258 Commits

Author	SHA1	Message	Date
Miroslav Stampar	8c45ff0d57	bug fix	2012-02-03 10:38:04 +00:00
Miroslav Stampar	8405ef59ac	some estetic updates	2012-02-01 14:49:42 +00:00
Miroslav Stampar	df43157284	minor patch	2012-02-01 12:28:06 +00:00
Miroslav Stampar	2ee198a381	minor "patch"	2012-02-01 11:00:01 +00:00
Miroslav Stampar	4d9dcbf5db	minor fix	2012-02-01 10:14:23 +00:00
Miroslav Stampar	95f89ab63a	updating copyright date	2012-01-11 14:59:46 +00:00
Miroslav Stampar	18930539cd	more concise language	2012-01-07 17:45:45 +00:00
Miroslav Stampar	29f502fe29	some refactoring	2011-12-28 16:27:17 +00:00
Miroslav Stampar	4a1a0773b7	speedup of UNION dumping	2011-12-22 10:44:14 +00:00
Miroslav Stampar	b77e2042f2	some optimization	2011-12-21 23:23:00 +00:00
Miroslav Stampar	526aacb640	code cleanup	2011-12-21 22:59:23 +00:00
Miroslav Stampar	81bd9a201b	minor refactoring	2011-12-21 11:50:49 +00:00
Miroslav Stampar	316e27a809	minor update	2011-12-15 10:19:31 +00:00
Miroslav Stampar	d6f936b98d	minor update	2011-11-23 15:51:48 +00:00
Miroslav Stampar	40f21c3917	minor update	2011-11-23 15:38:31 +00:00
Miroslav Stampar	e94efff187	some more optimization	2011-11-22 09:00:00 +00:00
Miroslav Stampar	2ed3efba12	speed optimization and bug fix (kb.absFilePaths were not stored previously; also, they are now extracted only in heuristic phase)	2011-11-22 08:39:13 +00:00
Miroslav Stampar	1b45c5b56a	bug fix	2011-10-28 15:24:35 +00:00
Miroslav Stampar	23bf52e496	minor refactoring	2011-10-24 09:55:50 +00:00
Miroslav Stampar	6d64f87190	minor update	2011-10-24 00:46:54 +00:00
Miroslav Stampar	7c626f1dbe	minor fix	2011-10-23 23:18:39 +00:00
Miroslav Stampar	d77a5f5928	update (generalizing ORDER BY approach)	2011-10-23 23:02:01 +00:00
Miroslav Stampar	1c3f4e9e54	minor update	2011-10-23 08:44:21 +00:00
Miroslav Stampar	25f0ec3597	some minor range to xrange conversion (where safe to do)	2011-10-21 22:34:27 +00:00
Miroslav Stampar	7a3096ce25	some refactoring	2011-10-21 21:12:48 +00:00
Miroslav Stampar	9356f8005c	important bug fix	2011-10-21 21:07:06 +00:00
Miroslav Stampar	0a8e45955c	minor update	2011-10-21 20:44:18 +00:00
Miroslav Stampar	e3a719e7d2	minor update	2011-10-11 22:40:00 +00:00
Miroslav Stampar	7956390631	minor update	2011-10-11 22:27:49 +00:00
Miroslav Stampar	a7a29f33ad	minor update	2011-10-11 21:58:57 +00:00
Miroslav Stampar	7e80274fac	refactoring	2011-09-25 21:10:45 +00:00
Miroslav Stampar	744636a8c1	switching to SQLite resume support (on error and union techniques this moment)	2011-09-25 20:36:32 +00:00
Miroslav Stampar	8fe069b495	minor fix	2011-08-23 21:48:39 +00:00
Miroslav Stampar	cfc1f2b70b	minor update	2011-08-22 22:43:14 +00:00
Miroslav Stampar	f4127a80d7	improvement of UNION based injection detection (with non-NULL kb.uChar values searching of the content inside -1 UNION.. pages is used)	2011-08-22 21:43:46 +00:00
Miroslav Stampar	cb32d46f2a	minor minor update	2011-08-18 06:09:12 +00:00
Miroslav Stampar	9d31322f3d	update regarding special case when conf.uChar appears only in testable pages	2011-08-17 21:40:42 +00:00
Bernardo Damele	702ed73a65	Added --code switch to match in boolean-based tests against the HTTP response code	2011-08-12 16:48:11 +00:00
Bernardo Damele	fff4c34e33	Search for --string and --regexp matches also in HTTP response headers	2011-08-12 15:33:37 +00:00
Miroslav Stampar	e849b71027	minor typo	2011-08-03 14:31:42 +00:00
Miroslav Stampar	538b49bcc5	removing word "dramatically". i was too excited at the moment :). it is cool and all but we shouldn't put "highly subjective" attribs in reports	2011-08-03 13:26:38 +00:00
Miroslav Stampar	9423d15fb3	ORDER BY technique used for finding proper UNION col count (dramatical improvement of speed and capabilities) and one minor bug fix	2011-08-03 09:08:16 +00:00
Miroslav Stampar	edab7d01a5	minor fix	2011-08-02 17:31:13 +00:00
Miroslav Stampar	cb0981d858	proper way of handling 0 length results (as in __goInferenceProxy)	2011-08-02 08:39:32 +00:00
Miroslav Stampar	018d7ed646	improvement for limited queries (more stable to have TOP/LIMIT/OFFSET mechanisms as part of a subquery)	2011-07-31 23:40:09 +00:00
Miroslav Stampar	e522263640	fix for a neverending data retrieval in large full inband cases	2011-07-29 10:45:09 +00:00
Bernardo Damele	938716e361	Proper fix for --start and --stop consistency amongst different techniques	2011-07-26 10:06:28 +00:00
Miroslav Stampar	6bbb8139a0	update (smaller memory footprint in postprocessing phase because of safecharencode part)	2011-07-25 20:40:31 +00:00
Miroslav Stampar	5770c08784	minor optimization and refactoring	2011-07-25 20:17:44 +00:00
Miroslav Stampar	2033a28ae7	minor update regarding last commit (cleaner code)	2011-07-24 20:44:17 +00:00
Miroslav Stampar	3a3561fdaa	doing proper big table support for partial union too	2011-07-24 20:36:44 +00:00
Bernardo Damele	aedcf8c8d7	Changed homepage address	2011-07-07 20:10:03 +00:00
Bernardo Damele	067354b97f	Revert of last commit and proper fix to detect UNION query SQL injection against Microsoft Access	2011-07-07 13:20:40 +00:00
Bernardo Damele	9e1a6beb7a	Major bug fix in UNION detection, it was a leftover	2011-07-07 00:06:20 +00:00
Miroslav Stampar	34d9a91af1	bulk of fixes	2011-07-02 22:48:56 +00:00
Miroslav Stampar	9e232256f4	reverting that last commit because there is a mess with default dumping (startLimit is set to 0 which is not so friendly with --start and --stop logic)	2011-06-21 18:29:23 +00:00
Miroslav Stampar	3536320fc9	--stop is inclusive ("Last query output entry to retrieve")	2011-06-21 18:08:33 +00:00
Bernardo Damele	f8c32cf6b9	Moved folder	2011-06-18 12:34:41 +00:00