Miroslav Stampar
|
3a9e36c52b
|
Reintroducing stacked queries removed in 79d08906a4 (good for WAF bypass)
|
2016-07-03 02:03:30 +02:00 |
|
Miroslav Stampar
|
65a0f15f69
|
Minor update (error regex for PHP's sqlsrv module)
|
2016-06-28 15:13:37 +02:00 |
|
Miroslav Stampar
|
98b77d32cc
|
Minor update
|
2016-06-27 11:16:41 +02:00 |
|
Miroslav Stampar
|
a4b60dc00f
|
New error regex for MsSQL
|
2016-06-26 00:40:54 +02:00 |
|
Miroslav Stampar
|
e9407cf791
|
Cleaning some garbage boundaries (it doesn't make any sense to use %00 as prefix)
|
2016-06-23 22:57:59 +02:00 |
|
Miroslav Stampar
|
cc313280af
|
Payload that never ever worked (now fixed)
|
2016-06-03 13:16:00 +02:00 |
|
Miroslav Stampar
|
f06ff42c58
|
This never worked. Not sure who incorporated it (WAITFOR DELAY can't go to SELECT/CASE)
|
2016-06-03 10:42:57 +02:00 |
|
Miroslav Stampar
|
4bc1cf4518
|
Vastly better patch for MsSQL payloads
|
2016-06-03 10:29:04 +02:00 |
|
Miroslav Stampar
|
d326965966
|
Reordering MySQL's error-based payloads (BIGINT and EXP have crazy bigger chunk lenghts)
|
2016-06-01 14:12:22 +02:00 |
|
Miroslav Stampar
|
f0b8fbb7fd
|
Implemented support for JSON_KEYS error-based SQLi (and tons of fixes for MySQL 'ORDER BY,GROUP BY' payloads)
|
2016-06-01 13:23:41 +02:00 |
|
Miroslav Stampar
|
7d1bdb35ca
|
Update of parsed versions
|
2016-06-01 10:44:08 +02:00 |
|
Miroslav Stampar
|
acc1277246
|
Minor update
|
2016-05-30 14:13:57 +02:00 |
|
Miroslav Stampar
|
b4ebbae354
|
New payload(s)
|
2016-05-30 11:25:24 +02:00 |
|
Miroslav Stampar
|
79d08906a4
|
Cleaning some redundant payload(s)
|
2016-05-27 23:59:48 +02:00 |
|
Miroslav Stampar
|
b9e5655e3c
|
Proper naming
|
2016-05-22 14:26:36 +02:00 |
|
Miroslav Stampar
|
3b74e99576
|
Minor update (support for MariaDB)
|
2016-05-11 15:47:35 +02:00 |
|
Miroslav Stampar
|
439fff684e
|
Minor update (MSSQL CONCAT payload)
|
2016-05-11 09:42:54 +02:00 |
|
Miroslav Stampar
|
5ed3cdc819
|
Minor update
|
2016-04-22 10:54:55 +02:00 |
|
Miroslav Stampar
|
a9526bda92
|
Minor patch
|
2016-04-11 22:38:44 +02:00 |
|
Miroslav Stampar
|
c9b410c97f
|
Minor update
|
2016-04-08 14:59:52 +02:00 |
|
Miroslav Stampar
|
38fcc5a35a
|
Update for pre-WHERE payloads
|
2016-04-08 13:19:42 +02:00 |
|
Miroslav Stampar
|
8ceb4907a5
|
Another update for Issue #1800
|
2016-04-08 11:37:38 +02:00 |
|
Miroslav Stampar
|
ce3749622a
|
Minor revisit of payload boundaries (Issue #1800)
|
2016-04-08 11:28:17 +02:00 |
|
Miroslav Stampar
|
ac08db82b2
|
Including one more error regex (based on testasp[.]vulnweb[.]com)
|
2016-04-04 16:14:30 +02:00 |
|
Miroslav Stampar
|
ad3b766b65
|
Adding in-table name boundaries
|
2016-03-26 09:39:28 +01:00 |
|
Miroslav Stampar
|
242800c085
|
Minor update related to the #1740
|
2016-03-01 15:40:34 +01:00 |
|
Ewerson Guimaraes (Crash)
|
8df56ecc72
|
Update errors.xml
Add support to Sybase 15.7 error based
|
2016-03-01 15:13:38 +01:00 |
|
Miroslav Stampar
|
f54b25ca2a
|
Adding one more regex for MsAccess error recognition
|
2016-01-17 15:22:53 +01:00 |
|
Miroslav Stampar
|
df8e4b504d
|
Patch for special cases of OR boolean-based blind (covered with last two commits)
|
2016-01-14 13:51:30 +01:00 |
|
Miroslav Stampar
|
85b35f44a0
|
Minor refactoring for #1637
|
2016-01-09 17:39:53 +01:00 |
|
Andrew Smith
|
777e4a3db2
|
Update for false positives
Attempt to eliminate false positives using more specific regex
|
2016-01-07 15:42:22 -05:00 |
|
Andrew Smith
|
b84d787f4a
|
Addition of IBM DB2 Error Codes
|
2016-01-07 10:15:09 -05:00 |
|
Miroslav Stampar
|
7411ff93e5
|
Minor update related to the #1620
|
2015-12-23 08:14:18 +01:00 |
|
Miroslav Stampar
|
94639d11a3
|
Another update related to the #1539
|
2015-11-16 15:33:05 +01:00 |
|
Miroslav Stampar
|
5593bf2fee
|
Another patch related to #1539 (simplifying unicode bad chars and preventing double encoding of safe chars)
|
2015-11-16 15:02:30 +01:00 |
|
Miroslav Stampar
|
5ff59296ef
|
Space after the generic comments has to be "protected"
|
2015-10-22 14:47:19 +02:00 |
|
Miroslav Stampar
|
570562369b
|
Further fixes for sqlmap to work properly with HSQLDB (WebGoat)
|
2015-10-13 13:04:59 +02:00 |
|
Miroslav Stampar
|
ecef769200
|
More generic approach (non-: versions appear too)
|
2015-10-10 15:23:09 +02:00 |
|
Miroslav Stampar
|
786b51e6e4
|
Minor patch
|
2015-10-10 15:18:47 +02:00 |
|
Miroslav Stampar
|
17ee402592
|
Adding error regexes for HSQLDB
|
2015-10-10 14:53:08 +02:00 |
|
Miroslav Stampar
|
9641e84dd9
|
Bug fixes for HSQLDB
|
2015-10-09 16:52:13 +02:00 |
|
Miroslav Stampar
|
ee22c477db
|
Minor patch for #1363
|
2015-08-28 10:59:12 +02:00 |
|
Miroslav Stampar
|
61b33f24d4
|
Implements #1363
|
2015-08-28 10:52:36 +02:00 |
|
Miroslav Stampar
|
26bec7219d
|
Update for an Issue #1184
|
2015-03-31 07:33:50 +02:00 |
|
Bernardo Damele
|
9eb7a0a0f2
|
enhanced time-based payloads - issue #1169
|
2015-03-19 12:09:43 +00:00 |
|
Bernardo Damele
|
43f6cb1508
|
some more boundaries
|
2015-03-19 12:07:26 +00:00 |
|
Bernardo Damele
|
2bdf121915
|
cleanup
|
2015-03-04 13:36:09 +00:00 |
|
Bernardo Damele A. G.
|
b2fca35c36
|
consolidated some time-based blind payloads - issue #1169
|
2015-03-03 14:22:20 +00:00 |
|
Bernardo Damele
|
37ca0a95f1
|
consolidated stacked queries payloads - issue #1169
|
2015-03-03 14:19:36 +00:00 |
|
Bernardo Damele
|
849ca3da3d
|
added a newline
|
2015-03-03 14:18:53 +00:00 |
|