54:41 +00:00
• 1879a49506 fix for a bug reported by andreoaz@gmail.com Miroslav Stampar 2011-03-10 20:40:12 +00:00
• eb1cda7065 minor refactoring (more consistent) Miroslav Stampar 2011-03-09 12:06:32 +00:00
• 62e3510387 minor refactoring Miroslav Stampar 2011-03-09 11:37:37 +00:00
• 5c97f9a496 improvement of url encoding technique (implemented failsafe routine for shortening too long GET queries) Miroslav Stampar 2011-03-09 09:36:56 +00:00
• 9b2962ff1c now when we don't urlencode whole URI using : and \ as safe chars is not a good idea Miroslav Stampar 2011-03-09 08:56:29 +00:00
• eedd6a990d removing space after , for our payloads Miroslav Stampar 2011-03-08 14:29:22 +00:00
• 3dc31f6273 removing spaces after , in our queries Miroslav Stampar 2011-03-08 14:07:26 +00:00
• 30619c599b minor update regarding encoding (adding few safe chars for e.g. CHR(50)|...) Miroslav Stampar 2011-03-08 11:53:59 +00:00
• 68c7247ee4 bug fix (pgsql drop function requires input arguments - at cleanup() in plugins/generic/misc.py it's already fixed before) Miroslav Stampar 2011-03-08 10:46:23 +00:00
• 99adbbeaa3 los cosmeticados Miroslav Stampar 2011-03-07 22:04:17 +00:00
• cc0306044c adding SVN revision number support for non SVN client platforms Miroslav Stampar 2011-03-07 21:54:30 +00:00
• 8e7c3b4666 update of THANKS file Miroslav Stampar 2011-03-07 21:29:06 +00:00
• 154d947c62 minor update Miroslav Stampar 2011-03-07 10:15:41 +00:00
• 16b286982d fix for a bug reported by nightman (AttributeError: 'list' object has no attribute 'split') Miroslav Stampar 2011-03-07 09:50:43 +00:00
• 7524a0c0cf Proper error message Bernardo Damele 2011-03-04 11:59:09 +00:00
• 8edc3b3302 further update regarding last commit Miroslav Stampar 2011-03-03 10:39:04 +00:00
• bc50387a17 possible fix for a bug reported by Black Zero (UnicodeDecodeError for --forms) Miroslav Stampar 2011-03-03 09:42:50 +00:00
• 3a1f5744be minor update to make counting variable totally independent of the urllib2's self.retried Miroslav Stampar 2011-03-02 10:42:17 +00:00
• a010386a23 finally a proper fix for that annoying recursive bug Miroslav Stampar 2011-03-02 10:29:38 +00:00
• f27f05308a minor update for masking sensitive data in error report (added aCred too) Miroslav Stampar 2011-03-02 10:09:17 +00:00
• ad2e4002ea minor improvement Miroslav Stampar 2011-03-01 10:38:27 +00:00
• 0f3cc153a3 fix for --technique Miroslav Stampar 2011-03-01 09:54:06 +00:00
• 9856cb71de redo of the last commit with comments added Miroslav Stampar 2011-02-28 18:58:05 +00:00
• ade31b2cb0 removal of obsolete item Miroslav Stampar 2011-02-28 18:49:25 +00:00
• da6a87af43 update Bernardo Damele 2011-02-28 16:59:39 +00:00
• 50ba0fa955 More adjustments Bernardo Damele 2011-02-28 16:14:09 +00:00
• 021fce5601 Should be done with the ChangeLog - ready for 0.9. Minor adjustments to user's manual too. Bernardo Damele 2011-02-28 15:23:05 +00:00
• 2bf212ffa9 minor minor update Miroslav Stampar 2011-02-27 20:43:38 +00:00
• 7036190e8e minor improvement of regular expression Miroslav Stampar 2011-02-27 17:58:01 +00:00
• 21041f8b90 further reflective value handling improvement Miroslav Stampar 2011-02-27 17:43:41 +00:00
• b47d3e1da3 Huge update to user's manual. A lot to be done yet. Bernardo Damele 2011-02-27 12:19:32 +00:00
• 6e8ebd35f4 Hide switch -x (XML output format) as it is incomplete and bugged and won't make it for 0.9 stable Bernardo Damele 2011-02-27 12:17:41 +00:00
• 60605b6e7c Major bug fix to make --first and --last apply only to --dump's entries dump phase (in either of the blind SQL injection techs only) Bernardo Damele 2011-02-27 12:14:13 +00:00
• 88faedc0fe fix for a bug reported by -insane- Miroslav Stampar 2011-02-26 17:48:19 +00:00
• 11996ce12e bug fix for international encoded letters Miroslav Stampar 2011-02-25 22:43:01 +00:00
• 63b8156c00 some update (if header key is non-unicode comformant) Miroslav Stampar 2011-02-25 09:43:04 +00:00
• 2bbbc9a41e few updates Miroslav Stampar 2011-02-25 09:35:24 +00:00
• aa88361ab1 incorporation of method for neutralization of reflective values Miroslav Stampar 2011-02-25 09:22:44 +00:00
• 708ddf5608 added protection mechanism against reflected values Miroslav Stampar 2011-02-24 16:52:46 +00:00
• 38dc82e13e If no Accept header field is present, then it is assumed that the client accepts all media types. Miroslav Stampar 2011-02-22 22:26:22 +00:00
• 13f0d5ce00 minor bug fix Miroslav Stampar 2011-02-22 14:51:42 +00:00
• d05bd75068 adding experimental for --group-concat Miroslav Stampar 2011-02-22 14:35:38 +00:00
• 640ba5d744 minor refactoring Miroslav Stampar 2011-02-22 14:19:39 +00:00
• 12ede1e5de minor JIC (just-in-case) update Miroslav Stampar 2011-02-22 13:18:47 +00:00
• 3f8eadf4fe minor refactoring Miroslav Stampar 2011-02-22 13:00:58 +00:00
• dcad5410fe minor refactoring Miroslav Stampar 2011-02-22 12:54:22 +00:00
• 17c39fe231 fix for that non-HTML stuff Miroslav Stampar 2011-02-22 11:32:55 +00:00
• ff9080de48 MaxDB always precalculates values for both TRUE and FALSE, hence we can't trick him to run any "faulty" command (e.g. 1/0). This payload is fairly ok because in case of FALSE --> something=NULL is always NULL Miroslav Stampar 2011-02-21 20:59:34 +00:00
• 08697e60a9 added some Microsoft Access payloads Miroslav Stampar 2011-02-21 20:04:50 +00:00
• 3e8c204121 Major bug fix to properly prepare UNION technique statement for --os-pwn and --is-dba Bernardo Damele 2011-02-21 16:00:56 +00:00
• 90582ed7dc minor change Miroslav Stampar 2011-02-21 11:35:21 +00:00
• 68a95fd1b1 minor update Miroslav Stampar 2011-02-20 22:45:23 +00:00
• aac817935a further improvement of MaxDB support Miroslav Stampar 2011-02-20 22:41:42 +00:00
• a3ba8b6928 --dump now works on MaxDB too Miroslav Stampar 2011-02-20 22:07:12 +00:00
• 70449eb01b minor bug fix Miroslav Stampar 2011-02-20 21:35:28 +00:00
• 345df5968d minor update Miroslav Stampar 2011-02-20 21:27:38 +00:00
• 0e512d3c09 minor update for MaxDB Miroslav Stampar 2011-02-20 21:17:16 +00:00
• 59e666d16e --is-dba (related) update for Sybase Miroslav Stampar 2011-02-20 17:28:06 +00:00
• 4d52f7fc6e minor fix regarding --dump-table on Sybase for --technique=23 Miroslav Stampar 2011-02-20 16:58:01 +00:00
• 67ec691eb1 more updates regarding Sybase Miroslav Stampar 2011-02-20 16:28:48 +00:00
• cc47737c44 minor update Miroslav Stampar 2011-02-20 16:00:13 +00:00
• 823e4351b5 minor change Miroslav Stampar 2011-02-20 12:34:09 +00:00
• 0c57f2af0f minor fix Miroslav Stampar 2011-02-20 12:20:44 +00:00
• 2f9227bcce Sybase update (--passwords) Miroslav Stampar 2011-02-20 12:07:32 +00:00
• 6e1a08a805 Documentation update Bernardo Damele 2011-02-19 21:08:18 +00:00
• 023a80c31c Section explanation change to reflect recent enhancements Bernardo Damele 2011-02-19 21:06:24 +00:00
• 60b05ff49f Reflect new switch name Bernardo Damele 2011-02-19 21:05:15 +00:00
• 8e60acae5d Added support for --scope also in WebScarab logs (-l) Bernardo Damele 2011-02-19 21:03:55 +00:00
• f30dea74f3 more Sybase updates Miroslav Stampar 2011-02-19 18:36:26 +00:00
• b71bb321dd some more Sybase updates Miroslav Stampar 2011-02-19 18:04:27 +00:00
• cec7694aac some progress regarding SYBASE Miroslav Stampar 2011-02-19 14:56:58 +00:00
• e0efe453ab minor update regarding Sybase support Miroslav Stampar 2011-02-19 14:07:08 +00:00
• de7ca5a27c minor update Miroslav Stampar 2011-02-19 09:40:41 +00:00
• 72fc0a0565 minor refactoring Miroslav Stampar 2011-02-19 09:36:57 +00:00
• 5f4ffc9287 update regarding Sybase dumping Miroslav Stampar 2011-02-19 00:36:47 +00:00