Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							1aeaa5db47 
							
						 
					 
					
						
						
							
							implementation of Feature  #176  (Safe URL: avoid being kicked out after N unsuccessful requests)  
						
						
						
					 
					
						2010-04-16 12:44:47 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e11d511cad 
							
						 
					 
					
						
						
							
							Updated doc  
						
						
						
					 
					
						2010-04-15 12:12:53 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							d034bf29ce 
							
						 
					 
					
						
						
							
							Add new "hinted" feature to MSSQL's getTables()  
						
						
						
					 
					
						2010-04-15 12:09:26 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							14f8514fb5 
							
						 
					 
					
						
						
							
							Minor "revert" to make resume of queries work again  
						
						
						
					 
					
						2010-04-15 11:56:47 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							a0c8adc266 
							
						 
					 
					
						
						
							
							Minor bug fix to add the "hinted" request to the total number of requests performed  
						
						... 
						
						
						
						Minor layout adjustments. 
						
					 
					
						2010-04-15 10:08:27 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							5e86087cb1 
							
						 
					 
					
						
						
							
							Minor bug fix for -d to avoid resuming queries when they're SELECT on sqlmap own tables, aligned to same resume of -u now.  
						
						
						
					 
					
						2010-04-15 10:06:38 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							17554759b7 
							
						 
					 
					
						
						
							
							implemented feature request from Ole Rasmussen regarding table name retrieval speedup  
						
						
						
					 
					
						2010-04-15 09:36:13 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							1ab78ce60e 
							
						 
					 
					
						
						
							
							Added support to directly connect also to SQLite 2 db file  
						
						
						
					 
					
						2010-04-13 22:43:38 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							fee062781f 
							
						 
					 
					
						
						
							
							Minor adjustment  
						
						
						
					 
					
						2010-04-13 11:13:01 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							da1ea48947 
							
						 
					 
					
						
						
							
							added some nagging for connection details  
						
						
						
					 
					
						2010-04-13 11:00:15 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							4f299f22bf 
							
						 
					 
					
						
						
							
							removed timeout keyword which is not supported on linux build  
						
						
						
					 
					
						2010-04-13 10:11:14 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							6762f592c1 
							
						 
					 
					
						
						
							
							direct connection supported only on Windows machines  
						
						
						
					 
					
						2010-04-13 08:57:47 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							939fa5d2c4 
							
						 
					 
					
						
						
							
							some fixes  
						
						
						
					 
					
						2010-04-13 08:29:15 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							9e29120603 
							
						 
					 
					
						
						
							
							Minor fix to make MS Access direct access to work also from Linux  
						
						
						
					 
					
						2010-04-12 15:52:40 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							eecee3b274 
							
						 
					 
					
						
						
							
							Added resume functionality to -d and fixed logging with -d  
						
						
						
					 
					
						2010-04-12 09:35:20 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e0d0913fc6 
							
						 
					 
					
						
						
							
							Updated doc  
						
						
						
					 
					
						2010-04-12 09:34:20 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							b72ddb6f1e 
							
						 
					 
					
						
						
							
							Fixes non-deterministic unsorted results for most of the DBMSes - see  #185  
						
						
						
					 
					
						2010-04-09 15:48:53 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							822d22299f 
							
						 
					 
					
						
						
							
							Updated  
						
						
						
					 
					
						2010-04-09 13:48:02 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							fcceceed45 
							
						 
					 
					
						
						
							
							fix for bug reported by shiftzwei@gmail.com regarding formatDBMSfp with unknown DBMS version  
						
						
						
					 
					
						2010-04-09 10:40:08 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							63c70018ca 
							
						 
					 
					
						
						
							
							fix for that update (conf.cj) problem mentioned by shiftzwei@gmail.com  
						
						
						
					 
					
						2010-04-09 10:16:15 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							effc7dc41c 
							
						 
					 
					
						
						
							
							Minor adjustment to notify the user that the --auth-cred format for NTLM authentication is "DOMAIN\user:password"  
						
						
						
					 
					
						2010-04-07 09:47:14 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							652daa616e 
							
						 
					 
					
						
						
							
							Minor bug fix and layout adjustments  
						
						
						
					 
					
						2010-04-06 21:57:15 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							758a858785 
							
						 
					 
					
						
						
							
							Minor adjustments  
						
						
						
					 
					
						2010-04-06 20:40:14 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							5556db80db 
							
						 
					 
					
						
						
							
							fix for that sqlite thread nagging with undocumented argument check_same_thread  
						
						
						
					 
					
						2010-04-06 16:01:37 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							6e7be5edb0 
							
						 
					 
					
						
						
							
							another fix  
						
						
						
					 
					
						2010-04-06 15:51:36 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							3fe9f9cac9 
							
						 
					 
					
						
						
							
							another fix  
						
						
						
					 
					
						2010-04-06 15:28:34 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							a6a2e993cc 
							
						 
					 
					
						
						
							
							minor update  
						
						
						
					 
					
						2010-04-06 15:24:56 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c303feab17 
							
						 
					 
					
						
						
							
							fix  
						
						
						
					 
					
						2010-04-06 15:14:32 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							e2810003ae 
							
						 
					 
					
						
						
							
							more update  
						
						
						
					 
					
						2010-04-06 15:12:52 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c24f1cc07c 
							
						 
					 
					
						
						
							
							some update  
						
						
						
					 
					
						2010-04-06 14:59:31 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							60f04f0a41 
							
						 
					 
					
						
						
							
							new module for interruptable threads  
						
						
						
					 
					
						2010-04-06 14:33:57 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							bd669dd6fa 
							
						 
					 
					
						
						
							
							Updated  
						
						
						
					 
					
						2010-04-06 10:32:56 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							2d55ec19a3 
							
						 
					 
					
						
						
							
							Minor code restyling  
						
						
						
					 
					
						2010-04-06 10:15:19 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							e29e8f82f9 
							
						 
					 
					
						
						
							
							fix for "Problem with --dbms set" reported by David Guimaraes  
						
						
						
					 
					
						2010-04-05 23:09:35 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							0a363d3f2b 
							
						 
					 
					
						
						
							
							fix for not properly clearing cookies when in multiple targets scanning mode spotted by Kasper Fons  
						
						
						
					 
					
						2010-04-04 14:38:48 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							4129cb22a7 
							
						 
					 
					
						
						
							
							update regarding bug reported by Ole Rasmussen  
						
						
						
					 
					
						2010-04-03 19:41:47 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							cad8f61d55 
							
						 
					 
					
						
						
							
							Force pymssql to version >= 1.0.2  
						
						
						
					 
					
						2010-03-31 15:31:11 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							b19de015c5 
							
						 
					 
					
						
						
							
							Minor bugs fixes  
						
						
						
					 
					
						2010-03-31 13:52:51 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							5fdebb5d5b 
							
						 
					 
					
						
						
							
							Added support to directly connect also to Microsoft SQL Server database.  
						
						... 
						
						
						
						Fixed direct connection to always use the same query as of UNION query SQL injection (= one query with multiple columns/entries output).
Minor fixes to Firebird/Access/SQLite connectors to use connector's execute()/fetchall() as wrapper for third-party libraries' methods.
Forced conf.timeout to 10 seconds when directly connecting to database.
Slightly improved regular expression to parse -d parameter.
Added import check for all connectors' third-party libraries.
Code refactoring:
* Moved conf.direct request to direct() function in lib/request/direct.py (code reused where needed).
* Back-delegated to generic connector close() and other methods. 
						
					 
					
						2010-03-31 10:50:47 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							d583cc07e7 
							
						 
					 
					
						
						
							
							ms access update  
						
						
						
					 
					
						2010-03-30 15:04:55 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							1973024ebf 
							
						 
					 
					
						
						
							
							added support for reusing connections  
						
						
						
					 
					
						2010-03-30 13:52:47 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							f0729565a9 
							
						 
					 
					
						
						
							
							fixes for sqlite  
						
						
						
					 
					
						2010-03-30 13:36:23 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							8702cce760 
							
						 
					 
					
						
						
							
							fix  
						
						
						
					 
					
						2010-03-30 13:23:20 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c2a6f21095 
							
						 
					 
					
						
						
							
							refactoring regarding usage of conf.dbmsConnector.connect()  
						
						
						
					 
					
						2010-03-30 13:03:19 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							88d74a00c1 
							
						 
					 
					
						
						
							
							ms access connector update  
						
						
						
					 
					
						2010-03-30 12:48:51 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							a02ec29c15 
							
						 
					 
					
						
						
							
							too  
						
						
						
					 
					
						2010-03-30 11:52:45 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c9c9c1fb2f 
							
						 
					 
					
						
						
							
							replace only first occurrence  
						
						
						
					 
					
						2010-03-30 11:52:01 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							bfc12e93c5 
							
						 
					 
					
						
						
							
							ms access returns -1 for True  
						
						
						
					 
					
						2010-03-30 11:33:51 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							ae3455a0c2 
							
						 
					 
					
						
						
							
							more update  
						
						
						
					 
					
						2010-03-30 11:28:14 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							738c210075 
							
						 
					 
					
						
						
							
							update  
						
						
						
					 
					
						2010-03-30 11:21:26 +00:00