Miroslav Stampar
|
0b1efc0759
|
Minor update (for newer versions of MsSQL)
|
2016-05-30 01:38:34 +02:00 |
|
Miroslav Stampar
|
42de887b05
|
Language update
|
2016-05-24 15:18:19 +02:00 |
|
Miroslav Stampar
|
d0d676ccce
|
Update of copyright string
|
2016-01-06 00:06:12 +01:00 |
|
Miroslav Stampar
|
03f32ae2b6
|
Merge of an Issue #1227
|
2015-04-22 17:21:55 +02:00 |
|
Miroslav Stampar
|
45bdefd29b
|
Update of copyright
|
2015-01-06 15:02:16 +01:00 |
|
Miroslav Stampar
|
bd99470a4a
|
Minor update to cleanup properly new xp_cmdshell
|
2014-12-05 22:01:59 +01:00 |
|
Miroslav Stampar
|
0feb379b47
|
Fix for an Issue #887
|
2014-10-31 16:39:29 +01:00 |
|
Miroslav Stampar
|
006d9d1859
|
Bug fix for a problem reported by a user via ML (--os-shell)
|
2014-10-13 12:00:34 +02:00 |
|
Bernardo Damele
|
43a4e85749
|
updated copyright
|
2014-01-13 17:24:49 +00:00 |
|
Miroslav Stampar
|
95ed6b7203
|
Minor patch (Issue #470)
|
2013-06-24 14:37:45 +02:00 |
|
Bernardo Damele
|
a72096a345
|
slightly more appropriate definition of output variable
|
2013-06-19 20:25:01 +01:00 |
|
Bernardo Damele
|
cae108d9fc
|
careful at merging pull requests with TABs (#466)
|
2013-06-19 19:49:53 +01:00 |
|
Meatballs
|
c5087399c1
|
Fix exception if init technique not available
|
2013-06-16 10:47:27 +01:00 |
|
Meatballs
|
2c98507f1e
|
Add better error msg
|
2013-06-16 10:27:08 +01:00 |
|
Meatballs
|
caa326774c
|
Fallback to blind
|
2013-06-16 10:22:20 +01:00 |
|
Bernardo Damele
|
4b9d8ed673
|
reverted a previous commit as not all distributions create a link file /usr/bin/python2 to the Python interpreter
|
2013-02-14 11:32:17 +00:00 |
|
Bernardo Damele
|
2267dd8f47
|
working on #392 to fix --os-cmd and --os-shell output parsing
|
2013-02-14 11:31:20 +00:00 |
|
Bernardo Damele
|
a67ef4117f
|
make sure to use Python 2 interpreter when default system Python is version 3
|
2013-02-14 11:25:04 +00:00 |
|
Miroslav Stampar
|
f41460f8d8
|
Better naming
|
2013-01-29 20:53:11 +01:00 |
|
Bernardo Damele
|
a43202f3c0
|
updated copyright
|
2013-01-18 14:07:51 +00:00 |
|
Miroslav Stampar
|
e4a3c015e5
|
Replacing old and deprecated raise Exception style (PEP8)
|
2013-01-03 23:20:55 +01:00 |
|
Miroslav Stampar
|
00e55828e4
|
Minor style update
|
2012-12-21 15:06:03 +01:00 |
|
Miroslav Stampar
|
974407396e
|
Doing some more style updating (capitalization of exception classes; using _ is enough for private members - __ is used in Python specific methods)
|
2012-12-06 14:14:19 +01:00 |
|
Miroslav Stampar
|
003d21e962
|
Minor style update (capitalization of leftover class names)
|
2012-12-06 13:46:24 +01:00 |
|
Miroslav Stampar
|
ab67344448
|
Removed unused imports and variables (pyflake-ing)
|
2012-12-06 11:15:05 +01:00 |
|
Miroslav Stampar
|
775e0df04b
|
Update for an Issue #278
|
2012-12-05 10:45:17 +01:00 |
|
Miroslav Stampar
|
c1b8226329
|
Massive renaming (proper naming is inband = union & error techniques! - query naming stays as they are/in code things like forgeInbandQuery are renamed to forgeUnionQuery)
|
2012-10-28 00:36:09 +02:00 |
|
Miroslav Stampar
|
06805b27f2
|
Bug fix (time was also meant to be disabled in case of error/inband getvalues)
|
2012-10-27 23:16:25 +02:00 |
|
Miroslav Stampar
|
a6eeebfca8
|
Fix for an Issue #188
|
2012-09-20 11:30:07 +02:00 |
|
Miroslav Stampar
|
ebab05cf7c
|
Fix for an Issue #158
|
2012-08-21 20:20:38 +02:00 |
|
Miroslav Stampar
|
f8c9868cb6
|
Implementation for an Issue #118
|
2012-07-24 15:34:50 +02:00 |
|
Bernardo Damele
|
162da75a04
|
modified homepage address
|
2012-07-12 18:38:03 +01:00 |
|
Bernardo Damele
|
d3da3f5c52
|
refactoring for issue #51
|
2012-07-10 00:19:32 +01:00 |
|
Bernardo Damele
|
25eca9d671
|
finally got this working on MSSQL 2005: commands can now be executed as another user (BULK INSERT must be used in such case, see comments in the code) - issue #34
|
2012-07-09 14:26:23 +01:00 |
|
Bernardo Damele
|
99c5ea54f7
|
cleanup for #34
|
2012-07-09 12:39:43 +01:00 |
|
Bernardo Damele
|
d08a54e375
|
properly display the command stdout
|
2012-07-09 10:52:48 +01:00 |
|
Miroslav Stampar
|
54e0a2d8ee
|
--os-shell now works perfect for inference-like techniques too
|
2012-07-07 17:57:06 +02:00 |
|
Miroslav Stampar
|
58f6687194
|
Some refactoring (reusing xpCmdshellForgeCmd)
|
2012-07-07 10:51:29 +02:00 |
|
Miroslav Stampar
|
8620767b77
|
Proper fix
|
2012-07-07 10:38:07 +02:00 |
|
Miroslav Stampar
|
1c69eb5d30
|
Revert "major fix"
This reverts commit 3a11fc2d9e .
|
2012-07-07 10:26:13 +02:00 |
|
Bernardo Damele
|
3a11fc2d9e
|
major fix
|
2012-07-06 22:55:34 +01:00 |
|
Miroslav Stampar
|
982fcde1c0
|
Fix for Issue #62
|
2012-07-06 12:24:55 +02:00 |
|
Bernardo Damele
|
fd4cfb0cc0
|
working on #51
|
2012-07-02 15:28:19 +01:00 |
|
Bernardo Damele
|
04d803c7fd
|
more tweaking for issue #34, it's totally not as trivial as it may look (OPENROWSET has many limitations on MSSQL >= 2005)
|
2012-07-02 15:02:00 +01:00 |
|
Bernardo Damele
|
b7d2680e55
|
minor refactoring, issue #51
|
2012-07-02 12:50:26 +01:00 |
|
Bernardo Damele
|
add8352804
|
make the runAsDBMSUser() generic and ported to abstraction.py so the same function will be used for PostgreSQL dblink() too
|
2012-07-02 02:14:03 +01:00 |
|
Bernardo Damele
|
6697927098
|
initial support for --dbms-cred for MSSQL: can be used to execute OS commands as another DB use - useful if you have retrieved and cracked the 'sa' DBA password by any mean and can provide it to sqlmap
|
2012-07-02 02:04:19 +01:00 |
|
Bernardo Damele
|
18be319d13
|
hexencoding the command is much shorter than unescaping with CHAR() for MSSQL, also no need for spaces between nested comments when forging the xp_cmdshell command to run
|
2012-07-01 23:41:10 +01:00 |
|
Bernardo Damele
|
ff9e97a42c
|
minor code refactoring
|
2012-07-01 23:31:45 +01:00 |
|
jekil
|
c39e5a85ba
|
Removed $id$ tags
|
2012-06-27 20:56:43 +02:00 |
|