Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5443

#5459

#5475

#5478

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5649

#5658

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5849

#5849

#5852

#5859

#5860

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5883

#5890

#5893

#5910

#5913

#5923

#5923

#5930

#5931

#5932

#5940

#5944

#5945

#5945

#5952

#5953

#5957

#5959

#5963

#5963

#5965

#5967

#5970

#5973

#5973

#5980

#5984

#5985

#5995

#5999

#6000

#6001

#6004

#6004

#6012

#6013

#6015

#6016

#6016

#6018

#6018

#6019

#6021

#6021

#6027

#6028

#6048

#6048

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.10

1.10.2

1.10.3

1.10.4

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.10

1.9.11

1.9.12

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

1.9.8

1.9.9

Mono Color

• 03220d34ba added Ctrl+C check in detection phase Miroslav Stampar 2010-12-18 10:42:09 +00:00
• e355f92f22 bug fix Miroslav Stampar 2010-12-18 10:02:01 +00:00
• fe67d3827c code refactoring and some fixes Miroslav Stampar 2010-12-18 09:51:34 +00:00
• a067e805fa minor update Miroslav Stampar 2010-12-17 22:23:01 +00:00
• 108a96c6b4 some fixes Miroslav Stampar 2010-12-17 21:45:20 +00:00
• a19cb2c13a code refactoring (added UNKNOWN_DBMS_VERSION instead of "Unknown") Miroslav Stampar 2010-12-17 21:29:09 +00:00
• b4450c6ddd added one more level of MSSQL version check (if first fails for some reason) Miroslav Stampar 2010-12-17 21:01:14 +00:00
• 07609bfb53 minor fix Miroslav Stampar 2010-12-17 19:33:20 +00:00
• bfdc4fa000 new error vector for MS SQL (from David Guimaraes' mail) Miroslav Stampar 2010-12-17 19:00:20 +00:00
• 323af45ce4 added one more time request payload to confirm test results Miroslav Stampar 2010-12-17 07:53:58 +00:00
• e3fa3b0e8e fix for a minor bug reported by nightman (AttributeError: 'NoneType' object has no attribute 'getFingerprint') Miroslav Stampar 2010-12-17 07:48:32 +00:00
• 95b2c0803b minor fix Miroslav Stampar 2010-12-15 20:51:29 +00:00
• de54219571 code refactoring Miroslav Stampar 2010-12-15 12:50:56 +00:00
• cda00c7501 code refactoring Miroslav Stampar 2010-12-15 12:43:56 +00:00
• 3f34b06a24 minor cosmetics Miroslav Stampar 2010-12-15 12:34:14 +00:00
• 445cc3bf3c minor cosmetics Miroslav Stampar 2010-12-15 12:15:43 +00:00
• c1c525aaea quick fix of a fix Miroslav Stampar 2010-12-15 12:10:33 +00:00
• 7cfeb5447b minor update Miroslav Stampar 2010-12-15 11:46:28 +00:00
• 4dec24d056 quick fix for a bug reported by Andreas Constantinides (KeyError: 5) Miroslav Stampar 2010-12-15 11:30:29 +00:00
• f8a01ddaf8 minor update Miroslav Stampar 2010-12-15 11:21:47 +00:00
• 63f5c35c23 bug fix Miroslav Stampar 2010-12-15 10:02:58 +00:00
• 3ee44584d4 i've found a way! thank you hesus! fyea (ASC(MID) was just crashing when MID returned 'empty string') Miroslav Stampar 2010-12-14 12:57:59 +00:00
• c3d0295d21 minor update (checking for --time-sec value) Miroslav Stampar 2010-12-14 12:37:21 +00:00
• b75d7fa348 minor cache based optimization Miroslav Stampar 2010-12-14 12:22:17 +00:00
• 270ae0f080 just in case as maybe there will be some boolean expression to check where we won't expect None, but explicitly True/False Miroslav Stampar 2010-12-14 09:05:00 +00:00
• 4c6e902471 removed obsolete comment Miroslav Stampar 2010-12-14 07:49:30 +00:00
• 04caef6de0 Tuning Bernardo Damele 2010-12-13 23:04:26 +00:00
• cfcee6439e Cosmetics Bernardo Damele 2010-12-13 21:55:30 +00:00
• 86690682c7 Minor bug fix to respect -v value in --common-tables and --common-columns Bernardo Damele 2010-12-13 21:37:12 +00:00
• 4b79227b5a Minor bug fix to properly merge options from .conf file (-c) with command line switches Bernardo Damele 2010-12-13 21:36:23 +00:00
• db844c1785 No point in showing the error-based inject payload, it's same as the one showed in -v3 Bernardo Damele 2010-12-13 21:35:20 +00:00
• 698f30e65e Cosmetics Bernardo Damele 2010-12-13 21:34:35 +00:00
• a02dd6b55b Minor enhancement to speedup active dbms fingerprint (-f). Code cleanup and refactoring. Bernardo Damele 2010-12-13 21:33:42 +00:00
• 207f63cebc Prepare for UNION query tests at detection phase Bernardo Damele 2010-12-13 21:31:34 +00:00
• d56f47d530 fix for a bug reported by black zero (ValueError: invalid literal for int() with base 10: '1-20') Miroslav Stampar 2010-12-12 23:59:55 +00:00
• 33639578ee minor update for MS Access Miroslav Stampar 2010-12-12 15:25:19 +00:00
• 6a3c4485e6 minor update (removing extra ()) Miroslav Stampar 2010-12-12 14:44:39 +00:00
• e98d9c08e1 dumping table is now possible on Firebird too Miroslav Stampar 2010-12-12 14:38:07 +00:00
• f9bc6fc78f minor fix Miroslav Stampar 2010-12-11 22:14:35 +00:00
• c93634b6c7 blind dumping of tables in sqlite implemented Miroslav Stampar 2010-12-11 22:13:19 +00:00
• b1babeefe5 update regarding dumping of tables with blind on Sqlite Miroslav Stampar 2010-12-11 22:00:16 +00:00
• f7344a5fc3 update Miroslav Stampar 2010-12-11 21:28:11 +00:00
• 6a24048aa6 urllib2 doesn't play well with '\n' when non unescaped chars used Miroslav Stampar 2010-12-11 21:17:54 +00:00
• e6c66fa37c update regarding expectingNone in fingerprinting mode to cancel drop down to other techniques available Miroslav Stampar 2010-12-11 17:55:28 +00:00
• e32fa9df43 further update regarding bugtrace's report Miroslav Stampar 2010-12-11 17:32:15 +00:00
• 5d18c98ec2 quick fix for a bug reported by bugtrace (not using __goBooleanProxy because we don't have a proper vector this moment) Miroslav Stampar 2010-12-11 17:20:39 +00:00
• 03447acc1d avoiding some trashy match ratios Miroslav Stampar 2010-12-11 17:12:19 +00:00
• d2a3e8f44f first time firebird error-based query success Miroslav Stampar 2010-12-11 11:17:24 +00:00
• acc7d6d40c fix Miroslav Stampar 2010-12-11 11:03:32 +00:00
• f021548bd0 added inference failsafe (like in for instance Firebirds SUBSTR always returns a string value, no matter which starting index you use) Miroslav Stampar 2010-12-11 10:52:04 +00:00
• c17f444aab minor fix Miroslav Stampar 2010-12-11 10:22:18 +00:00
• 1beb1dd2cc minor update Miroslav Stampar 2010-12-11 09:30:38 +00:00
• 3dc0a51d34 major bug fix with boolean expressions Miroslav Stampar 2010-12-11 08:46:19 +00:00
• ac9080c07b update Miroslav Stampar 2010-12-11 08:24:29 +00:00
• 66db80804d fix Miroslav Stampar 2010-12-10 16:03:32 +00:00
• 435f48b8cc polite cosmetics Miroslav Stampar 2010-12-10 15:28:56 +00:00
• 977988c0ab cosmetics Miroslav Stampar 2010-12-10 15:24:25 +00:00
• fa8d378e80 another update Miroslav Stampar 2010-12-10 15:18:15 +00:00
• 1ef44cfe60 fix Miroslav Stampar 2010-12-10 15:06:53 +00:00
• fe186cde55 proper fix Miroslav Stampar 2010-12-10 13:26:31 +00:00
• 9957881040 you won't believe commit Miroslav Stampar 2010-12-10 13:20:59 +00:00
• 7c87ad4065 Minor speedup in -f mysql Bernardo Damele 2010-12-10 13:05:46 +00:00
• b02bd55edc minor refactoring Miroslav Stampar 2010-12-10 13:04:36 +00:00
• 1fc9ed10a8 minor refactoring Miroslav Stampar 2010-12-10 12:30:36 +00:00
• 4d8628e8fb fix for booleans Miroslav Stampar 2010-12-10 12:26:01 +00:00
• fe2039f5ba coollyy little commits Miroslav Stampar 2010-12-10 11:32:46 +00:00
• d71e51e765 Minor improvement Bernardo Damele 2010-12-10 11:31:27 +00:00
• 4741874e9e Enhancement to speedup MySQL fingerprint Bernardo Damele 2010-12-10 11:27:36 +00:00
• e98b81fe32 another update Miroslav Stampar 2010-12-10 10:56:55 +00:00
• d5e7a8d305 update Miroslav Stampar 2010-12-10 10:54:17 +00:00
• b6dcbcef5b Minor fix Bernardo Damele 2010-12-10 10:52:55 +00:00
• 471d9ccd65 another fix of my lala Miroslav Stampar 2010-12-10 10:11:25 +00:00
• 029a6abba2 quick fix Miroslav Stampar 2010-12-10 09:54:25 +00:00
• 441fc8dbd9 update regarding boolean based expressions Miroslav Stampar 2010-12-09 21:15:18 +00:00
• d5fb921154 removed debug print Miroslav Stampar 2010-12-09 20:08:59 +00:00
• 1492823de0 it wasn't pretty, now it's pretty Miroslav Stampar 2010-12-09 20:06:20 +00:00
• bbffea2cbc bug fix Miroslav Stampar 2010-12-09 17:10:22 +00:00
• 0eb2c408a9 code refactoring Miroslav Stampar 2010-12-09 16:49:02 +00:00
• 7e2984b4b6 added stacked query support for Oracle Miroslav Stampar 2010-12-09 15:24:48 +00:00
• 4bb40c0a06 Higher the level for Oracle stacked tests just in case the SQL inj is within a PL/SQL function ('cause of no support for stacked queries by design on Oracle) Bernardo Damele 2010-12-09 15:14:18 +00:00
• d8edc5b244 adding stacked-query vector for Firebird Miroslav Stampar 2010-12-09 15:11:21 +00:00
• 13b522efc2 Added error-based support for MySQL < 5.0 - closes #14 Bernardo Damele 2010-12-09 15:09:03 +00:00
• 5aafd19957 added vector for SQLite's stacked query payload Miroslav Stampar 2010-12-09 15:06:40 +00:00
• df5f6bc1b7 Little precaution Bernardo Damele 2010-12-09 14:06:43 +00:00
• 9230877d98 cosmetics Bernardo Damele 2010-12-09 13:57:38 +00:00
• 5114c887ea minor minor update Miroslav Stampar 2010-12-09 13:51:44 +00:00
• 5fb04515d3 Added hidden (for the moment) switch --technique Bernardo Damele 2010-12-09 13:47:17 +00:00
• b80a86a669 that's it for common stuff today Miroslav Stampar 2010-12-09 12:59:22 +00:00
• b26e09fc71 another minor update Miroslav Stampar 2010-12-09 12:49:29 +00:00
• f712d2477e removed duplicate entries inside common wordlists (tables & columns) and added a script which does that automatically Miroslav Stampar 2010-12-09 12:41:16 +00:00
• c5b1f336ee another update Miroslav Stampar 2010-12-09 12:07:06 +00:00
• 06395b5408 update Miroslav Stampar 2010-12-09 12:03:10 +00:00
• cdff29ada7 update Miroslav Stampar 2010-12-09 11:23:44 +00:00
• 196131bbca minor cosmetics Miroslav Stampar 2010-12-09 10:42:00 +00:00
• 71761ba9a5 another fix for another beautiful heavy query payload which took a few 100 megs and 5 mins to run Miroslav Stampar 2010-12-09 10:35:18 +00:00
• 094baadc5b bug fix (in SELECT based heavy queries COUNT(*) should be used; otherwise multiple row error happens without proper delay) Miroslav Stampar 2010-12-09 10:17:04 +00:00
• ec5c08ca7a cosmetics Miroslav Stampar 2010-12-09 09:24:20 +00:00
• 3fd1c37d53 update Miroslav Stampar 2010-12-09 07:49:18 +00:00
• db39dc32fc minor update Miroslav Stampar 2010-12-09 00:59:39 +00:00
• 0c01be0eeb Ugly work-around to avoid unescaping WAITFOR DELAY time between single quotes (unescaped CHAR(..) value does not work). Bernardo Damele 2010-12-09 00:34:02 +00:00