Commit Graph

1264 Commits

Author SHA1 Message Date
Miroslav Stampar
d9d0865c13 Another patch for an Issue #1874 2016-05-16 17:09:05 +02:00
Miroslav Stampar
cc9f4b6102 Minor refactoring for MariaDB 2016-05-14 15:05:50 +02:00
Miroslav Stampar
3b74e99576 Minor update (support for MariaDB) 2016-05-11 15:47:35 +02:00
Miroslav Stampar
0c5965c7b8 Minor patches 2016-04-19 13:13:37 +02:00
Miroslav Stampar
5b0d5970cc Another patch related to the #1773 2016-03-23 10:33:32 +01:00
Miroslav Stampar
6c2f9859be Potential patch for #1773 2016-03-23 10:26:22 +01:00
Miroslav Stampar
21885021e7 Fixes #1731 2016-02-25 13:34:41 +01:00
Miroslav Stampar
f532ad3c9c Minor bug fix 2016-01-26 07:32:47 +01:00
Miroslav Stampar
6fef2948ff Minor consistency update 2016-01-14 22:51:26 +01:00
Miroslav Stampar
66eaac862b Minor consistency update 2016-01-14 22:47:56 +01:00
Miroslav Stampar
5908964db4 Another (better) patch for #1636 2016-01-09 17:32:19 +01:00
Miroslav Stampar
0f8a551227 Potential patch for #1636 2016-01-09 00:55:01 +01:00
Miroslav Stampar
3c9be947c5 Fixes #1649 2016-01-09 00:15:05 +01:00
Miroslav Stampar
d0d676ccce Update of copyright string 2016-01-06 00:06:12 +01:00
Miroslav Stampar
7d334cca48 Minor style patch 2016-01-04 12:08:56 +01:00
Miroslav Stampar
fc5802f461 Fixes #1628 2015-12-29 13:19:25 +01:00
Miroslav Stampar
b269e8418f Fixes #1608 2015-12-15 10:46:37 +01:00
Miroslav Stampar
6c083956f4 Patch related to the #1557 2015-11-23 09:48:43 +01:00
Miroslav Stampar
b2dc443835 Fixes #1559 2015-11-23 09:20:35 +01:00
Miroslav Stampar
763b72a3ed Fixes #1551 2015-11-20 17:01:41 +01:00
Miroslav Stampar
4335ae8330 Patching previous commit 2015-11-16 16:59:54 +01:00
Miroslav Stampar
94639d11a3 Another update related to the #1539 2015-11-16 15:33:05 +01:00
Miroslav Stampar
570562369b Further fixes for sqlmap to work properly with HSQLDB (WebGoat) 2015-10-13 13:04:59 +02:00
Miroslav Stampar
51444276c0 Better dealing with MySQL vs HSQLDB 2015-10-10 14:19:47 +02:00
Miroslav Stampar
9641e84dd9 Bug fixes for HSQLDB 2015-10-09 16:52:13 +02:00
Miroslav Stampar
fa4e867035 Bug fix for MySQL fingerprinting (excluding HSQLDB MySQL look-alike) 2015-10-09 14:17:13 +02:00
Miroslav Stampar
906cb6d3c2 Removing a hard limit to use --start/--stop only for --dump scenarios 2015-09-28 11:11:39 +02:00
Miroslav Stampar
ea4cef9c6d Skipping quit exception in case of --search 2015-09-24 13:44:51 +02:00
Miroslav Stampar
e19b097ab5 Bug fix (--columns has been broken for last couple of days) 2015-09-24 11:49:05 +02:00
Miroslav Stampar
aa088aafd2 Looks more technical 2015-09-23 08:47:52 +02:00
Miroslav Stampar
058f63a050 Patch for annoying retrieval of columns during dump (if -C used) 2015-09-22 12:33:11 +02:00
Miroslav Stampar
03da24b249 Minor cosmetics 2015-09-22 12:03:47 +02:00
Miroslav Stampar
f96edc951c Patches #1419 2015-09-21 11:02:56 +02:00
Miroslav Stampar
f494004f44 Switching to the getSafeExString (where it can be used) 2015-09-10 15:51:33 +02:00
Miroslav Stampar
72cf9041bf Fixes #1401 2015-09-09 14:46:06 +02:00
Miroslav Stampar
d06646e412 Miniscule change 2015-09-03 10:32:22 +02:00
Miroslav Stampar
41c21ab7f2 Minor consistency patch 2015-09-03 10:19:59 +02:00
Miroslav Stampar
69563fc24f Language fix 2015-09-03 10:18:00 +02:00
Miroslav Stampar
1cf012521d Minor refactoring 2015-08-26 16:18:03 +02:00
Miroslav Stampar
76c8ce0e70 More flexible --sql-file 2015-08-23 22:54:08 +02:00
Miroslav Stampar
e623ee66ad Better approach for #1320 2015-07-30 23:29:31 +02:00
Miroslav Stampar
bcb25823e6 Fixes #1320 2015-07-30 23:19:38 +02:00
Miroslav Stampar
ba86153d29 Fixes #1318 2015-07-28 09:33:40 +02:00
Miroslav Stampar
401905b2dd Minor improvement to UNION file write 2015-07-26 17:02:46 +02:00
Miroslav Stampar
64b45f2ac2 Fixes #1316 2015-07-26 16:34:11 +02:00
Miroslav Stampar
ff6b62adf3 Important additional patch for #1170 (for PgSQL >= 9.0) 2015-07-24 15:15:41 +02:00
Miroslav Stampar
b6ea2fdb07 Fixes #1170 2015-07-24 14:56:45 +02:00
Miroslav Stampar
21e8182ac6 Fixes #1305 2015-07-18 17:01:34 +02:00
Miroslav Stampar
1aafe85a3a Fixes #1299 2015-07-15 11:15:06 +02:00
Miroslav Stampar
16f8e4c8ba Removing unused imports 2015-07-12 12:25:02 +02:00
Miroslav Stampar
03f32ae2b6 Merge of an Issue #1227 2015-04-22 17:21:55 +02:00
Miroslav Stampar
7b2c27fa8d One more update for #1200 (better implementation) 2015-03-26 01:22:16 +01:00
Miroslav Stampar
ac74184422 Fixes #1200 2015-03-25 23:43:48 +01:00
Bernardo Damele
32373996ee standard message 2015-02-15 20:53:40 +00:00
Miroslav Stampar
45bdefd29b Update of copyright 2015-01-06 15:02:16 +01:00
Miroslav Stampar
e2edebd406 Patch for an Issue #1069 2014-12-30 09:04:41 +00:00
Miroslav Stampar
3056fd4765 Fix for an Issue #1055 2014-12-22 05:56:48 +01:00
Miroslav Stampar
0b91a6098f Patch for an Issue #1050 2014-12-18 15:13:44 +01:00
Miroslav Stampar
8947f2df96 Patch for an Issue #1047 2014-12-17 23:07:27 +01:00
Miroslav Stampar
87f8753483 Fixing a problem with AV detection 2014-12-14 00:10:43 +01:00
Miroslav Stampar
b42a15d876 Minor patch related to the Issue #1025 2014-12-13 23:37:04 +01:00
Miroslav Stampar
bd99470a4a Minor update to cleanup properly new xp_cmdshell 2014-12-05 22:01:59 +01:00
Miroslav Stampar
821e4bf507 Patch for an Issue #987 2014-12-03 08:46:02 +01:00
Miroslav Stampar
636e0588d5 Patch for an Issue #981 2014-12-02 10:29:09 +01:00
Miroslav Stampar
40eb1973d7 Patch for an Issue #961 2014-11-23 15:33:04 +01:00
Miroslav Stampar
a827453eb7 Update for an Issue #907 2014-11-16 08:31:01 +01:00
Miroslav Stampar
c98bd521c5 Patch for an Issue #923 2014-11-11 11:53:51 +01:00
Miroslav Stampar
d400dc27f2 Patch for an Issue #907 2014-11-08 21:54:34 +01:00
Miroslav Stampar
d087565051 Fix for Issues #905 and #906 2014-11-06 11:41:10 +01:00
Miroslav Stampar
954bd54689 Fix for an Issue #895 2014-11-03 08:31:50 +01:00
Miroslav Stampar
65c3dfd651 Bug fix (proper path joining) 2014-10-31 18:40:11 +01:00
Miroslav Stampar
3b3b8d4ef2 Potential bug fix (escaping formatted regular expressions) 2014-10-28 14:02:55 +01:00
Miroslav Stampar
be213bc657 Bug fix for crashes caused by '--search --exclude-sysdbs --current-db' 2014-10-12 22:41:53 +02:00
Miroslav Stampar
57eb19377e Minor code refactoring 2014-09-16 09:07:31 +02:00
Miroslav Stampar
ae8c12c9c3 Fix for an Issue #818 2014-09-09 16:22:13 +02:00
Miroslav Stampar
b1467f4c1f Minor update 2014-09-03 23:09:10 +02:00
Miroslav Stampar
dc2ee8bfa0 Minor update 2014-08-30 21:53:09 +02:00
Miroslav Stampar
1069399668 Minor style update 2014-08-21 00:32:15 +02:00
Miroslav Stampar
5d10bae31f Removing trailing blank lines 2014-08-20 21:07:19 +02:00
Miroslav Stampar
77ba63b060 Minor language update 2014-08-19 23:56:04 +02:00
Miroslav Stampar
30fb8e8a50 Patch regarding Issue #774 (SELECT is redundant in case of LOAD_FILE) 2014-08-16 14:23:07 +02:00
Miroslav Stampar
5436635acb Minor update 2014-08-13 13:32:22 +02:00
Bernardo Damele
4e909a2a05 code cleanup 2014-07-01 00:58:49 +01:00
Bernardo Damele
b38bd1e7fd code cleanup - issue #742 2014-07-01 00:35:02 +01:00
Bernardo Damele
5c64a31a9c works now.. can upload arbitrary files via powershell now, closes #742 2014-07-01 00:26:59 +01:00
Bernardo Damele
3e431ec202 working on allowing large files to be uploaded via powershell - issue #742 2014-06-30 23:53:04 +01:00
Bernardo Damele
1218e694ef more on issue #742 2014-06-30 20:43:48 +01:00
Bernardo Damele
8ce98ae22c more on issue #742 2014-06-30 20:43:02 +01:00
Bernardo Damele
0c1b3f2dbc more on issue #742 2014-06-30 20:39:21 +01:00
Bernardo Damele
ce67156d80 trying some more encoding as the file wasnt exactly the same - issue #742 2014-06-30 20:26:05 +01:00
Bernardo Damele
3ec37b14a6 trying some more encoding as the file wasnt exactly the same - issue #742 2014-06-30 20:23:57 +01:00
Bernardo Damele
9c583bc96e trying some more encoding as the file wasnt exactly the same - issue #742 2014-06-30 20:23:01 +01:00
Bernardo Damele
5c4c4c6abe minor cleanup, prefer powershell to the other two techniques to upload files - issue #742 2014-06-30 19:11:01 +01:00
Bernardo Damele
fcc50193b3 working on #742 - working on it 2014-06-30 18:50:33 +01:00
Bernardo Damele
4be0b366eb working on #742 - working on it 2014-06-30 18:38:18 +01:00
Bernardo Damele
6999c3413c working on #742 - working on it 2014-06-30 18:26:40 +01:00
Bernardo Damele
aa076013a7 working on #742 - minor fixes 2014-06-30 18:18:14 +01:00
Bernardo Damele
563c73c4c7 working on #742 - code cleanup 2014-06-30 18:09:11 +01:00
Bernardo Damele
94c09019fd working on #742 - missing import 2014-06-30 18:07:45 +01:00
Bernardo Damele
cd260a7470 working on #742 - powershell support for file write on MSSQL 2014-06-30 18:06:19 +01:00
Bernardo Damele
e2aed41c6f minor fixed 2014-06-30 17:30:20 +01:00
Miroslav Stampar
ac43051df2 Patch for an Issue #553 2014-06-23 21:24:45 +02:00
Miroslav Stampar
11dee4c8cd Patch for an Issue #731 2014-06-22 00:19:10 +02:00
Miroslav Stampar
2beeb178fb Minor patch 2014-06-12 08:56:50 +02:00
Miroslav Stampar
65c4ea1562 Minor update 2014-05-20 22:30:53 +02:00
Miroslav Stampar
401f896175 Patch related to the Issue #696 2014-05-20 13:44:10 +02:00
Miroslav Stampar
67115ed558 Minor fix (for a bug reported via ML) 2014-05-17 15:00:09 +02:00
Miroslav Stampar
c51e219cc1 Fix for an Issue #691 2014-05-15 19:39:18 +02:00
Miroslav Stampar
fc3c321b01 Minor update 2014-05-15 19:08:41 +02:00
Miroslav Stampar
e7bc57b00b Fix for an Issue #683 2014-05-04 20:44:11 +02:00
Miroslav Stampar
3beb1ae2a1 Trivial fix (backslashes should be escaped) 2014-04-06 18:15:06 +02:00
Miroslav Stampar
fca57da1cf Fix for --tables on HSQLDB 2014-03-07 15:57:41 +01:00
Miroslav Stampar
d05bfdd7dd Implementing option '--where' (Issue #605) 2014-02-11 16:20:45 +01:00
Miroslav Stampar
de8cb15350 Fix for an Issue #601 2014-02-05 15:11:39 +01:00
Miroslav Stampar
ab36e5a2f0 Fix for an Issue #597 2014-01-15 10:29:58 +01:00
Bernardo Damele
43a4e85749 updated copyright 2014-01-13 17:24:49 +00:00
Miroslav Stampar
6863436d4e Implementation for an Issue #596 2014-01-13 10:05:56 +01:00
Bernardo Damele
a06a6de193 minor bug fix 2013-12-06 13:26:34 +00:00
Miroslav Stampar
b7244a07cb Changing testing payload for MsSQL (BINARY_CHECKSUM seems to be blocked in some cases) 2013-12-04 11:32:42 +01:00
Miroslav Stampar
24e67289c8 Bug fix 2013-11-25 11:57:20 +01:00
Miroslav Stampar
354aaeae5b Removing unused imports 2013-11-12 14:11:07 +01:00
Miroslav Stampar
2ee4b81a6e Minor fix 2013-10-18 15:59:25 +02:00
Miroslav Stampar
5aaf18f556 Minor update 2013-10-18 15:26:55 +02:00
Miroslav Stampar
7104e00c95 Minor update 2013-10-18 14:47:11 +02:00
Miroslav Stampar
7cb7c6361f Minor fix (Sybase Adaptive Server Anywhere doesn't have support for tempdb_id()) 2013-10-17 16:04:55 +02:00
Miroslav Stampar
ebccba922b Fix for an Issue #543 2013-10-16 11:25:55 +02:00
Miroslav Stampar
6a3d804af5 Minor update (display NULL instead of FALSE when non-query statement is sqlQueried) 2013-09-02 11:32:32 +02:00
Miroslav Stampar
3bbe02a714 Bug fix (0 datetime value not liked by direct connector) 2013-08-22 12:05:59 +02:00
Miroslav Stampar
5721f6007e Fix for an Issue #509 2013-08-18 01:24:40 +02:00
Miroslav Stampar
b2855e0281 Minor patch 2013-08-12 14:25:51 +02:00
Miroslav Stampar
de31688c4f Update for an Issue #481 2013-07-29 18:25:27 +02:00
stamparm
dbb0d7f700 Important fix (Issue #489) - we had a bad presumption than only public schema could be used for enumeration (while all schemas inside a current db could be used) 2013-07-19 13:24:35 +02:00
stamparm
e498694928 Fix for a NoneType/--columns issue reported over ML 2013-07-02 15:02:07 +02:00
Bernardo Damele
5882ab59d8 fixed #478 2013-07-01 22:30:59 +01:00
stamparm
f97b35dcc1 Patch for an Issue #475 2013-07-01 13:43:38 +02:00
stamparm
b9491317a6 Minor update (Issue #475) 2013-07-01 13:11:16 +02:00
stamparm
017ce22a2f Minor consistency patch (Issue #475) 2013-07-01 13:01:53 +02:00
Bernardo Damele
cfbed43066 Merge branch 'master' of github.com:sqlmapproject/sqlmap 2013-07-01 11:54:35 +01:00
Bernardo Damele
6468211f65 tables and databases names on MSQLDB are capitalized 2013-07-01 11:54:31 +01:00
stamparm
5ff09aff63 Some more adjustments (Issue #475) 2013-07-01 12:50:12 +02:00
stamparm
4fb33bb26c Some more cleanup (Issue #475) 2013-07-01 12:11:09 +02:00
stamparm
b5e644694a Minor cleanup 2013-07-01 12:05:02 +02:00
stamparm
f7d15cb465 Official naming is HSQLDB (and/or HyperSQL) 2013-07-01 11:57:47 +02:00
Miroslav Stampar
aeb83ba651 Merge pull request #475 from Meatballs1/hsql_clean
HSQL Payloads and Query Support
2013-07-01 02:38:04 -07:00
stamparm
991cafc4e4 Minor refactoring 2013-06-26 13:53:42 +02:00
stamparm
c83cca4cd4 Minor patch 2013-06-26 13:49:34 +02:00
Meatballs
eb2012c599 Fix escaper 2013-06-24 23:50:33 +01:00
Meatballs
5b6c01d739 Escaper 2013-06-24 23:41:45 +01:00
Meatballs
a393b17513 modify fingerprint value 2013-06-24 15:12:37 +01:00
Meatballs
550693032b Remote whitespace in databases.py 2013-06-24 15:03:08 +01:00
Meatballs
b886e47b6d Add unimplemented files 2013-06-24 14:53:41 +01:00
Meatballs
62000c6406 Remaining files 2013-06-24 14:42:58 +01:00
Meatballs
d739d5062d hsql plugin folder 2013-06-24 14:34:25 +01:00
Miroslav Stampar
95ed6b7203 Minor patch (Issue #470) 2013-06-24 14:37:45 +02:00
Miroslav Stampar
92dfb0f817 Minor patch 2013-06-16 12:35:20 +02:00
Miroslav Stampar
c2dce66a46 Fix for an user reported bug (tbl can be None) 2013-06-16 12:35:05 +02:00
Miroslav Stampar
540493a69f Fix for empty strings (previously '' was just removed) 2013-06-11 12:56:20 +02:00
Miroslav Stampar
ca53dfad84 Minor fix 2013-06-01 13:44:50 +02:00
stamparm
1c2197e8de Minor bug fix for an Issue #361 (removal of that ugly garbage clean warning message after sqlmap ends) 2013-04-15 16:18:40 +02:00
stamparm
1c47b33020 Few bug fixes in -d (there were late values in payloads in some cases; sqlalchemy returns RowProxy for tuple) 2013-04-15 15:23:45 +02:00
stamparm
f936746423 Code restyling 2013-04-15 14:31:27 +02:00
stamparm
aed738d6e6 Update for an Issue #361 2013-04-15 14:20:21 +02:00
stamparm
3e65037a05 Introducing lib/utils/sqlalchemy.py (Issue #361) 2013-04-15 10:33:25 +02:00
stamparm
ae6ce7db30 Removal of unused imports 2013-03-20 10:44:15 +01:00
Miroslav Stampar
db0a1e58b9 Update for an Issue #352 2013-03-11 14:58:05 +01:00
Bernardo Damele
34ce8742f1 removed leftover 2013-02-26 10:12:18 +00:00
stamparm
9d81be7af5 Removing redundant piece of code 2013-02-25 14:12:57 +01:00
stamparm
dc9dc233b6 Adding a comment 2013-02-25 14:07:20 +01:00
stamparm
0d2138a4a0 Minor fix for escaping unicode strings in SQLite escaper 2013-02-25 14:06:46 +01:00
Miroslav Stampar
f817105db3 Minor bug fix 2013-02-18 14:40:39 +01:00
Miroslav Stampar
046f347f5d Minor fix 2013-02-15 17:36:58 +01:00
Miroslav Stampar
834ae6aac0 Another minor update 2013-02-15 17:36:58 +01:00
Miroslav Stampar
97c06854a4 Minor fixes 2013-02-15 17:36:58 +01:00
Miroslav Stampar
67157fa2ba Some more minor fixes 2013-02-15 14:28:05 +01:00
Miroslav Stampar
b1c0cabde5 Minor fixes 2013-02-15 14:21:51 +01:00
Miroslav Stampar
2fb599619a Bug fix 2013-02-15 13:55:09 +01:00
Miroslav Stampar
5d068896a9 Minor bug fix 2013-02-15 09:54:51 +01:00
Bernardo Damele
d8942d2ae0 fixes #396 - adapted the engine to properly verify all steps of takeover were successul, minor code refactoring too 2013-02-14 18:32:22 +00:00
Bernardo Damele
d42d28392a avoid tracebacks because the parameter does not exist 2013-02-14 13:18:33 +00:00
Bernardo Damele
c9c520a325 no need to repeat the debug message each time this function is called 2013-02-14 13:18:15 +00:00
Bernardo Damele
1de109747f minor bug fix introduced in 2267dd8f47 2013-02-14 12:39:17 +00:00
Miroslav Stampar
0b8de94ace Putting cases with INTO here too 2013-02-14 12:35:17 +01:00
Bernardo Damele
4b9d8ed673 reverted a previous commit as not all distributions create a link file /usr/bin/python2 to the Python interpreter 2013-02-14 11:32:17 +00:00
Bernardo Damele
2267dd8f47 working on #392 to fix --os-cmd and --os-shell output parsing 2013-02-14 11:31:20 +00:00
Bernardo Damele
a67ef4117f make sure to use Python 2 interpreter when default system Python is version 3 2013-02-14 11:25:04 +00:00
Bernardo Damele
cbb5c79d29 typo fix 2013-02-13 13:07:47 +00:00
Bernardo Damele
d9e716b95d added two debug messages for clarity 2013-02-13 12:46:45 +00:00
Miroslav Stampar
dd6f50a00e Removing unused imports 2013-02-13 11:15:24 +01:00
Miroslav Stampar
dc41484b3f Refactoring of funcionality for finding out if stacking is available 2013-02-13 09:57:16 +01:00
Miroslav Stampar
c9447fbbe7 Minor patch to return False if --is-dba returns None 2013-02-12 13:04:42 +01:00
Miroslav Stampar
093a93938c Bug fix (making non-query statements available for stacked conditional-error blind cases too) 2013-02-11 20:43:12 +01:00
Bernardo Damele
3786541681 Merge branch 'master' of github.com:sqlmapproject/sqlmap 2013-02-11 18:08:04 +00:00
Bernardo Damele
8bfee3b802 started to work on #373 to improve usability when user is not DBA 2013-02-11 18:07:58 +00:00
Miroslav Stampar
6d802867fc Bug fix (in some cases if random values are parsable as MMDD they will result as valid non-NULL TIMESTAMPADD value back - e.g. values 1224,0101,0212) 2013-02-11 12:02:03 +01:00
Bernardo Damele
b477c56b52 first steps to allow multiple scans on the same taskid - issue #297 2013-02-07 00:05:26 +00:00
Miroslav Stampar
2f69a94bcf Bug fix for --search -C 2013-02-05 12:24:57 +01:00
Miroslav Stampar
353c1cb63b Bug fix for escaping in SQLite 3 2013-02-05 11:58:11 +01:00
Miroslav Stampar
e836629215 Bug fixes for search (safeStringFormat should not replace all if given scalar values) 2013-02-05 11:37:49 +01:00
Miroslav Stampar
31230c5a42 Minor fix 2013-02-05 11:23:22 +01:00
Miroslav Stampar
87ad96bf01 Minor cosmetic fix 2013-02-05 11:18:46 +01:00