sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2025-02-27 09:20:37 +03:00
Code Issues Packages Projects Releases Wiki Activity

updated homepage

Browse Source
This commit is contained in:
Bernardo Damele 2012-07-16 16:20:15 +01:00
parent b471a64c98
commit 4e4c1a2eca
3 changed files with 93 additions and 102 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

66
index.html
View File

@ -41,6 +41,7 @@
<div id="content-wrapper">
<div class="inner clearfix">
<section id="main-content">
<h1>News</h1>
<a href="https://twitter.com/sqlmap"><img src="images/twitter.jpg" alt="Follow sqlmap on Twitter" width="90" height="90" class="left"></a>
@ -64,63 +65,56 @@
<li>Support to <strong>execute arbitrary commands and retrieve their standard output</strong> on the database server underlying operating system when the database software is MySQL, PostgreSQL or Microsoft SQL Server.</li>
<li>Support to <strong>establish an out-of-band stateful TCP connection between the attacker machine and the database server</strong> underlying operating system. This channel can be an interactive command prompt, a Meterpreter session or a graphical user interface (VNC) session as per user's choice.</li>
<li>Support for <strong>database process' user privilege escalation</strong> via Metasploit's Meterpreter <code>getsystem</code> command.</li>
</ul><h1>Download</h1>
</ul>
<p>Refer to the <a href="https://github.com/sqlmapproject/sqlmap/wiki/Features">wiki</a> for an exhaustive breakdown of the features.</a>
<h1>Download</h1>
<p>You can download the latest tarball by clicking <a href="https://github.com/sqlmapproject/sqlmap/tarball/master">here</a>.</p>
<p>Preferably, you can download sqlmap by cloning the <a href="https://github.com/sqlmapproject/sqlmap">Git</a> repository:</p>
<pre><code>git clone https://github.com/sqlmapproject/sqlmap.git sqlmap-dev
</code></pre>
<p>This is strongly recommended before reporting any bug to the <a href="#mailing-list">mailing list</a>.</p>
<h1>Documentation</h1>
<ul>
<li>sqlmap <a href="https://github.com/sqlmapproject/sqlmap/raw/master/doc/README.pdf">user's manual</a>.</li>
<li>sqlmap <a href="https://raw.github.com/sqlmapproject/sqlmap/master/doc/ChangeLog">ChangeLog</a>.</li>
<li>
<em>SQL injection: Not only AND 1=1</em> <a href="http://www.slideshare.net/inquis/sql-injection-not-only-and-11-updated">slides</a> presented by Bernardo at the 2nd Digital Security Forum in Lisbon (Portugal) on June 27th, 2009.</li>
<li>
<em>Advanced SQL injection to operating system full control</em> <a href="http://www.slideshare.net/inquis/advanced-sql-injection-to-operating-system-full-control-whitepaper-4633857">whitepaper</a> and <a href="http://www.slideshare.net/inquis/advanced-sql-injection-to-operating-system-full-control-slides">slides</a> presented by Bernardo at <a href="https://www.blackhat.com/html/bh-europe-09/bh-eu-09-main.html">Black Hat Europe 2009</a> in Amsterdam (The Netherlands) on April 16th, 2009.</li>
<li>
<em>Expanding the control over the operating system from the database</em> <a href="http://www.slideshare.net/inquis/expanding-the-control-over-the-operating-system-from-the-database">slides</a> presented by Bernardo at <a href="http://www.sourceconference.com/archive/">SOURCE Conference</a> 2009 in Barcelona (Spain) on September 21st, 2009.</li>
<li>
<em>Got database access? Own the network!</em> <a href="http://www.slideshare.net/inquis/ath-con-2010bernardodamelegotdbownnet">slides</a> presented by Bernardo at <a href="http://www.athcon.org/archive.php">AthCon 2010</a> in Athens (Greece) on June 3rd, 2010.</li>
<li>
<em>sqlmap - security development in python</em> <a href="http://www.slideshare.net/stamparm/euro-python-2011miroslavstamparsqlmapsecuritydevelopmentinpython">slides</a> presented by Miroslav at <a href="http://ep2011.europython.eu/">EuroPython 2011</a> in Firenze (Italy) on June 23rd, 2011.</li>
<li>
<em>It all starts with the ' (SQL injection from attacker's point of view)</em> <a href="http://www.slideshare.net/stamparm/f-sec-2011miroslavstamparitallstartswiththesinglequote-9311238">slides</a> presented by Miroslav at <a href="http://fsec.foi.hr/">FSec - FOI Security Symposium</a> in Varazdin (Croatia) on September 23rd, 2011.</li>
<li>
<em>DNS exfiltration using sqlmap</em> <a href="http://www.slideshare.net/stamparm/dns-exfiltration-using-sqlmap-13163281">slides</a> and accompanying <a href="http://www.slideshare.net/stamparm/ph-days-2012miroslavstampardataretrievaloverdnsinsqlinjectionattackspaper">whitepaper</a> titled <em>Data Retrieval over DNS in SQL Injection Attacks</em> presented by Miroslav at <a href="http://www.phdays.com/">PHDays 2012</a> in Moscow (Russia) on May 31st, 2012.</li>
</ul><h1>Demo</h1>
<li>sqlmap <a href="https://github.com/sqlmapproject/sqlmap/wiki">user's manual</a>.</li>
<li>sqlmap <a href="https://raw.github.com/sqlmapproject/sqlmap/master/doc/ChangeLog">ChangeLog</a> and <a href="https://github.com/sqlmapproject/sqlmap/wiki/History">history</a>.</li>
<li><a href="https://github.com/sqlmapproject/sqlmap/wiki/Presentations">Material</a> around sqlmap presented at conferences.</li>
</ul>
<p></p>
<h1>Demo</h1>
<p><iframe title="YouTube video player" width="480" height="390" src="http://www.youtube.com/embed/RsQ52eCcTi4?rel=0" frameborder="0"></iframe></p>
<p>Watch more videos on <a href="http://www.youtube.com/inquisb#g/u">YouTube</a>.</p>
<h1>Mailing list</h1>
<p>The <code>sqlmap-users@lists.sourceforge.net</code> mailing list is the preferred way to ask questions, report bugs, suggest new features and discuss with other users, <a href="https://github.com/sqlmapproject/sqlmap/blob/master/doc/THANKS">contributors</a> and the <a href="#developers">developers</a>. To subscribe use the <a href="https://lists.sourceforge.net/lists/listinfo/sqlmap-users">online web form</a>.
The mailing list is archived online on <a href="http://sourceforge.net/mailarchive/forum.php?forum_name=sqlmap-users">SourceForge</a>, <a href="http://news.gmane.org/gmane.comp.security.sqlmap">Gmane</a> and is available also via Gmane <a href="http://rss.gmane.org/messages/complete/gmane.comp.security.sqlmap">RSS feed</a>.</p>
<p>Watch more demos on <a href="http://www.youtube.com/user/inquisb/videos">Bernardo</a> and <a href="http://www.youtube.com/user/stamparm/videos">Miroslav</a> YouTube pages.</p>
<h1>Developers</h1>
<p><a href="mailto:bernardo@sqlmap.org">Bernardo Damele A. G.</a> - <a href="https://twitter.com/inquisb">@inquisb</a><br><a href="mailto:miroslav@sqlmap.org">Miroslav Stampar</a> - <a href="https://twitter.com/stamparm">@stamparm</a></p>
<ul>
<li><a href="mailto:bernardo@sqlmap.org">Bernardo Damele A. G.</a> (<a href="https://twitter.com/inquisb">@inquisb</a>)</li>
<li><a href="mailto:miroslav@sqlmap.org">Miroslav Stampar</a> (<a href="https://twitter.com/stamparm">@stamparm</a>)</li>
</ul>
<p>You can contact the development team by writing to <code>dev@sqlmap.org</code>.</p>
<h1>Communication</h1>
<p>The <code>sqlmap-users@lists.sourceforge.net</code> <a href="https://lists.sourceforge.net/lists/listinfo/sqlmap-users">mailing list</a> is the preferred way to ask questions and discuss with other users, <a href="https://raw.github.com/sqlmapproject/sqlmap/master/doc/THANKS">contributors</a> and the <a href="#developers">developers</a>.<br>
To subscribe use the <a href="https://lists.sourceforge.net/lists/listinfo/sqlmap-users">online web form</a>. It is also available via Gmane <a href="http://rss.gmane.org/messages/complete/gmane.comp.security.sqlmap">RSS feed</a>. The archives are available online on <a href="http://news.gmane.org/gmane.comp.security.sqlmap">Gmane</a>.</p>
<p><strong>Bug reports are welcome</strong>! Please report all bugs on the <a href="https://github.com/sqlmapproject/sqlmap/issues">issue tracker</a> or, alternatively, to the <a href="https://lists.sourceforge.net/lists/listinfo/sqlmap-users">mailing list</a>.</p>
<h1>Contribute</h1>
<p>We are constantly seeking for people who can write some clean Python code, are up to do security research, know about web application security, database assessment and takeover, software refactoring and are motivated to join the development team.</p>
<p>All code contributions are greatly appreciated. First off, clone the <a href="https://github.com/sqlmapproject/sqlmap">Git repository</a>, read the <a href="https://github.com/sqlmapproject/sqlmap/wiki">user's manual</a> carefully, go through the code yourself and <a href="mailto:dev@sqlmap.org">drop us</a> an email if you are having a hard time grasping its structure and meaning.</p>
<p>Our preferred method of patch submission is via a Git <a href="https://help.github.com/articles/using-pull-requests">pull request</a>.</p>
<p>Each patch should make one logical change. Please follow the existing stylistic conventions: wrap code to 76 columns when possible. Avoid tabbing, use four blank spaces instead. Before you put time into a nontrivial patch, it is worth discussing it on the <a href="https://lists.sourceforge.net/lists/listinfo/sqlmap-users">mailing list</a> or privately by <a href="mailto:dev@sqlmap.org">email</a>.</p>
<p>Many <a href="https://raw.github.com/sqlmapproject/sqlmap/master/doc/THANKS">people</a> have contributed in different ways to the sqlmap development. You can be the next!</p>
<p>If this sounds interesting to you, send us your <a href="https://github.com/sqlmapproject/sqlmap/pulls">pull requests</a>!</p>
<h1>Support</h1>
<h1>Donate</h1>
<p>sqlmap is the result of numerous hours of passionated work from a small team of computer security enthusiasts. If you appreciated our work and you want to see sqlmap kept being developed, please consider making a small donation to our efforts.</p>
<p>sqlmap is the result of numerous hours of passionated work from a small team of computer security enthusiasts. If you appreciated our work and you want to see sqlmap kept being developed, please consider making a <a href="https://www.paypal.com/uk/cgi-bin/webscr?cmd=_send-money&nav=1">donation</a> to our efforts via <a href="https://www.paypal.com/">PayPal</a> to <code>dev@sqlmap.org</code>.</p>
<h1>License</h1>
@ -137,8 +131,6 @@ sqlmap is copyrighted by its <a href="#developers">developers</a>.</p>
<small>Download</small>
.tar.gz file
</a>
<p>This page was generated by <a href="http://pages.github.com">GitHub Pages</a> using the Architect theme by <a href="http://twitter.com/jasonlong">Jason Long</a>.</p>
</aside>
</div>
</div>

1
params.json
View File

File diff suppressed because one or more lines are too long

2
stylesheets/stylesheet.css
View File

@ -6,7 +6,7 @@ html, body, div, span, applet, object, iframe,
h1, h2, h3, h4, h5, h6, p, blockquote, pre,
a, abbr, acronym, address, big, cite, code,
del, dfn, em, img, ins, kbd, q, s, samp,
small, strike, strong, sub, sup, tt, var,
small, strike, sub, sup, tt, var,
b, u, i, center,
dl, dt, dd, ol, ul, li,
fieldset, form, label, legend,