Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							caf6220c53 
							
						 
					 
					
						
						
							
							done with implementation for retrieving table names via access system table(s)  
						
						
						
					 
					
						2011-02-09 10:50:38 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							5050a76b59 
							
						 
					 
					
						
						
							
							update regarding reading of table names from access system tables  
						
						
						
					 
					
						2011-02-09 10:33:29 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							14c87ec80d 
							
						 
					 
					
						
						
							
							minor fix  
						
						
						
					 
					
						2011-02-04 13:29:02 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e3a3ae11cc 
							
						 
					 
					
						
						
							
							Proper return from error-based technique enumeration  
						
						
						
					 
					
						2011-01-31 21:13:29 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							9fc0bedea8 
							
						 
					 
					
						
						
							
							Minor bug fixes  
						
						
						
					 
					
						2011-01-30 21:01:57 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							367d0639f0 
							
						 
					 
					
						
						
							
							refactoring (class names should always be Capital cased)  
						
						
						
					 
					
						2011-01-28 16:36:09 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							77999fb39d 
							
						 
					 
					
						
						
							
							Allow in --sql-shell to always ('a') retrieve query output.  
						
						... 
						
						
						
						Minor bug fix in case with --columns it is not possible to retrieve a column datatype. 
						
					 
					
						2011-01-20 21:49:06 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							bade0e3124 
							
						 
					 
					
						
						
							
							Major code refactoring - centralized all kb.dbms* info for both retrieval and set.  
						
						
						
					 
					
						2011-01-19 23:06:15 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							daebb0010b 
							
						 
					 
					
						
						
							
							Major bug fix to properly process custom queries (--sql-query/--sql-shell) when technique in use is error-based.  
						
						... 
						
						
						
						Alignment of SQL statement payload packing/unpacking between all of the techniques.
Minor bug fix to use the proper charset (2, numbers) when dealing with COUNT() in custom queries too.
Minor code cleanup. 
						
					 
					
						2011-01-18 23:02:11 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e4e9b11b79 
							
						 
					 
					
						
						
							
							Minor code refactoring and adjustments - kb.dbms is needed in fingerprint.py, not getIdentifiedDBMS because when checkDbms() method is called, it's within the fingerprint phase and at that stage, getIdentifiedDBMS() would always return kb.misc.fpDbms.  
						
						
						
					 
					
						2011-01-14 12:47:07 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							3c95d71ea5 
							
						 
					 
					
						
						
							
							Minor bug fix - restored of so called kb.misc.testedDbms (now kb.misc.fpDbms) to force the DBMS (only) during the fingerprint phase  
						
						
						
					 
					
						2011-01-14 11:55:20 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							2ac8debea0 
							
						 
					 
					
						
						
							
							Major code refactoring - moved to one location only (getIdentifiedDBMS() in common.py) the retrieval of identified/fingerprinted DBMS.  
						
						... 
						
						
						
						Minor bug fixes thanks to previous refactoring too. 
						
					 
					
						2011-01-13 17:36:54 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							8a67aea754 
							
						 
					 
					
						
						
							
							One more step to fully working UNION exploitation after merge into detection phase  
						
						
						
					 
					
						2011-01-12 01:13:32 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							8bdb7ec58c 
							
						 
					 
					
						
						
							
							Ahead with UNION exploitation after UNION test moved to detection phase - a lot to do yet.  
						
						
						
					 
					
						2011-01-12 00:47:39 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							06230e4d92 
							
						 
					 
					
						
						
							
							Minor code refactoring and cosmetics  
						
						
						
					 
					
						2011-01-11 21:46:21 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							0676b38063 
							
						 
					 
					
						
						
							
							revert of one thing for Bernardo and minor update  
						
						
						
					 
					
						2011-01-10 10:30:17 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							8e83a26acf 
							
						 
					 
					
						
						
							
							minor fix  
						
						
						
					 
					
						2011-01-07 17:53:17 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							cc46940159 
							
						 
					 
					
						
						
							
							Minor refactoring  
						
						
						
					 
					
						2011-01-07 17:10:32 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							b313a20a3f 
							
						 
					 
					
						
						
							
							some fixes  
						
						
						
					 
					
						2011-01-07 16:39:47 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							16a06117f7 
							
						 
					 
					
						
						
							
							Mere cosmetics  
						
						
						
					 
					
						2011-01-07 16:36:32 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							8a48baf789 
							
						 
					 
					
						
						
							
							update for a "problem" reported by nightman@email.de where he lost all of large dumped table because in the middle of dumping 401 was raised  
						
						
						
					 
					
						2011-01-04 13:23:59 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							b763feafd9 
							
						 
					 
					
						
						
							
							bug fix (TypeError: object of type 'NoneType' has no len())  
						
						
						
					 
					
						2011-01-02 12:26:31 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							f0dad2a1e4 
							
						 
					 
					
						
						
							
							minor bug fix (in multiple item search only last item was shown)  
						
						
						
					 
					
						2011-01-02 12:23:36 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							7b9d978cf9 
							
						 
					 
					
						
						
							
							minor fix (database and/or table names with - sign inside needs to be escaped by ` character or will lead to a "SQL syntax")  
						
						
						
					 
					
						2011-01-02 11:01:20 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							e28b9f26fc 
							
						 
					 
					
						
						
							
							minor fix  
						
						
						
					 
					
						2011-01-02 08:01:01 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							7ea3d060f6 
							
						 
					 
					
						
						
							
							some fixes/updates here and there  
						
						
						
					 
					
						2011-01-01 12:41:51 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							6f17e84e19 
							
						 
					 
					
						
						
							
							minor fix  
						
						
						
					 
					
						2010-12-30 08:29:20 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							a77b186aca 
							
						 
					 
					
						
						
							
							minor fix  
						
						
						
					 
					
						2010-12-27 16:55:27 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							5015f04826 
							
						 
					 
					
						
						
							
							minor update  
						
						
						
					 
					
						2010-12-27 16:36:05 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							9c1676bdfa 
							
						 
					 
					
						
						
							
							minor cosmetics  
						
						
						
					 
					
						2010-12-27 14:44:00 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							9fb0e0fc85 
							
						 
					 
					
						
						
							
							resume of brute forced data is now available  
						
						
						
					 
					
						2010-12-27 14:17:20 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							3d23f226ae 
							
						 
					 
					
						
						
							
							minor update  
						
						
						
					 
					
						2010-12-27 11:47:50 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							68462466f2 
							
						 
					 
					
						
						
							
							minor fix for a bug reported by shaohua pan (argument of type 'NoneType' is not iterable)  
						
						
						
					 
					
						2010-12-27 11:36:36 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							51a492e17d 
							
						 
					 
					
						
						
							
							pretty important commit (now dumped tables are prone to dictionary attack)  
						
						
						
					 
					
						2010-12-27 10:56:28 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c8d5a6b980 
							
						 
					 
					
						
						
							
							update  
						
						
						
					 
					
						2010-12-27 00:41:16 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							89c2640d23 
							
						 
					 
					
						
						
							
							basic --search now works with MS Access  
						
						
						
					 
					
						2010-12-26 23:50:16 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c4d6a367e9 
							
						 
					 
					
						
						
							
							this way order given in -C is preserved  
						
						
						
					 
					
						2010-12-26 14:11:42 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c93f2a703d 
							
						 
					 
					
						
						
							
							minor update  
						
						
						
					 
					
						2010-12-26 14:02:16 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							e41acb6fc2 
							
						 
					 
					
						
						
							
							further ms access improvements  
						
						
						
					 
					
						2010-12-26 02:13:56 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							2c8115eed9 
							
						 
					 
					
						
						
							
							further improvement for ms access table dumping  
						
						
						
					 
					
						2010-12-26 01:04:30 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							5249762794 
							
						 
					 
					
						
						
							
							update  
						
						
						
					 
					
						2010-12-25 16:46:33 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							fb099615e2 
							
						 
					 
					
						
						
							
							minor update  
						
						
						
					 
					
						2010-12-25 11:16:35 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							6845d402fa 
							
						 
					 
					
						
						
							
							well, here and there, merry Christmas to all :)  
						
						
						
					 
					
						2010-12-24 20:17:53 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							706d8e0b88 
							
						 
					 
					
						
						
							
							development update (basic ms access dumping implemented)  
						
						
						
					 
					
						2010-12-24 19:53:11 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							7c06dbffc3 
							
						 
					 
					
						
						
							
							bug fix (AttributeError: 'unicode' object has no attribute 'sort')  
						
						
						
					 
					
						2010-12-22 18:55:50 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							b3da473840 
							
						 
					 
					
						
						
							
							Minor bug fix when --dbs has only one DB name  
						
						
						
					 
					
						2010-12-22 14:29:57 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							c9ab8ae60e 
							
						 
					 
					
						
						
							
							Bug fix to properly identify if current user is DBA (--is-dba) on MySQL  
						
						
						
					 
					
						2010-12-22 14:06:01 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c89021f0bb 
							
						 
					 
					
						
						
							
							some fixes  
						
						
						
					 
					
						2010-12-22 11:46:18 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							385e208f38 
							
						 
					 
					
						
						
							
							code refactoring regarding standard output suppression and some threading issues  
						
						
						
					 
					
						2010-12-21 14:21:24 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							6b37ddada4 
							
						 
					 
					
						
						
							
							removed some blank trailing spaces (with extra/shutils/blanks.sh)  
						
						
						
					 
					
						2010-12-21 10:31:56 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							36862e2efa 
							
						 
					 
					
						
						
							
							update  
						
						
						
					 
					
						2010-12-18 15:57:47 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							a067e805fa 
							
						 
					 
					
						
						
							
							minor update  
						
						
						
					 
					
						2010-12-17 22:23:01 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							e98d9c08e1 
							
						 
					 
					
						
						
							
							dumping table is now possible on Firebird too  
						
						
						
					 
					
						2010-12-12 14:38:07 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							b1babeefe5 
							
						 
					 
					
						
						
							
							update regarding dumping of tables with blind on Sqlite  
						
						
						
					 
					
						2010-12-11 22:00:16 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							b02bd55edc 
							
						 
					 
					
						
						
							
							minor refactoring  
						
						
						
					 
					
						2010-12-10 13:04:36 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							5764816891 
							
						 
					 
					
						
						
							
							minor cosmetics  
						
						
						
					 
					
						2010-12-03 22:28:09 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							2cc167a42e 
							
						 
					 
					
						
						
							
							fix for a bug reported by ToR: "AttributeError: 'NoneType' object has no attribute 'isdigit'"  
						
						
						
					 
					
						2010-12-02 18:57:43 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							c22338ce90 
							
						 
					 
					
						
						
							
							Removed --error-test, --stacked-test and --time-test switches and adapted the code accordingly. This is due to the fact that the new XML based detection engine already supports all of those tests (and more).  
						
						
						
					 
					
						2010-11-29 11:47:58 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							ba4ea32603 
							
						 
					 
					
						
						
							
							first working version of dictionary attack  
						
						
						
					 
					
						2010-11-23 13:24:02 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							a34c1b287c 
							
						 
					 
					
						
						
							
							Bug fix related to properly identify and parse the version from the banner (used for --stacked-test and other matters on MySQL/PgSQL)  
						
						
						
					 
					
						2010-11-12 11:33:11 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							42272ca78c 
							
						 
					 
					
						
						
							
							minor update  
						
						
						
					 
					
						2010-11-11 22:26:36 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							be992b4471 
							
						 
					 
					
						
						
							
							update regarding common columns existance check  
						
						
						
					 
					
						2010-11-11 17:09:31 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							4be0631161 
							
						 
					 
					
						
						
							
							refactoring of brute force techniques  
						
						
						
					 
					
						2010-11-09 09:42:43 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							dac7436edf 
							
						 
					 
					
						
						
							
							Fix inconsistence with -b --error-test  
						
						
						
					 
					
						2010-11-08 15:36:07 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							862395ced1 
							
						 
					 
					
						
						
							
							further refactoring (all enumerations are now put into enums.py)  
						
						
						
					 
					
						2010-11-08 09:20:02 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c8fe2fa8d8 
							
						 
					 
					
						
						
							
							minor fix  
						
						
						
					 
					
						2010-11-04 22:00:14 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							d7dbf814a0 
							
						 
					 
					
						
						
							
							fix/update for Access  
						
						
						
					 
					
						2010-11-04 21:47:21 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							6adee3792a 
							
						 
					 
					
						
						
							
							removed all trailing spaces from blank lines  
						
						
						
					 
					
						2010-11-03 10:08:27 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							4b56fa4f8f 
							
						 
					 
					
						
						
							
							now --tables work for MaxDB  
						
						
						
					 
					
						2010-11-02 22:11:45 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							b761523f3f 
							
						 
					 
					
						
						
							
							now --users works for MaxDB too  
						
						
						
					 
					
						2010-11-02 21:52:48 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							cd0d4135ac 
							
						 
					 
					
						
						
							
							implemented --banner for MaxDB and some minor fixes  
						
						
						
					 
					
						2010-11-02 20:51:55 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							685a8e7d2c 
							
						 
					 
					
						
						
							
							refactoring of hard coded dbms names  
						
						
						
					 
					
						2010-11-02 11:59:24 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							9d2c81baa9 
							
						 
					 
					
						
						
							
							more update for ms access  
						
						
						
					 
					
						2010-11-02 11:06:47 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							486a113560 
							
						 
					 
					
						
						
							
							Consolidate logger messages for --*-test switches  
						
						
						
					 
					
						2010-10-31 16:58:38 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							eab331ebd7 
							
						 
					 
					
						
						
							
							Minor bug fix  
						
						
						
					 
					
						2010-10-31 13:46:08 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							65a0a8d285 
							
						 
					 
					
						
						
							
							Delegate urlencoding to agent.py only  
						
						
						
					 
					
						2010-10-31 13:28:05 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							17e8abe841 
							
						 
					 
					
						
						
							
							Removed useless call to urlencode()  
						
						
						
					 
					
						2010-10-31 12:47:22 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							a921fe0d5d 
							
						 
					 
					
						
						
							
							fix for using --banner --stacked-test together  
						
						
						
					 
					
						2010-10-29 15:31:24 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							d75578c81f 
							
						 
					 
					
						
						
							
							some update regarding common tables  
						
						
						
					 
					
						2010-10-29 09:00:51 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							749e25a217 
							
						 
					 
					
						
						
							
							Implementation of --passwords for Sybase  
						
						
						
					 
					
						2010-10-26 21:35:30 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							f5904d0bc0 
							
						 
					 
					
						
						
							
							Major bug fix to --union-test  
						
						
						
					 
					
						2010-10-25 23:39:55 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							8a9a57c709 
							
						 
					 
					
						
						
							
							update for Sybase and major bug fix for --passwords on MSSQL  
						
						
						
					 
					
						2010-10-25 22:11:38 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							9b56fbafbe 
							
						 
					 
					
						
						
							
							that Sybase is going to be pain in the ass  
						
						
						
					 
					
						2010-10-25 21:43:13 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							debaf2215f 
							
						 
					 
					
						
						
							
							Consistency between cmdline.py, optiondict.py and sqlmap.conf and got rid of --union-use switch  
						
						
						
					 
					
						2010-10-25 15:54:45 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							215175e3b7 
							
						 
					 
					
						
						
							
							Minor code adjustments  
						
						
						
					 
					
						2010-10-25 14:11:47 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							32728d14b7 
							
						 
					 
					
						
						
							
							fix for --union-use with --error-test  
						
						
						
					 
					
						2010-10-25 12:25:29 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							f8850e3f41 
							
						 
					 
					
						
						
							
							update (xml fix and refactoring)  
						
						
						
					 
					
						2010-10-23 07:44:34 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							a7a53af924 
							
						 
					 
					
						
						
							
							update for Sybase  
						
						
						
					 
					
						2010-10-23 07:37:43 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							a8e42a4f2b 
							
						 
					 
					
						
						
							
							bug fix  
						
						
						
					 
					
						2010-10-23 06:42:21 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							dec4d858b3 
							
						 
					 
					
						
						
							
							fix for Bug  #207  
						
						
						
					 
					
						2010-10-22 14:01:48 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							1b2ec826bf 
							
						 
					 
					
						
						
							
							misc fixes regarding new query retrieval format  
						
						
						
					 
					
						2010-10-21 23:17:06 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							bc79eec702 
							
						 
					 
					
						
						
							
							removed queriesfile.py, implemented XMLObject approach (still shell.py and udf.py TODO)  
						
						
						
					 
					
						2010-10-21 13:13:12 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e73e06069b 
							
						 
					 
					
						
						
							
							Minor code refactoring  
						
						
						
					 
					
						2010-10-20 22:09:03 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							1b376c99a6 
							
						 
					 
					
						
						
							
							removed temp dictionary and replaced with kb.misc  
						
						
						
					 
					
						2010-10-19 23:00:19 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							6a8b1046d4 
							
						 
					 
					
						
						
							
							first successfull run of error based sqlmap in history :). tested --banner, --current-user, --current-db on 4 major DBMSes. still hidden from users (turn on flag error in getValue() in inject.py)  
						
						
						
					 
					
						2010-10-19 12:02:04 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e7c8be1d45 
							
						 
					 
					
						
						
							
							Minor layout adjustments  
						
						
						
					 
					
						2010-10-15 15:37:15 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							4f7f20b94f 
							
						 
					 
					
						
						
							
							sorry, cosmetics  
						
						
						
					 
					
						2010-10-14 23:18:29 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							8b48833136 
							
						 
					 
					
						
						
							
							large commit with copyright header modifications  
						
						
						
					 
					
						2010-10-14 14:41:14 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							8abcdae1b5 
							
						 
					 
					
						
						
							
							some update  
						
						
						
					 
					
						2010-09-30 19:45:23 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							cf8e92699c 
							
						 
					 
					
						
						
							
							changes regarding EXISTS feature  
						
						
						
					 
					
						2010-09-30 12:35:45 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							e176b36a7f 
							
						 
					 
					
						
						
							
							update  
						
						
						
					 
					
						2010-09-24 22:09:33 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							18db96c45f 
							
						 
					 
					
						
						
							
							fix for bug reported by David Guimaraes (colEntry = entry[index] - IndexError: list index out of range)  
						
						
						
					 
					
						2010-09-01 09:25:21 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							b0ba559af5 
							
						 
					 
					
						
						
							
							minor update  
						
						
						
					 
					
						2010-08-31 14:31:17 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c4040ab297 
							
						 
					 
					
						
						
							
							fix for Feature  #136  
						
						
						
					 
					
						2010-08-31 14:25:37 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							12a5ec9f3d 
							
						 
					 
					
						
						
							
							more unicode refactoring  
						
						
						
					 
					
						2010-06-02 12:45:40 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							b798222dd7 
							
						 
					 
					
						
						
							
							Minor fixes  
						
						
						
					 
					
						2010-05-30 14:53:13 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							06af405efd 
							
						 
					 
					
						
						
							
							Adapted and merged in patch to support XML output (-x switch) - still in beta.  
						
						... 
						
						
						
						Minor bug fixes and adjustments. 
						
					 
					
						2010-05-28 16:43:04 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							f24187f251 
							
						 
					 
					
						
						
							
							few fixes here and there  
						
						
						
					 
					
						2010-05-28 12:47:03 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							dc83f794ea 
							
						 
					 
					
						
						
							
							fix regarding proper string isinstance checking (including unicode)  
						
						
						
					 
					
						2010-05-25 10:09:35 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e0e2349529 
							
						 
					 
					
						
						
							
							Refactor to --search -C and minor bug fix - See  #190 .  
						
						
						
					 
					
						2010-05-17 16:16:49 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							c9ee11e0e4 
							
						 
					 
					
						
						
							
							Added support to search for tables (--search with -T). See  #190 .  
						
						
						
					 
					
						2010-05-16 20:46:17 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							65a05452f7 
							
						 
					 
					
						
						
							
							Added option --search to work in conjunction with -D (done), -T (soon) or -C (replaces --dump -C) - See  #190 :  
						
						... 
						
						
						
						* --search -D foobar: searches all database names like the ones provided
* --search -T foobar: searches all databases' table names like the ones provided (soon)
* --search -C foobar: replaces --dump -C 
						
					 
					
						2010-05-07 13:40:57 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							90d9900371 
							
						 
					 
					
						
						
							
							Minor bug fix to consider --start and --stop also in partial UNION query SQL injection  
						
						
						
					 
					
						2010-04-30 15:48:40 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							17554759b7 
							
						 
					 
					
						
						
							
							implemented feature request from Ole Rasmussen regarding table name retrieval speedup  
						
						
						
					 
					
						2010-04-15 09:36:13 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							b19de015c5 
							
						 
					 
					
						
						
							
							Minor bugs fixes  
						
						
						
					 
					
						2010-03-31 13:52:51 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							5fdebb5d5b 
							
						 
					 
					
						
						
							
							Added support to directly connect also to Microsoft SQL Server database.  
						
						... 
						
						
						
						Fixed direct connection to always use the same query as of UNION query SQL injection (= one query with multiple columns/entries output).
Minor fixes to Firebird/Access/SQLite connectors to use connector's execute()/fetchall() as wrapper for third-party libraries' methods.
Forced conf.timeout to 10 seconds when directly connecting to database.
Slightly improved regular expression to parse -d parameter.
Added import check for all connectors' third-party libraries.
Code refactoring:
* Moved conf.direct request to direct() function in lib/request/direct.py (code reused where needed).
* Back-delegated to generic connector close() and other methods. 
						
					 
					
						2010-03-31 10:50:47 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							1416cd0d86 
							
						 
					 
					
						
						
							
							Major enhancement to directly connect to the dbms without passing via a sql injection: adapted code accordingly - see  #158 . This feature relies on python third-party libraries to be able to connect to the database. For the moment it has been implemented for MySQL (with python-mysqldb module) and PostgreSQL (with python-psycopg2 module).  
						
						... 
						
						
						
						Minor layout adjustments. 
						
					 
					
						2010-03-26 23:23:25 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							eaa9dd07bc 
							
						 
					 
					
						
						
							
							Minor bug fix for --roles  
						
						
						
					 
					
						2010-03-26 20:45:22 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							2aadc5c939 
							
						 
					 
					
						
						
							
							Added support for --roles (for Oracle ROLE_PRIVS). Enhanced Oracle --privileges to fall-back to USER_SYS_PRIVS if DBA_SYS_PRIVS is not accessible (so session user is not DBA) - Fixes ticket  #180 .  
						
						... 
						
						
						
						Minor enhancement to Firebird to determine if a DB user is a DBA.
Minor code refactoring. 
						
					 
					
						2010-03-25 15:46:06 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							09768a7b62 
							
						 
					 
					
						
						
							
							Major code refactoring: moved and split plugins (mysql, pgsql, mssql, oracle) more granularly and organized.  
						
						... 
						
						
						
						Todo for firebird, sqlite, access. 
						
					 
					
						2010-03-22 22:57:57 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							0d559d14df 
							
						 
					 
					
						
						
							
							Initial support for SQLite (90% approx).  
						
						... 
						
						
						
						Initial support for Firebird (30% approx).
Initial support for Access (10% approx).
Shared libraries code/installation scripts ported to 64bit, directory structure adapted.
Minor code adjustments. 
						
					 
					
						2010-03-18 17:20:54 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							5bd8504f21 
							
						 
					 
					
						
						
							
							Newline adjustment  
						
						
						
					 
					
						2010-03-04 14:23:52 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							58d54b6515 
							
						 
					 
					
						
						
							
							added new option --flush-session  
						
						
						
					 
					
						2010-03-04 13:01:18 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							156fdd96ef 
							
						 
					 
					
						
						
							
							Updated copyright  
						
						
						
					 
					
						2010-03-03 15:26:27 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							950dba5139 
							
						 
					 
					
						
						
							
							Minor bug fix for --start and --stop  
						
						
						
					 
					
						2010-02-02 14:17:39 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							4512ef56d1 
							
						 
					 
					
						
						
							
							Minor bug fixes  
						
						
						
					 
					
						2010-01-11 13:06:16 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							80bd146696 
							
						 
					 
					
						
						
							
							Added support for --dump with -C also on MSSQL  
						
						
						
					 
					
						2010-01-10 19:12:54 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e5dc3f51c8 
							
						 
					 
					
						
						
							
							Display a better message for the moment while working on support for --dump -C on MSSQL  
						
						
						
					 
					
						2010-01-10 00:30:45 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							6c1b31d93c 
							
						 
					 
					
						
						
							
							Adjusted --columns with -C also for Microsoft SQL Server  
						
						
						
					 
					
						2010-01-10 00:21:03 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							ef1180c3c2 
							
						 
					 
					
						
						
							
							Ask also which table(s) to enumerate from when --dump and -C are provided (but not -T) and minor layout adjustment  
						
						
						
					 
					
						2010-01-09 21:39:10 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							f316e722c1 
							
						 
					 
					
						
						
							
							sqlmap 0.8-rc4: --dump option now can also accept only -C: user can provide a string column and sqlmap will enumerate all databases, tables and columns that contain the 'provided_string' or '%provided_string%' then ask the user to dump the entries of only those columns.  
						
						... 
						
						
						
						--columns now accepts also -C option: user can provide a string column and sqlmap will enumerate all columns of a specific table like '%provided_string%'.
Minor enhancements.
Minor bug fixes. 
						
					 
					
						2010-01-09 00:05:00 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							80df1fdcf9 
							
						 
					 
					
						
						
							
							Minor bug fix with --sql-query/shell when providing a statement with DISTINCT  
						
						
						
					 
					
						2010-01-05 16:15:31 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							ce022a3b6e 
							
						 
					 
					
						
						
							
							sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.  
						
						
						
					 
					
						2010-01-02 02:02:12 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							ba2e009fd9 
							
						 
					 
					
						
						
							
							Now it's fixed  
						
						
						
					 
					
						2009-06-29 10:15:10 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							bc31bd1dd9 
							
						 
					 
					
						
						
							
							Minor bug fix  
						
						
						
					 
					
						2009-06-29 10:13:39 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							440a52b84d 
							
						 
					 
					
						
						
							
							Major bug fix to sql-query/sql-shell functionalities  
						
						
						
					 
					
						2009-05-20 10:19:19 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							16b4530bbe 
							
						 
					 
					
						
						
							
							Minor bug fixes to --os-shell (altought web backdoor functionality still to be reviewed).  
						
						... 
						
						
						
						Minor common library code refactoring.
Code cleanup.
Set back the default User-Agent to sqlmap for comparison algorithm reasons.
Updated THANKS. 
						
					 
					
						2009-04-27 23:05:11 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							aec2419410 
							
						 
					 
					
						
						
							
							Fixed character escaping in SQL shell/query functionalities.  
						
						
						
					 
					
						2009-04-23 15:37:12 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							8c0ac767f4 
							
						 
					 
					
						
						
							
							Updated to sqlmap 0.7 release candidate 1  
						
						
						
					 
					
						2009-04-22 11:48:07 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							f91843540f 
							
						 
					 
					
						
						
							
							Major bug fix when the CU alias (current user) is given (with -U option)  
						
						... 
						
						
						
						together with --privileges or --password to work properly also on
MySQL >= 5.0. 
						
					 
					
						2009-01-19 21:25:37 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							5560f0b68a 
							
						 
					 
					
						
						
							
							Updated the copyright  
						
						
						
					 
					
						2009-01-12 21:35:38 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							f92b76a8b0 
							
						 
					 
					
						
						
							
							Minor bug fix  
						
						
						
					 
					
						2008-12-21 16:39:40 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							7e8ac16245 
							
						 
					 
					
						
						
							
							Added preventive check for stacked queries support when executing DDL,  
						
						... 
						
						
						
						DML & co. statements in SQL query and SQL shell. Minor improvements on    
this new feature.
Increased default connection timeout to 30 seconds (needed for vmware
machine not correctly synched). 
						
					 
					
						2008-12-19 20:48:33 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							ad228e6947 
							
						 
					 
					
						
						
							
							Ahead with the improvements to the comparison algorithm.  
						
						... 
						
						
						
						Added support internally to forge CASE statements, used only by
--is-dba query at the moment.
Allow DDL, DML (INSERT, UPDATE, etc.) from user in SQL query and
SQL shell.
Minor code adjustments. 
						
					 
					
						2008-12-19 20:09:46 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							3fe493b63d 
							
						 
					 
					
						
						
							
							Minor enhancement to support an option (--is-dba) to show if the  
						
						... 
						
						
						
						current user is a database management system administrator. 
						
					 
					
						2008-12-18 20:41:11 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							072eb7154c 
							
						 
					 
					
						
						
							
							Major enhancement to support Partial UNION query SQL injection technique too.  
						
						... 
						
						
						
						Minor code cleanup. 
						
					 
					
						2008-12-10 17:23:07 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							78e8a83c11 
							
						 
					 
					
						
						
							
							Minor improvement to be able to provide CU as user value (-U) when enumerating  
						
						... 
						
						
						
						users privileges or users passwords. 
						
					 
					
						2008-12-05 15:32:59 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							dc1f2deb74 
							
						 
					 
					
						
						
							
							Minor bug fix to correctly enumerate columns on Microsoft SQL Server.  
						
						... 
						
						
						
						Minor adjustments to XML signatures.
Updated documentation. 
						
					 
					
						2008-11-25 11:33:44 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							7d0724843f 
							
						 
					 
					
						
						
							
							Major enhancement to the engine to parse XML files and matches on DBMS banner  
						
						... 
						
						
						
						and HTTP response headers.
Initial web application technology fingerprint (for the moment based only on
X-Powered-By HTTP response header and not shown yet to the user).
Minor layout adjustments. 
						
					 
					
						2008-11-17 17:41:02 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							ecc4a98071 
							
						 
					 
					
						
						
							
							Properly moved and improved inject.goStacked() function and newly  
						
						... 
						
						
						
						implemented Time based blind SQL injection now is a single test file
within the lib/techniques/ folder.
Renamed lib/techniques/inference to lib/techniques/blind, it is more
approriate and adapted the rest of the libraries.
Updated ChangeLog file. 
						
					 
					
						2008-11-12 23:44:09 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							9329f8c9c4 
							
						 
					 
					
						
						
							
							Minor enhancement to be able to enumerate table columns and dump table  
						
						... 
						
						
						
						entries also if the database name is not provided by using the current
database on MySQL and MSSQL, the 'public' scheme on PostgreSQL and the
'USERS' TABLESPACE_NAME on Oracle.
Minor bug fix so that when the user provide as SELECT statement to be
processed an asterisk, now it also work if in the FROM there is no
database name specified.
Minor layout adjustments. 
						
					 
					
						2008-11-12 22:53:25 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							81ed7c2086 
							
						 
					 
					
						
						
							
							Initial implementation of support for stacked queries.  
						
						... 
						
						
						
						Added method to test for Time based blind SQL injection query stacking
on the affected parameter a SLEEP() or similar DBMS specific function.
Adapted libraries, plugins and XML with the above changes.
Minor layout adjustments. 
						
					 
					
						2008-11-12 00:36:50 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							2a01de3f0b 
							
						 
					 
					
						
						
							
							Minor bug fix to correctly dump table entries when the column is provided  
						
						
						
					 
					
						2008-11-04 19:54:44 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							206191d164 
							
						 
					 
					
						
						
							
							Major bug fix so that when the expected value of a query (count variable)  
						
						... 
						
						
						
						is an integer and for some reason the resumed value from session file is
a string or a binary file, the query is executed again and and its new
output saved to the session file 
						
					 
					
						2008-11-02 19:21:19 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							09ca578ca1 
							
						 
					 
					
						
						
							
							Major bug fix so that the users' privileges enumeration now works properly also on both MySQL < 5.0 and MySQL >= 5.0 also if the user has provided one or more users with -U option;  
						
						
						
					 
					
						2008-11-02 18:17:12 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							342a5436f4 
							
						 
					 
					
						
						
							
							Minor enhancement to be able to dump entries also on MySQL < 5.0 when DB name, table name and column(s) are provided  
						
						
						
					 
					
						2008-10-26 17:07:55 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							2fcbb57e1c 
							
						 
					 
					
						
						
							
							Minor code restyling  
						
						
						
					 
					
						2008-10-26 17:00:07 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							5216fb6e02 
							
						 
					 
					
						
						
							
							Major bug fix so that the users' privileges enumeration now works properly also on MySQL < 5.0 (fix a traceback)  
						
						
						
					 
					
						2008-10-26 16:45:14 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							8f5fb5657d 
							
						 
					 
					
						
						
							
							Major improvement to correctly enumerate tables, columns and dump tables  
						
						... 
						
						
						
						entries on PostgreSQL when the database name is not 'public' or a system
database and on Oracle. Minor code restyle. 
						
					 
					
						2008-10-26 16:19:15 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							38f13932bc 
							
						 
					 
					
						
						
							
							Minor improvements to queries  
						
						
						
					 
					
						2008-10-20 10:09:37 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							892a7b2f8a 
							
						 
					 
					
						
						
							
							propsets..  
						
						
						
					 
					
						2008-10-15 15:56:32 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							8e3eb45510 
							
						 
					 
					
						
						
							
							After the storm, a restore..  
						
						
						
					 
					
						2008-10-15 15:38:22 +00:00