securitygeneration
022506580a
Remove appending of --+
...
For some reason this tamper script automatically adds --+ in some cases. Unless I'm mistaken, normally this is something that should be handled by the different payloads (payloads.xml). I have found cases where using this script failed because it would add --+ even though the payload was trying to use #, and the application in question was blacklisting on --. Removing these lines allowed the script to work and payloads using either -- or # should work as normal.
Is there some particular reason for wanting to auto-add --+ within this tamper script?
2014-06-07 11:58:27 +01:00
Miroslav Stampar
54be398e83
Patch for an Issue #711
2014-06-04 16:35:07 +02:00
Miroslav Stampar
27ebc02535
Minor fix (user reported problem via email)
2014-05-29 09:33:14 +02:00
Miroslav Stampar
0f10cdfa4c
Minor update
2014-05-29 09:24:09 +02:00
Miroslav Stampar
9e02816cbd
Raising number of used md5 digits in hashdb key value because of birthday paradox (Python can handle it - automatically expanding to long if required; SQLite can handle it - it will use 6 bytes per INTEGERs instead of 4)
2014-05-29 09:21:48 +02:00
Miroslav Stampar
680ab10ca6
Patch for an Issue #703
2014-05-27 21:41:07 +02:00
Miroslav Stampar
8b341e86fa
Merge pull request #701 from mwulftange/derived-table-boundaries
...
Add boundary checks for derived tables in FROM clause
2014-05-26 13:44:25 +02:00
Markus Wulftange
cf4e0c755b
Add boundary checks for derived tables in FROM clause
2014-05-24 17:25:11 +02:00
Miroslav Stampar
2d5461d250
Minor fix (related to the unknown encoding reported by ML)
2014-05-22 09:03:14 +02:00
Miroslav Stampar
65c4ea1562
Minor update
2014-05-20 22:30:53 +02:00
Miroslav Stampar
24954776a5
Patch for an Issue #697
2014-05-20 22:00:26 +02:00
Miroslav Stampar
babe49f086
Minor update (added new warning message)
2014-05-20 17:14:40 +02:00
Miroslav Stampar
401f896175
Patch related to the Issue #696
2014-05-20 13:44:10 +02:00
Miroslav Stampar
67115ed558
Minor fix (for a bug reported via ML)
2014-05-17 15:00:09 +02:00
Miroslav Stampar
c181e909b5
Minor fix
2014-05-16 23:47:00 +02:00
Miroslav Stampar
c51e219cc1
Fix for an Issue #691
2014-05-15 19:39:18 +02:00
Miroslav Stampar
fc3c321b01
Minor update
2014-05-15 19:08:41 +02:00
Miroslav Stampar
0f581ccb6c
Minor fix
2014-05-13 15:36:28 +02:00
Miroslav Stampar
4e8b41b869
Patch for an Issue #688
2014-05-13 00:50:36 +02:00
Miroslav Stampar
3a2916724c
Minor style update
2014-05-11 17:12:15 +02:00
Miroslav Stampar
a72d73804e
Revert of 9255174890
(bug was introduced with it)
2014-05-10 01:31:44 +02:00
Miroslav Stampar
93bf8e2a13
Bug fix
2014-05-10 01:11:19 +02:00
Miroslav Stampar
8f0807d7f9
Another fix related to the last commit
2014-05-09 22:55:16 +02:00
Miroslav Stampar
5eae002084
Minor fix
2014-05-09 22:45:43 +02:00
Miroslav Stampar
9255174890
Minor fix
2014-05-09 22:39:56 +02:00
Miroslav Stampar
5c4e4d18ee
Update for an Issue #686
2014-05-07 09:35:45 +02:00
Miroslav Stampar
5755290f98
Update for an Issue #686
2014-05-07 09:29:01 +02:00
Miroslav Stampar
6a3d7f28f1
Update for an Issue #686
2014-05-07 09:21:00 +02:00
Miroslav Stampar
bc4369be06
Fix for an Issue #687
2014-05-07 09:16:17 +02:00
Bernardo Damele A. G.
73f79f5481
Merge pull request #686 from viniciusmarangoni/master
...
Update README-por.md
2014-05-06 07:55:01 +00:00
Vinícius Henrique Marangoni
99f852e770
Update README-por.md
2014-05-06 00:43:34 -03:00
Miroslav Stampar
ae5325ed31
Minor update regarding Issue #684
2014-05-05 22:17:01 +02:00
Miroslav Stampar
2c586e8ef6
Merge pull request #684 from viniciusmarangoni/master
...
Create README-Portugues.md in doc folder
2014-05-05 22:14:35 +02:00
Vinícius Henrique Marangoni
9ea9c19b55
Create README-Portugues.md
2014-05-05 02:35:32 -03:00
Miroslav Stampar
e7bc57b00b
Fix for an Issue #683
2014-05-04 20:44:11 +02:00
Miroslav Stampar
2a55f75f86
Using a more generic XML recognition regex
2014-04-30 21:25:45 +02:00
Miroslav Stampar
2e96e3c924
Adding a hidden switch --ignore-401
2014-04-29 23:26:45 +02:00
Miroslav Stampar
bd16bb7a6a
Adding an appropriate warning message
2014-04-27 22:48:28 +02:00
Miroslav Stampar
eb8e31c23f
Adding a failsafe output directory
2014-04-27 22:40:41 +02:00
Miroslav Stampar
b54651b5a2
Minor patch (while saving configuration file)
2014-04-25 09:32:57 +02:00
Miroslav Stampar
ae8b1fe89c
Implementation for an Issue #678
2014-04-25 09:17:10 +02:00
Miroslav Stampar
efa3c3e451
Minor improvement of between tamper script
2014-04-22 11:04:28 +02:00
Miroslav Stampar
6fd3c27f70
Update for an Issue #672
2014-04-22 08:48:12 +02:00
Miroslav Stampar
e0fb21c26a
Patch for an Issue #673
2014-04-21 21:57:30 +02:00
Miroslav Stampar
f29769b7d0
Minor patch
2014-04-16 09:06:17 +02:00
Miroslav Stampar
ef5ce7e66c
Fix for an Issue #670
2014-04-12 17:22:47 +02:00
Miroslav Stampar
fd884ec67b
Adding another comment
2014-04-12 17:22:47 +02:00
Miroslav Stampar
b5cca742e4
Adding a comment
2014-04-12 17:22:47 +02:00
Bernardo Damele A. G.
f07bdcfda1
Update README.md
...
markdown syntax fix
2014-04-11 14:15:17 +00:00
Miroslav Stampar
7f371c499d
Commit related to the last one
2014-04-10 21:29:59 +02:00