82 Commits

Author	SHA1	Message	Date
Bernardo Damele	282aeb734f	ORDER BY does not play well with UNION query SQLi (related to issue #313)	2012-12-19 13:21:16 +00:00
Bernardo Damele	259b345f1f	catch ImportError exception if libmagic is not installed	2012-12-19 13:10:54 +00:00
Bernardo Damele	9149d77cc8	removed duplicate code - fixes issue #310	2012-12-19 12:17:56 +00:00
Bernardo Damele	d80744d3d5	preparation for issue #310	2012-12-19 11:40:00 +00:00
Bernardo Damele	dee56b17c3	handle "LIMIT num" as well as "LIMIT num, num" across all techniques - fixes issue #308	2012-12-19 10:50:15 +00:00
Miroslav Stampar	88d8494b5a	Implementation for an Issue #307	2012-12-18 16:03:35 +01:00
Miroslav Stampar	974407396e	Doing some more style updating (capitalization of exception classes; using _ is enough for private members - __ is used in Python specific methods)	2012-12-06 14:14:19 +01:00
Miroslav Stampar	a40d7a5bca	Minor improvement (safer to use column name in COUNT than *, especially when only one column is needed)	2012-11-15 15:06:54 +01:00
Miroslav Stampar	c1b8226329	Massive renaming (proper naming is inband = union & error techniques! - query naming stays as they are/in code things like forgeInbandQuery are renamed to forgeUnionQuery)	2012-10-28 00:36:09 +02:00
Miroslav Stampar	01f481c332	Minor refactoring of dictionaries	2012-08-21 11:19:15 +02:00
Miroslav Stampar	93d35fe522	Minor update regarding Issue #129	2012-07-30 21:43:32 +02:00
Miroslav Stampar	cc2a916716	Fix for an Issue #126	2012-07-29 17:33:08 +02:00
Bernardo Damele	162da75a04	modified homepage address	2012-07-12 18:38:03 +01:00
Miroslav Stampar	32f52cdd04	Another language update for Issue #45	2012-06-29 10:33:54 +02:00
Miroslav Stampar	f0e39c3fae	Language update for Issue #45	2012-06-29 10:33:00 +02:00
Miroslav Stampar	c0f16f0c1a	Fix for Issue #45	2012-06-29 10:31:03 +02:00
Miroslav Stampar	c8bac658f3	Fix for Issue #43	2012-06-28 18:47:55 +02:00
jekil	c39e5a85ba	Removed $id$ tags	2012-06-27 20:56:43 +02:00
Miroslav Stampar	6c4bd84d18	minor fix (turning back the functionality of kb.suppressResumeInfo)	2012-06-25 16:19:51 +00:00
Miroslav Stampar	302d782a0f	minor style update	2012-06-19 08:33:51 +00:00
Miroslav Stampar	06be7bbb18	few just in case fixes (unarrayizeValue in dumpTable entries) and and some refactoring (unique is now not done for every union case but only if detected that there are duplicates in union test)	2012-06-15 20:41:53 +00:00
Miroslav Stampar	facce2c0df	some more cleanup	2012-06-14 13:50:36 +00:00
Miroslav Stampar	9fa3619262	minor fix	2012-05-09 14:00:07 +00:00
Miroslav Stampar	56a3431be6	minor update for empty tables (skipping other techniques)	2012-05-09 10:34:21 +00:00
Miroslav Stampar	556b349be3	minor fix for retrieving non-printable chars in inference and non-multi threading mode	2012-04-03 14:04:07 +00:00
Miroslav Stampar	33bb9c5f19	much cleaner approach in that "flat" representation of retrieved items in union technique	2012-04-03 13:56:11 +00:00
Miroslav Stampar	7fb190f3b1	minor fix	2012-04-03 12:35:19 +00:00
Miroslav Stampar	886aa22efc	minor update	2012-04-03 12:19:37 +00:00
Miroslav Stampar	8e7d360ea2	cleaner refactoring regarding last commit	2012-03-19 12:03:25 +00:00
Miroslav Stampar	401763b6f8	minor fix (it has to be level 1 array like it was with the previous re.findall mechanism)	2012-03-19 12:00:22 +00:00
Miroslav Stampar	e38b59a2ae	minor update	2012-03-14 13:16:49 +00:00
Miroslav Stampar	cee9ff7885	proper parsing of content in partial union technique	2012-03-14 11:23:30 +00:00
Miroslav Stampar	5a83f1c5f7	minor update	2012-03-08 15:43:22 +00:00
Miroslav Stampar	9ca8bc4d51	minor bug fix	2012-03-08 09:52:33 +00:00
Miroslav Stampar	1bdc07c279	minor update	2012-02-29 15:02:24 +00:00
Miroslav Stampar	c36cbbb3ae	minor fix	2012-02-24 14:54:10 +00:00
Miroslav Stampar	f94b91ad87	added helper function for HashDB data storing/retrieval	2012-02-24 13:07:20 +00:00
Miroslav Stampar	086c3a3662	minor fix	2012-02-23 13:31:50 +00:00
Miroslav Stampar	b3bd4144f5	removing of unused imports together with some general code refactoring	2012-02-22 10:40:11 +00:00
Miroslav Stampar	386e98a0e3	using UNION SELECT for where=..NEGATIVE	2012-02-22 09:41:58 +00:00
Miroslav Stampar	c9d570c83b	minor update	2012-02-21 13:49:30 +00:00
Miroslav Stampar	aee269cc14	gazillion changes, nothing will work, muhahaha	2012-02-17 14:22:48 +00:00
Miroslav Stampar	e1f86c97c4	minor refactoring	2012-02-16 09:46:41 +00:00
Miroslav Stampar	8a2bd3897d	minor output fix	2012-02-12 19:11:54 +00:00
Miroslav Stampar	e50d64546f	minor fix	2012-02-07 14:57:48 +00:00
Miroslav Stampar	2b05ded9c3	just a makeup	2012-02-07 12:05:23 +00:00
Miroslav Stampar	8c45ff0d57	bug fix	2012-02-03 10:38:04 +00:00
Miroslav Stampar	8405ef59ac	some estetic updates	2012-02-01 14:49:42 +00:00
Miroslav Stampar	df43157284	minor patch	2012-02-01 12:28:06 +00:00
Miroslav Stampar	2ee198a381	minor "patch"	2012-02-01 11:00:01 +00:00