Bernardo Damele
|
9f1e644f23
|
language fixes
|
2013-04-30 11:44:47 +01:00 |
|
stamparm
|
46557198a5
|
Minor update of doc root names
|
2013-04-29 11:29:59 +02:00 |
|
stamparm
|
1035ee9c3d
|
Patch for an Issue #442
|
2013-04-26 14:49:24 +02:00 |
|
Miroslav Stampar
|
beab72a180
|
Minor language update
|
2013-04-25 19:55:45 +02:00 |
|
stamparm
|
63d7707346
|
Adding support for appending to the existing table dump if --start/--stop is used
|
2013-04-24 16:08:40 +02:00 |
|
stamparm
|
e3a02f56e6
|
Just in case for --force-ssl (if url is returned in e.g. refresh toward the target)
|
2013-04-24 12:35:39 +02:00 |
|
stamparm
|
42a73d8e0b
|
Minor language update
|
2013-04-24 12:10:06 +02:00 |
|
stamparm
|
8d382f00e8
|
Minor style update
|
2013-04-22 11:38:47 +02:00 |
|
Miroslav Stampar
|
a475116853
|
Minor check
|
2013-04-21 21:42:23 +02:00 |
|
stamparm
|
0d92145fc6
|
Minor bug fix
|
2013-04-19 15:40:25 +02:00 |
|
stamparm
|
0cb3ce5765
|
Bug fix (maybe it will have repercusions in future as this was a silent bug)
|
2013-04-19 10:10:06 +02:00 |
|
stamparm
|
b7d4afcc63
|
Moving '--pivot-column' to a General section (Issue #437)
|
2013-04-18 17:12:32 +02:00 |
|
stamparm
|
9d045e14e8
|
Implementation for an Issue #437
|
2013-04-18 17:06:45 +02:00 |
|
stamparm
|
2defc30dc6
|
From now on --dbms-cred can be used also in combination with -d (more flexibility as spotted that one user used in that way on ML)
|
2013-04-17 11:12:15 +02:00 |
|
stamparm
|
feed2274c3
|
Patch for an Issue #435
|
2013-04-17 10:48:17 +02:00 |
|
stamparm
|
c73489aff3
|
Adding a couple of new option validation checks
|
2013-04-16 14:31:10 +02:00 |
|
stamparm
|
7204ec5616
|
Adding a basic validation check (-d with --url)
|
2013-04-16 14:23:27 +02:00 |
|
stamparm
|
6fed1921ed
|
Bug fix (there are cases when provided kwargs containing explicit None values while we want to use the alternative in those kind of cases; there was an intention in original code, while the implementation was buggy)
|
2013-04-16 14:17:41 +02:00 |
|
Miroslav Stampar
|
840ee26a14
|
If SQLAlchemy is available and it has problems while connecting then it should be smarter to not force the other (standard) method - if available
|
2013-04-15 18:42:26 +02:00 |
|
stamparm
|
de99717b00
|
Disable sqlalchemy warnings if applicable
|
2013-04-15 16:29:08 +02:00 |
|
stamparm
|
1c2197e8de
|
Minor bug fix for an Issue #361 (removal of that ugly garbage clean warning message after sqlmap ends)
|
2013-04-15 16:18:40 +02:00 |
|
stamparm
|
6ab2e8eca4
|
Trivial style update
|
2013-04-15 16:09:04 +02:00 |
|
stamparm
|
a3d36fcb73
|
Minor update
|
2013-04-15 16:07:27 +02:00 |
|
stamparm
|
140cffbde2
|
Patch for an Issue #434
|
2013-04-15 15:57:28 +02:00 |
|
stamparm
|
9ccbdb3fdf
|
Added a check for an Issue #361
|
2013-04-15 15:36:10 +02:00 |
|
stamparm
|
1c47b33020
|
Few bug fixes in -d (there were late values in payloads in some cases; sqlalchemy returns RowProxy for tuple)
|
2013-04-15 15:23:45 +02:00 |
|
stamparm
|
f936746423
|
Code restyling
|
2013-04-15 14:31:27 +02:00 |
|
stamparm
|
aed738d6e6
|
Update for an Issue #361
|
2013-04-15 14:20:21 +02:00 |
|
stamparm
|
a9a0d1a3f9
|
Minor update
|
2013-04-15 11:56:19 +02:00 |
|
stamparm
|
10fbeaed7b
|
Code refactoring
|
2013-04-15 11:49:11 +02:00 |
|
stamparm
|
349f885f08
|
Minor patch
|
2013-04-15 11:41:53 +02:00 |
|
stamparm
|
8853e43616
|
Applying patch from Brandon Perry via ML
|
2013-04-15 11:01:07 +02:00 |
|
stamparm
|
3e65037a05
|
Introducing lib/utils/sqlalchemy.py (Issue #361)
|
2013-04-15 10:33:25 +02:00 |
|
Miroslav Stampar
|
b6fee638ef
|
Neutralizing time of cookie expiration (in case of --load-cookies)
|
2013-04-14 01:13:08 +02:00 |
|
Miroslav Stampar
|
ed5599f489
|
In case that cookie file is given and cookie header inside request file clashes with one of contained cookies, give cookie file greater priority
|
2013-04-12 19:20:33 +02:00 |
|
stamparm
|
7edd7ee2aa
|
Trivial code change
|
2013-04-12 16:25:24 +02:00 |
|
Miroslav Stampar
|
73917fc9c8
|
Minor update (same, but safer)
|
2013-04-11 21:25:44 +02:00 |
|
Miroslav Stampar
|
0b449bb1d9
|
Fix for an Issue #433
|
2013-04-10 19:33:31 +02:00 |
|
stamparm
|
f67148a9a4
|
Update for an Issue #431
|
2013-04-10 16:43:57 +02:00 |
|
stamparm
|
661b44135d
|
Minor bug fix
|
2013-04-10 11:59:07 +02:00 |
|
stamparm
|
8c9da95343
|
Style and consistency update (url -> URL)
|
2013-04-09 11:48:42 +02:00 |
|
stamparm
|
3948b527dd
|
Update for an Issue #429
|
2013-04-09 11:36:33 +02:00 |
|
stamparm
|
91054099aa
|
Minor style update
|
2013-04-09 10:42:58 +02:00 |
|
stamparm
|
cce541cc33
|
Patch for an Issue #429
|
2013-04-09 10:39:20 +02:00 |
|
stamparm
|
33e9b3c451
|
Minor style update
|
2013-04-09 10:39:20 +02:00 |
|
Miroslav Stampar
|
7614c815ed
|
Minor update/patch
|
2013-04-07 21:32:03 +02:00 |
|
Miroslav Stampar
|
240e9f3f7e
|
Minor patch
|
2013-04-07 11:02:43 +02:00 |
|
Miroslav Stampar
|
50ac3aab7a
|
Minor patch
|
2013-04-06 01:56:24 +02:00 |
|
stamparm
|
a75d3ed0b8
|
Minor style update
|
2013-04-06 01:56:23 +02:00 |
|
Miroslav Stampar
|
df4fd82515
|
Minor update
|
2013-04-03 23:27:27 +02:00 |
|
Miroslav Stampar
|
c75a2d0c40
|
Minor patch
|
2013-04-03 21:31:37 +02:00 |
|
Miroslav Stampar
|
153aa10b77
|
Minor cosmetic update
|
2013-04-03 19:00:54 +02:00 |
|
Miroslav Stampar
|
f387333415
|
Minor cosmetics
|
2013-04-02 17:34:56 +02:00 |
|
Miroslav Stampar
|
4b5335a323
|
Moving --force-ssl from [Request] to [General] options
|
2013-04-02 17:18:21 +02:00 |
|
Miroslav Stampar
|
76a0d20799
|
Minor patch
|
2013-04-01 22:18:41 +02:00 |
|
Miroslav Stampar
|
b67f342975
|
Minor patch
|
2013-04-01 17:32:16 +02:00 |
|
stamparm
|
a371f182ac
|
Minor patch (previous combination is not working well with oriental characters - 0 length normalized unicode string is being returned)
|
2013-03-28 15:37:14 +01:00 |
|
stamparm
|
e1ffdde532
|
Little cleaning a mess with url encoding and post hint types
|
2013-03-27 13:39:27 +01:00 |
|
Miroslav Stampar
|
c19a283434
|
Minor patch
|
2013-03-26 20:06:50 +01:00 |
|
stamparm
|
7accba4cf9
|
Minor update
|
2013-03-26 16:10:41 +01:00 |
|
stamparm
|
0882fe0ce3
|
Minor update related to the last two
|
2013-03-26 16:04:56 +01:00 |
|
stamparm
|
eb1bfc20cb
|
Update related to the last commit
|
2013-03-26 15:36:44 +01:00 |
|
stamparm
|
2fe6aea0eb
|
Minor fix
|
2013-03-26 15:07:14 +01:00 |
|
stamparm
|
825aa4b8dd
|
Minor language update
|
2013-03-26 14:27:51 +01:00 |
|
stamparm
|
5dd2529b02
|
Minor language update
|
2013-03-26 14:18:37 +01:00 |
|
stamparm
|
4d2b77dde3
|
Minor language update
|
2013-03-26 14:15:40 +01:00 |
|
stamparm
|
473a39b820
|
Minor language fix
|
2013-03-26 14:11:17 +01:00 |
|
stamparm
|
3f8dafedae
|
Minor text update
|
2013-03-26 14:08:35 +01:00 |
|
stamparm
|
ad039c335d
|
Implementation for an Issue #423
|
2013-03-21 11:28:44 +01:00 |
|
stamparm
|
3740a97cc9
|
Adding a --version switch like all command line programs have
|
2013-03-20 11:44:09 +01:00 |
|
stamparm
|
7447773237
|
Update for consistency (all other enums are using _ in between words)
|
2013-03-20 11:10:24 +01:00 |
|
stamparm
|
ae6ce7db30
|
Removal of unused imports
|
2013-03-20 10:44:15 +01:00 |
|
Miroslav Stampar
|
8acf033715
|
Code refactoring
|
2013-03-19 19:24:14 +01:00 |
|
Miroslav Stampar
|
a3d9a7b1ff
|
Minor fix
|
2013-03-19 19:06:51 +01:00 |
|
stamparm
|
d1ae62b22b
|
Patch for an Issue #422
|
2013-03-19 12:27:49 +01:00 |
|
stamparm
|
6969874c02
|
Switch --no-cast is incompatible with switch --hex (integer values are not being casted in case of --no-cast --hex which is causing unwanted decodings of returned values)
|
2013-03-19 10:52:37 +01:00 |
|
stamparm
|
10e6c70c22
|
Trivial style update (undoing last dummy commit)
|
2013-03-19 10:43:29 +01:00 |
|
stamparm
|
70265fd3b5
|
Trivial style update
|
2013-03-19 10:43:03 +01:00 |
|
stamparm
|
5adac57ca9
|
Trivial style update
|
2013-03-19 10:42:50 +01:00 |
|
stamparm
|
558ef0aaff
|
Minor fix
|
2013-03-19 10:42:20 +01:00 |
|
stamparm
|
e226006766
|
Trivial fix
|
2013-03-18 13:29:55 +01:00 |
|
stamparm
|
5e02bcbd58
|
Minor adjustment
|
2013-03-18 12:16:16 +01:00 |
|
stamparm
|
7111cdabe3
|
Minor cosmetics
|
2013-03-18 11:41:15 +01:00 |
|
Miroslav Stampar
|
5df1f5528e
|
More general update for an Issue #421
|
2013-03-15 22:49:09 +01:00 |
|
Miroslav Stampar
|
f0a419bdec
|
Patch for an Issue #421
|
2013-03-15 22:08:15 +01:00 |
|
Miroslav Stampar
|
596cf95040
|
Minor fix
|
2013-03-15 17:22:33 +01:00 |
|
Miroslav Stampar
|
ff4e62ff90
|
Minor cosmetics
|
2013-03-15 17:00:01 +01:00 |
|
Miroslav Stampar
|
4010df307e
|
Trivial cosmetics
|
2013-03-15 16:37:52 +01:00 |
|
Miroslav Stampar
|
4cb378ce3e
|
Another update for an Issue #352 and couple of fixes
|
2013-03-13 21:57:09 +01:00 |
|
Miroslav Stampar
|
b35122a42c
|
Merge branch 'master' of github.com:sqlmapproject/sqlmap
|
2013-03-13 19:52:17 +01:00 |
|
Miroslav Stampar
|
eb08c8d752
|
Another update for an Issue #352
|
2013-03-13 19:42:22 +01:00 |
|
Bernardo Damele
|
dea62189b2
|
fixes #420
|
2013-03-12 22:16:42 +00:00 |
|
Miroslav Stampar
|
2f43c3eb9b
|
Minor fix (digest live test case) and some refactoring
|
2013-03-12 21:16:44 +01:00 |
|
Miroslav Stampar
|
65306f1ac1
|
Update for an Issue #352
|
2013-03-12 20:10:32 +01:00 |
|
Miroslav Stampar
|
db0a1e58b9
|
Update for an Issue #352
|
2013-03-11 14:58:05 +01:00 |
|
Miroslav Stampar
|
d6fc10092f
|
Minor refactoring
|
2013-03-11 13:31:50 +01:00 |
|
Miroslav Stampar
|
84a5bdb9cf
|
Trivial cosmetics
|
2013-03-09 19:41:24 +01:00 |
|
Miroslav Stampar
|
79d6a0e9c9
|
Using binary data in dummy mode
|
2013-03-09 19:40:24 +01:00 |
|
Miroslav Stampar
|
1e731f87a4
|
Patch for an Issue #419 (Authentication header is now properly being cached - no more one reauth per each request)
|
2013-03-09 19:33:04 +01:00 |
|
Miroslav Stampar
|
8e6692d793
|
Minor fix (for JSON values with :)
|
2013-03-05 20:12:24 +01:00 |
|
Miroslav Stampar
|
e9b86350f1
|
Patch for an Issue #403
|
2013-03-05 18:32:31 +01:00 |
|
Miroslav Stampar
|
62980d7d5a
|
Automatically decoding url encoded data in response
|
2013-03-05 17:32:10 +01:00 |
|
Miroslav Stampar
|
9e49d8c68f
|
Adding support for SHA2 hash functions
|
2013-03-05 11:04:46 +01:00 |
|
Miroslav Stampar
|
2ada9e9b84
|
Patch for an Issue Issue #416
|
2013-03-04 18:05:40 +01:00 |
|
Miroslav Stampar
|
084cfc797a
|
Fix for an Issue #415
|
2013-03-02 09:55:12 +01:00 |
|
Martin Bjerregaard Jepsen
|
d7a77c79ad
|
Fixed incorrect call to checkBooleanExpression when testing for false positives
|
2013-03-01 22:51:34 +01:00 |
|
stamparm
|
3a3f9c5ea1
|
Trivial commit related to the last one
|
2013-03-01 12:09:03 +01:00 |
|
stamparm
|
55f33da85a
|
Fix for invalid logical test cases
|
2013-03-01 12:04:49 +01:00 |
|
stamparm
|
440b484bf6
|
Minor update (one more just in case dummy request in false positive check for time-based injections - when DBMS could be unresponsive a bit due to previous heavy-queries)
|
2013-03-01 10:59:04 +01:00 |
|
Miroslav Stampar
|
e42350ddce
|
Minor style update
|
2013-02-28 20:28:34 +01:00 |
|
Miroslav Stampar
|
0e89cc62a2
|
Adding a hidden switch --dummy used for dummy runs (getPage() returns random data) - usefull for testing purposes for skipping connections
|
2013-02-28 20:20:08 +01:00 |
|
stamparm
|
9ef79df23d
|
Cleaning up cases with Set-Cookie (conf.cj is handling it automatically; also, default redirector needed to be patched)
|
2013-02-28 13:51:08 +01:00 |
|
stamparm
|
be50192d8d
|
Refactoring WAF scripts
|
2013-02-26 15:54:50 +01:00 |
|
stamparm
|
e5835dc74f
|
Update for WAF scripts
|
2013-02-26 15:30:11 +01:00 |
|
stamparm
|
17fa0f568c
|
Minor patch for an Issue #404
|
2013-02-26 12:55:09 +01:00 |
|
stamparm
|
ecbcd4afe6
|
Minor update
|
2013-02-26 12:55:09 +01:00 |
|
stamparm
|
af4762ace2
|
Minor style update
|
2013-02-26 11:16:09 +01:00 |
|
stamparm
|
f6b43b4b13
|
Minor update for an Issue #290
|
2013-02-26 11:08:06 +01:00 |
|
stamparm
|
e5e39bc682
|
Fix for an Issue #410
|
2013-02-25 11:07:30 +01:00 |
|
stamparm
|
6fbd902265
|
Minor refactoring (Issue #411)
|
2013-02-25 10:44:04 +01:00 |
|
stamparm
|
7127869ede
|
Minor bug fix (live test specific verbosity should be valid only inside of it)
|
2013-02-22 17:26:48 +01:00 |
|
stamparm
|
68ce51bfd4
|
Changing from warn to info for no WAF found
|
2013-02-22 12:15:38 +01:00 |
|
stamparm
|
ad471368f5
|
Fixing a display bug (cases where messages are just appended after the readInput line in batch mode) introduced with b472d9809a
|
2013-02-22 11:42:09 +01:00 |
|
stamparm
|
0bbbfc2eac
|
Adding a small warning message (related to the Issue #407)
|
2013-02-22 11:12:41 +01:00 |
|
stamparm
|
42cbd94fa4
|
Better update regarding 6acb2480b8
|
2013-02-22 10:49:45 +01:00 |
|
stamparm
|
44a46d2b10
|
Fix for an Issue #409
|
2013-02-22 10:18:22 +01:00 |
|
Miroslav Stampar
|
6acb2480b8
|
Adding WAF script for SecureIIS
|
2013-02-21 21:34:26 +01:00 |
|
Miroslav Stampar
|
229e4e167b
|
Minor cosmetics
|
2013-02-21 21:06:31 +01:00 |
|
stamparm
|
3a8c0cd3a2
|
Minor style update
|
2013-02-21 14:52:56 +01:00 |
|
stamparm
|
29ba43ee6c
|
Unhidding switch '--identify-waf' (Issue #290)
|
2013-02-21 14:48:19 +01:00 |
|
stamparm
|
08f0670aca
|
Minor refactoring for an Issue #290
|
2013-02-21 14:39:22 +01:00 |
|
stamparm
|
8e49872d7c
|
Finalizing implementation for an Issue #290
|
2013-02-21 14:33:12 +01:00 |
|
stamparm
|
6b2981ef4e
|
Update for an Issue #290 (adding tamper-like scripts into (new) directory waf)
|
2013-02-21 11:14:57 +01:00 |
|
stamparm
|
69063947b6
|
Debug message should go with logging.DEBUG
|
2013-02-19 09:46:51 +01:00 |
|
Bernardo Damele
|
d7247a51ee
|
do not prompt constantly if the page is not found
|
2013-02-18 18:08:20 +00:00 |
|
Miroslav Stampar
|
7f293afe74
|
Proper escaping for SQL identificators in Oracle (also, revert for 9b5f33560b )
|
2013-02-18 15:18:53 +01:00 |
|
Miroslav Stampar
|
5c099efccc
|
Fix for an Issue #401
|
2013-02-18 11:38:18 +01:00 |
|
Miroslav Stampar
|
9b5f33560b
|
Oracle is too specific (only column names can be enclosed) - removing it
|
2013-02-15 17:36:58 +01:00 |
|
Miroslav Stampar
|
bf82506c1b
|
Oracle can't enclose table names with double quotations
|
2013-02-15 17:36:58 +01:00 |
|
Miroslav Stampar
|
1b3d749488
|
Proper fix related to the last commit/revert
|
2013-02-15 17:36:58 +01:00 |
|
Miroslav Stampar
|
5a793cbc7c
|
Minor revert
|
2013-02-15 17:36:58 +01:00 |
|
Miroslav Stampar
|
799bd51c2e
|
Minor fix when two readInput/dataToStdout are called one at a time
|
2013-02-15 17:36:58 +01:00 |
|
Miroslav Stampar
|
97c06854a4
|
Minor fixes
|
2013-02-15 17:36:58 +01:00 |
|
Bernardo Damele
|
0e7f771be6
|
minor adjustment
|
2013-02-15 16:28:09 +00:00 |
|
Bernardo Damele
|
35aa785870
|
bug fix to make --predict-output work also with time-based technique
|
2013-02-15 16:25:33 +00:00 |
|
Miroslav Stampar
|
014e4e0055
|
Minor represenation fix
|
2013-02-15 14:48:24 +01:00 |
|
Bernardo Damele
|
63ddeb9008
|
unnecessary variable
|
2013-02-15 13:26:28 +00:00 |
|
Miroslav Stampar
|
345d10a9e0
|
Consistency fix (everywhere else we show unsafe format of identificator names)
|
2013-02-15 14:05:14 +01:00 |
|
Bernardo Damele
|
b472d9809a
|
another consistency fix to readInput()
|
2013-02-15 09:35:09 +00:00 |
|
Bernardo Damele
|
32c8c67888
|
Merge branch 'master' of github.com:sqlmapproject/sqlmap
|
2013-02-15 09:29:41 +00:00 |
|