| 
							
							
								 Miroslav Stampar | 9ca8bc4d51 | minor bug fix | 2012-03-08 09:52:33 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 1bdc07c279 | minor update | 2012-02-29 15:02:24 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | c36cbbb3ae | minor fix | 2012-02-24 14:54:10 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | f94b91ad87 | added helper function for HashDB data storing/retrieval | 2012-02-24 13:07:20 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 086c3a3662 | minor fix | 2012-02-23 13:31:50 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | b3bd4144f5 | removing of unused imports together with some general code refactoring | 2012-02-22 10:40:11 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 386e98a0e3 | using UNION SELECT for where=..NEGATIVE | 2012-02-22 09:41:58 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | c9d570c83b | minor update | 2012-02-21 13:49:30 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | aee269cc14 | gazillion changes, nothing will work, muhahaha | 2012-02-17 14:22:48 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e1f86c97c4 | minor refactoring | 2012-02-16 09:46:41 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 8a2bd3897d | minor output fix | 2012-02-12 19:11:54 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e50d64546f | minor fix | 2012-02-07 14:57:48 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 2b05ded9c3 | just a makeup | 2012-02-07 12:05:23 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 8c45ff0d57 | bug fix | 2012-02-03 10:38:04 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 8405ef59ac | some estetic updates | 2012-02-01 14:49:42 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | df43157284 | minor patch | 2012-02-01 12:28:06 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 2ee198a381 | minor "patch" | 2012-02-01 11:00:01 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 4d9dcbf5db | minor fix | 2012-02-01 10:14:23 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 95f89ab63a | updating copyright date | 2012-01-11 14:59:46 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 18930539cd | more concise language | 2012-01-07 17:45:45 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 29f502fe29 | some refactoring | 2011-12-28 16:27:17 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 4a1a0773b7 | speedup of UNION dumping | 2011-12-22 10:44:14 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | b77e2042f2 | some optimization | 2011-12-21 23:23:00 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 526aacb640 | code cleanup | 2011-12-21 22:59:23 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 81bd9a201b | minor refactoring | 2011-12-21 11:50:49 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 316e27a809 | minor update | 2011-12-15 10:19:31 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | d6f936b98d | minor update | 2011-11-23 15:51:48 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 40f21c3917 | minor update | 2011-11-23 15:38:31 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e94efff187 | some more optimization | 2011-11-22 09:00:00 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 2ed3efba12 | speed optimization and bug fix (kb.absFilePaths were not stored previously; also, they are now extracted only in heuristic phase) | 2011-11-22 08:39:13 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 1b45c5b56a | bug fix | 2011-10-28 15:24:35 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 23bf52e496 | minor refactoring | 2011-10-24 09:55:50 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 6d64f87190 | minor update | 2011-10-24 00:46:54 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 7c626f1dbe | minor fix | 2011-10-23 23:18:39 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | d77a5f5928 | update (generalizing ORDER BY approach) | 2011-10-23 23:02:01 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 1c3f4e9e54 | minor update | 2011-10-23 08:44:21 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 25f0ec3597 | some minor range to xrange conversion (where safe to do) | 2011-10-21 22:34:27 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 7a3096ce25 | some refactoring | 2011-10-21 21:12:48 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 9356f8005c | important bug fix | 2011-10-21 21:07:06 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 0a8e45955c | minor update | 2011-10-21 20:44:18 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e3a719e7d2 | minor update | 2011-10-11 22:40:00 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 7956390631 | minor update | 2011-10-11 22:27:49 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | a7a29f33ad | minor update | 2011-10-11 21:58:57 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 7e80274fac | refactoring | 2011-09-25 21:10:45 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 744636a8c1 | switching to SQLite resume support (on error and union techniques this moment) | 2011-09-25 20:36:32 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 8fe069b495 | minor fix | 2011-08-23 21:48:39 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | cfc1f2b70b | minor update | 2011-08-22 22:43:14 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | f4127a80d7 | improvement of UNION based injection detection (with non-NULL kb.uChar values searching of the content inside -1 UNION.. pages is used) | 2011-08-22 21:43:46 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | cb32d46f2a | minor minor update | 2011-08-18 06:09:12 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 9d31322f3d | update regarding special case when conf.uChar appears only in testable pages | 2011-08-17 21:40:42 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 702ed73a65 | Added --code switch to match in boolean-based tests against the HTTP response code | 2011-08-12 16:48:11 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | fff4c34e33 | Search for --string and --regexp matches also in HTTP response headers | 2011-08-12 15:33:37 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e849b71027 | minor typo | 2011-08-03 14:31:42 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 538b49bcc5 | removing word "dramatically". i was too excited at the moment :). it is cool and all but we shouldn't put "highly subjective" attribs in reports | 2011-08-03 13:26:38 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 9423d15fb3 | ORDER BY technique used for finding proper UNION col count (dramatical improvement of speed and capabilities) and one minor bug fix | 2011-08-03 09:08:16 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | edab7d01a5 | minor fix | 2011-08-02 17:31:13 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | cb0981d858 | proper way of handling 0 length results (as in __goInferenceProxy) | 2011-08-02 08:39:32 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 018d7ed646 | improvement for limited queries (more stable to have TOP/LIMIT/OFFSET mechanisms as part of a subquery) | 2011-07-31 23:40:09 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e522263640 | fix for a neverending data retrieval in large full inband cases | 2011-07-29 10:45:09 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 938716e361 | Proper fix for --start and --stop consistency amongst different techniques | 2011-07-26 10:06:28 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 6bbb8139a0 | update (smaller memory footprint in postprocessing phase because of safecharencode part) | 2011-07-25 20:40:31 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 5770c08784 | minor optimization and refactoring | 2011-07-25 20:17:44 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 2033a28ae7 | minor update regarding last commit (cleaner code) | 2011-07-24 20:44:17 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 3a3561fdaa | doing proper big table support for partial union too | 2011-07-24 20:36:44 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | aedcf8c8d7 | Changed homepage address | 2011-07-07 20:10:03 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 067354b97f | Revert of last commit and proper fix to detect UNION query SQL injection against Microsoft Access | 2011-07-07 13:20:40 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 9e1a6beb7a | Major bug fix in UNION detection, it was a leftover | 2011-07-07 00:06:20 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 34d9a91af1 | bulk of fixes | 2011-07-02 22:48:56 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 9e232256f4 | reverting that last commit because there is a  mess with default dumping (startLimit is set to 0 which is not so friendly with --start and --stop logic) | 2011-06-21 18:29:23 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 3536320fc9 | --stop is inclusive ("Last query output entry to retrieve") | 2011-06-21 18:08:33 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | f8c32cf6b9 | Moved folder | 2011-06-18 12:34:41 +00:00 |  |