sqlmap/doc/THANKS

== Individuals ==

Chip Andrews <chip@sqlsecurity.com>
    for his excellent work maintaining the SQL Server versions database
    at SQLSecurity.com and permission to implement the update feature
    taking data from his site

Simon Baker <simonb@sec-1.com>
    for reporting some bugs

Daniele Bellucci <daniele.bellucci@gmail.com>
    for starting sqlmap project and developing it between July and August
    2006

Jack Butler <fattredd@hotmail.com>
    for providing me with the sqlmap site favicon

Cesar Cerrudo <cesar@argeniss.com>
    for his Windows access token kidnapping tool Churrasco included in
    sqlmap tree as a contrib library and used to run the stand-alone
    payload stager on the target Windows machine as SYSTEM user if the
    user wants to perform a privilege escalation attack,
    http://www.argeniss.com/research/TokenKidnapping.pdf

Karl Chen <quarl@cs.berkeley.edu>
    for providing with the multithreading patch for the inference
    algorithm

Y P Chien <ypchien@cox.net>
    for reporting a minor bug

Pierre Chifflier <pollux@debian.org> and Mark Hymers <ftpmaster@debian.org>
    for uploading and accepting the sqlmap Debian package to the official
    Debian project repository

Ulises U. Cune <ulises2k@gmail.com>
    for reporting a bug

Alessandro Curio <alessandro.curio@gmail.com>
    for reporting a minor bug

Stefano Di Paola <stefano.dipaola@wisec.it>
    for suggesting good features

Dan Guido <dguido@gmail.com>
    for promoting sqlmap in the context of the Penetration Testing and
    Vulnerability Analysis class at the Polytechnic University of New York,
    http://isisblogs.poly.edu/courses/pentest/

Adam Faheem <faheem.adam@is.co.za>
    for reporting a few bugs

James Fisher <www@sittinglittleduck.com>
    for providing me with two very good feature requests
    for his great tool too brute force directories and files names on
    web/application servers, Dir Buster, http://tinyurl.com/dirbuster

Jim Forster <jimforster@goldenwest.com>
    for reporting a bug

Rong-En Fan <rafan@freebsd.org>
    for commiting the sqlmap 0.5 port to the official FreeBSD project
    repository

Giorgio Fedon <giorgio.fedon@gmail.com>
    for suggesting a speed improvement for bisection algorithm
    for reporting a bug when running against Microsoft SQL Server 2005

Alan Franzoni <alan.franzoni@gmail.com>
    for helping me out with Python subprocess library

Ivan Giacomelli <truemilk@insiberia.net>
    for reporting a bug
    for suggesting a minor enhancement
    for reviewing the documentation

Oliver Gruskovnjak <oliver.gruskovnjak@gmail.com>
    for reporting a bug
    for providing me with a minor patch

Davide Guerri <d.guerri@caspur.it>
    for suggesting an enhancement

Kristian Erik Hermansen <kristian.hermansen@gmail.com>
    for reporting a bug
    for donating to sqlmap development

Jorge Hoya <aquinadie@gmail.com>
    for suggesting a minor enhancement

Will Holcomb <wholcomb@gmail.com>
    for his MultipartPostHandler class to handle multipart POST forms and
    permission to include it within sqlmap source code

Daniel Hückmann <sanitybit@gmail.com>
    for reporting a minor bug

Mounir Idrassi <mounir.idrassi@idrix.net>
    for his compiled version of UPX for Mac OS X

Dirk Jagdmann <doj@cubic.org>
    for reporting a typo in the documentation

Luke Jahnke <luke.jahnke@gmail.com>
    for reporting a bug when running against MySQL < 5.0

Sven Klemm <sven@c3d2.de>
    for reporting two minor bugs with PostgreSQL

Anant Kochhar <anant.kochhar@secureyes.net>
    for providing me with feedback on the user's manual

Alexander Kornbrust <ak@red-database-security.com>
    for reporting a couple of bugs

Nicolas Krassas <krasn@ans.gr>
    for reporting a bug

Guido Landi <lists@keamera.org>
    for reporting a couple of bugs
    for the great technical discussions
    for Microsoft SQL Server 2000 and Microsoft SQL Server 2005
    'sp_replwritetovarbin' stored procedure heap-based buffer overflow
    (MS09-004) exploit development
    for presenting with me at SOURCE Conference 2009 in Barcelona (Spain)
    on September 21, 2009

Lee Lawson <Lee.Lawson@dns.co.uk>
    for reporting a minor bug

Nico Leidecker <nico@leidecker.info>
    for providing me with feedback on a few features
    for reporting a couple of bugs

Gabriel Lima <pato@bugnet.com.br>
    for reporting a couple of bugs

Pavol Luptak <pavol.luptak@nethemba.com>
    for reporting a bug when injecting on a POST data parameter

Michael Majchrowicz <mmajchrowicz@gmail.com>
    for extensively beta-testing sqlmap on various MySQL DBMS
    for providing really appreciated feedback
    for suggesting a lot of ideas and features

Ferruh Mavituna <ferruh@mavituna.com>
    for providing me with ideas on the implementation of a couple of
    new features

Enrico Milanese <enricomilanese@gmail.com>
    for reporting a bugs when using (-a) a single line User-Agent file
    for providing me with some ideas for the PHP backdoor

Roberto Nemirovsky <roberto.paes@gmail.com>
    for pointing me out some enhancements

Markus Oberhumer <markus.oberhumer@jk.uni-linz.ac.at>
Laszlo Molnar <ml1050@cdata.tvnet.hu>
John F. Reiser <sales@bitwagon.com>
    for their great tool UPX (Ultimate Packer for eXecutables) included
    in sqlmap tree as a contrib library and used mainly to pack the
    Metasploit Framework 3 payload stager portable executable,
    http://upx.sourceforge.net

Simone Onofri <simone.onofri@gmail.com>
    for patching the PHP web backdoor to make it work properly also on
    Windows

Antonio Parata <s4tan@ictsc.it>
    for providing me with some ideas for the PHP backdoor

Adrian Pastor <ap@gnucitizen.org>
    for donating to sqlmap development

Chris Patten <cpatten@sunera.com>
    for reporting a bug in the blind SQL injection bisection algorithm

Adam Pridgen <adam.pridgen@gmail.com>
    for suggesting some features

Alberto Revelli <r00t@northernfortress.net>
    for inspiring me to write sqlmap user's manual in SGML
    for his great Microsoft SQL Server take over tool, sqlninja,
    http://sqlninja.sourceforge.net

Andres Riancho <andres.riancho@gmail.com>
    for beta-testing sqlmap
    for reporting a bug and suggesting some features
    for including sqlmap in his great web application audit and attack
    framework, w3af, http://w3af.sourceforge.net

Antonio Riva <antonio.riva@gmail.com>
    for reporting a bug when running with python 2.5

Richard Safran <allapplyhere@yahoo.com>
    for donating the sqlmap.org domain control

Tomoyuki Sakurai <cherry@trombik.org>
    for submitting to the FreeBSD project the sqlmap 0.5 port

Philippe A. R. Schaeffer <schaeff@compuphil.de>
    for reporting a minor bug

Sven Schluter <sschlueter@netzwerk.cc>
    for providing with a patch for waiting a number of seconds between
    each HTTP request

Uemit Seren <uemit.seren@gmail.com>
    for reporting a minor adjustment when running with python 2.6

Sumit Siddharth <sid@notsosecure.com>
    for providing me with ideas on the implementation of a couple of
    features

M Simkin <mlsimkin@cox.net>
    for suggesting a feature

Konrads Smelkovs <konrads@smelkovs.com>
    for reporting a few bugs in --sql-shell and --sql-query on Microsoft
    SQL Server

Marek Stiefenhofer <m.stiefenhofer@r-tec.net>
    for reporting a bug

Jason Swan <jasoneswan@gmail.com>
    for reporting a bug when enumerating columns on Microsoft SQL Server
    for suggesting a couple of improvements

Alessandro Tanasi <alessandro@tanasi.it>
    for extensively beta-testing sqlmap
    for suggesting many features and reporting some bugs
    for reviewing the documentation

Andres Tarasco <atarasco@gmail.com>
    for providing me with good feedback

Efrain Torres <et@metasploit.com>
    for helping me out to improve the Metasploit Framework 3 sqlmap
    auxiliary module and for commiting it on the Metasploit official
    subversion repository
    for his great Metasploit WMAP Framework

Sandro Tosi <matrixhasu@gmail.com>
    for helping to create sqlmap Debian package correctly

Bedirhan Urgun <bedirhanurgun@gmail.com>
    for reporting a few bugs
    for suggesting some features and improvements
    for benchmarking sqlmap in the context of his SQL injection
    benchmark project, OWASP SQLiBench, http://code.google.com/p/sqlibench

Kyprianos Vassilopoulos <kyprianos.vasilopoulos@gmail.com>
    for reporting an unhandled connection exception

Anthony Zboralski <anthony.zboralski@bellua.com>
    for providing me with detailed feedback
    for reporting a few minor bugs
    for donating to sqlmap development

fufuh <fufuh@users.sourceforge.net>
    for reporting a bug when running on Windows

mariano <marianoso@gmail.com>
    for reporting a bug

Stuffe <stuffe.dk@gmail.com>
    for reporting a minor bug and a feature request

Sylphid <sylphid.su@sti.com.tw>
    for suggesting some features


== Organizations ==

Black Hat team <info@blackhat.com>
    for the opportunity to present my research on 'Advanced SQL injection
    to operating system full control' at Black Hat Europe 2009 Briefings on
    April 16, 2009 in Amsterdam (NL). I unveiled and demonstrated some of
    the sqlmap 0.7 release candidate version new features during my
    presentation

Metasploit LLC <msfdev@metasploit.com>
    for their powerful tool Metasploit Framework 3, used by sqlmap, among
    others things, to create the payload stager and establish an
    out-of-band connection between sqlmap and the database server,
    http://www.metasploit.com/framework

OWASP Board <http://www.owasp.org>
    for sponsoring part of the sqlmap development in the context of OWASP
    Spring of Code 2007