Commit Graph

705 Commits

Author SHA1 Message Date
Miroslav Stampar
ee22c477db Minor patch for #1363 2015-08-28 10:59:12 +02:00
Miroslav Stampar
61b33f24d4 Implements #1363 2015-08-28 10:52:36 +02:00
Miroslav Stampar
26bec7219d Update for an Issue #1184 2015-03-31 07:33:50 +02:00
Bernardo Damele
9eb7a0a0f2 enhanced time-based payloads - issue #1169 2015-03-19 12:09:43 +00:00
Bernardo Damele
43f6cb1508 some more boundaries 2015-03-19 12:07:26 +00:00
Bernardo Damele
2bdf121915 cleanup 2015-03-04 13:36:09 +00:00
Bernardo Damele A. G.
b2fca35c36 consolidated some time-based blind payloads - issue #1169 2015-03-03 14:22:20 +00:00
Bernardo Damele
37ca0a95f1 consolidated stacked queries payloads - issue #1169 2015-03-03 14:19:36 +00:00
Bernardo Damele
849ca3da3d added a newline 2015-03-03 14:18:53 +00:00
Miroslav Stampar
b74edf9664 Fixes #1175 2015-02-25 10:16:01 +01:00
Bernardo Damele
21c1ae427b swapped generic and MySQL-specific UNION payloads - issue #1169 2015-02-21 12:57:28 +00:00
Bernardo Damele
ef9d4b58ae minor signature for PHP pgsql functions 2015-02-21 02:24:03 +00:00
Bernardo Damele
4bbf168b18 Minor titles fix 2015-02-20 18:35:13 +00:00
Bernardo Damele
ab6cc271d3 Major consistency rework of error-based payloads - issue #1169 2015-02-20 18:34:47 +00:00
Bernardo Damele
9fed41ddc2 Major consistency rework of boolean payloads - issue #1169 2015-02-20 18:34:23 +00:00
Bernardo Damele
2d886011c8 Consistency in enums 2015-02-20 18:33:04 +00:00
Bernardo Damele
1ecb921ba7 Consistency in enums 2015-02-20 18:31:47 +00:00
Bernardo Damele
3b3205c532 Minor stacked queries and time-based payloads cleanup - issue #1169 2015-02-20 15:44:06 +00:00
Bernardo Damele
5b65d2e133 more consistency of boolean blind payloads - issue #1169 2015-02-20 11:34:16 +00:00
Bernardo Damele
f547a776d8 consolidating blind based payloads - issue #1169 2015-02-19 16:42:26 +00:00
Bernardo Damele
4195f770a3 removing one unnecessary character from stacked payloads 2015-02-19 16:41:55 +00:00
Bernardo Damele
1e9586c90b minor layout fix 2015-02-19 16:18:16 +00:00
Bernardo Damele
6cc092b926 split payloads in different files 2015-02-18 10:13:44 +00:00
Bernardo Damele
560bc7cc28 minor fixes 2015-02-18 09:51:07 +00:00
Bernardo Damele
c51ecf33f3 ported the recent MySQL time-based payload (introduced with 66c2a79397) to other techniques and conditions 2015-02-18 09:45:44 +00:00
Bernardo Damele
84349a370a minor code cleanup 2015-02-15 19:51:07 +00:00
Bernardo Damele
32ab52b8ca code refactoring: split boundaries and payloads XML files 2015-02-15 16:31:35 +00:00
Bernardo Damele
66c2a79397 added a time-based payload for MySQL when the simpler AND SLEEP(X) does not work 2015-02-03 15:14:41 +00:00
Miroslav Stampar
ae95fd91c2 Implementation for an Issue #1135 2015-01-24 23:49:33 +01:00
Miroslav Stampar
4f122ee008 Bug fix regarding a problem reported by user @blink2014 2014-12-20 00:23:31 +01:00
Miroslav Stampar
0b91a6098f Patch for an Issue #1050 2014-12-18 15:13:44 +01:00
Miroslav Stampar
0c99b79c60 Minor fix 2014-11-28 00:54:03 +01:00
Miroslav Stampar
80b9fc4821 Minor fix 2014-11-19 09:21:52 +01:00
Miroslav Stampar
b7aeb670e1 Implementation of a new MySQL error-based payload (found at RDot) 2014-10-29 10:14:01 +01:00
Miroslav Stampar
90869244fd Minor update 2014-09-09 16:19:38 +02:00
Miroslav Stampar
af21fc513d Bug fix for HSQLDB (some queries were runnable on MySQL) 2014-09-03 21:39:38 +02:00
Miroslav Stampar
1478c206f1 Trivial update 2014-09-03 21:27:02 +02:00
Miroslav Stampar
ff8bfff87a Bug fix (FreeBSD != Linux) 2014-08-20 14:45:58 +02:00
Miroslav Stampar
5436635acb Minor update 2014-08-13 13:32:22 +02:00
Bernardo Damele
a09e590fe8 updated regression tests 2014-07-17 17:13:09 +01:00
Markus Wulftange
cf4e0c755b
Add boundary checks for derived tables in FROM clause 2014-05-24 17:25:11 +02:00
Bernardo Damele
78ab525966 minor fix to Oracle payloads 2014-04-09 12:31:52 +00:00
Bernardo Damele
42bde5328d minor fix 2014-04-09 12:29:52 +00:00
Bernardo Damele
9b0662d1a9 added new Oracle time-based payloads 2014-04-09 12:14:16 +00:00
Miroslav Stampar
97f603af4a Fix for an Issue #641 2014-03-17 20:20:25 +01:00
Miroslav Stampar
ae36c08f12 Updating server signatures 2014-03-13 10:05:56 +01:00
Bernardo Damele
07a22070d8 updated signatures for test environment 2014-02-27 15:02:33 +00:00
Miroslav Stampar
b83d531ab3 Minor fix (Reference: https://en.wikipedia.org/wiki/Internet_Information_Services) 2014-02-05 08:32:55 +01:00
Miroslav Stampar
f28b8dbda8 Minor update 2014-02-01 22:24:56 +01:00
Bernardo Damele
4e8ab48145 fixed match 2014-01-13 23:48:00 +00:00
Bernardo Damele
b86353b485 minor fix to DB2 test case 2014-01-13 23:34:25 +00:00
Bernardo Damele
85f60d0c09 leftovers 2014-01-13 17:41:33 +00:00
Bernardo Damele
43a4e85749 updated copyright 2014-01-13 17:24:49 +00:00
Bernardo Damele
9a1be29b45 updated test cases for regression test 2014-01-13 17:12:59 +00:00
Bernardo Damele
4975aafa65 updated live tests 2014-01-10 17:38:04 +00:00
Bernardo Damele
148767941b new host 2014-01-10 17:23:27 +00:00
Miroslav Stampar
178056968f Cleaning a leftover (deleted) made for Issue #564 2013-12-27 10:49:15 +01:00
Miroslav Stampar
cadbddd607 Adding a boundary proposed in Issue #564 2013-12-27 10:46:18 +01:00
Miroslav Stampar
9ead80d707 Minor patch for Issue #585 2013-12-17 09:39:43 +01:00
Miroslav Stampar
663b1e711b Bug fix 2013-12-01 21:22:29 +01:00
Miroslav Stampar
07bd22fa80 Minor fix 2013-12-01 21:03:30 +01:00
Bernardo Damele
378ce46061 NVARCHAR is not supported on Sybase Adaptive Server 2013-10-18 12:23:50 +01:00
Miroslav Stampar
4c39235c2f Minor revert (5->3) 2013-10-11 00:39:44 +02:00
Miroslav Stampar
6305c1e703 Making a comma-less RLIKE payload 2013-10-11 00:39:11 +02:00
Miroslav Stampar
dbaa35f9fe Minor fix 2013-10-10 23:53:43 +02:00
Miroslav Stampar
2dc570d7a8 Minor patch (for ORDER BY 'col' cases) 2013-10-10 23:08:20 +02:00
Miroslav Stampar
6f2c89bd7c Fix for an Issue #529 2013-09-25 10:22:23 +02:00
Miroslav Stampar
31684dbc89 Fix for an Issue #524 2013-09-13 16:16:46 +02:00
Miroslav Stampar
96ccdb7c83 Adding new regular expressions for error messages 2013-09-06 19:41:40 +02:00
Miroslav Stampar
a711c9ed36 Minor cleanup and initial work for #58 2013-08-09 14:13:48 +02:00
Miroslav Stampar
de31688c4f Update for an Issue #481 2013-07-29 18:25:27 +02:00
Miroslav Stampar
df5a6beb6e Queries for Issue #481 2013-07-27 11:11:11 +02:00
stamparm
dbb0d7f700 Important fix (Issue #489) - we had a bad presumption than only public schema could be used for enumeration (while all schemas inside a current db could be used) 2013-07-19 13:24:35 +02:00
stamparm
27bf37e741 Updating to higher levels for HSQLDB specific payloads (like for e.g. Firebird) 2013-07-04 15:41:08 +02:00
stamparm
f97b35dcc1 Patch for an Issue #475 2013-07-01 13:43:38 +02:00
Bernardo Damele
9a8bec760f added fingerprint for HSQLDB based on Tomcat stacktrace message 2013-07-01 12:17:52 +01:00
stamparm
925098686d Minor fix 2013-07-01 13:05:57 +02:00
stamparm
e3124b9176 Replacing tabs with spaces (Issue #475) 2013-07-01 12:56:34 +02:00
Bernardo Damele
2ca5df2802 minor fix 2013-07-01 11:31:28 +01:00
stamparm
b5e644694a Minor cleanup 2013-07-01 12:05:02 +02:00
Miroslav Stampar
aeb83ba651 Merge pull request #475 from Meatballs1/hsql_clean
HSQL Payloads and Query Support
2013-07-01 02:38:04 -07:00
Meatballs
604694c0e5 Cleanup queries.xml 2013-06-24 23:22:52 +01:00
Meatballs
55a37183d4 Cleanup payloads file 2013-06-24 15:04:52 +01:00
Meatballs
355d3f86be hsql payloads and queries xml 2013-06-24 14:34:54 +01:00
Miroslav Stampar
4336a8fa7c Fix for overnight (previously removed : from prefix/suffix was important for XMLType payload) 2013-06-24 14:18:42 +02:00
Miroslav Stampar
fca6772df6 Implementation for an Issue #468 2013-06-22 00:13:46 +02:00
stamparm
20b8186fcc Fix for an Issue #467 2013-06-19 10:41:58 +02:00
Miroslav Stampar
ad07add549 Fixing MySQL/stacked payloads (also removing stacked conditional-error version as it's syntatically incorrect) 2013-06-05 14:32:06 +02:00
stamparm
f456b5a28d Bug fix (this payload was also doable on MySQL - with CAST it's strictly being bound to Oracle only) 2013-05-29 17:41:42 +02:00
Miroslav Stampar
19b87074c6 Minor fix 2013-05-22 23:30:33 +04:00
Miroslav Stampar
d34286fe44 Temporary disabling 2013-05-12 13:45:32 +02:00
Miroslav Stampar
427d88b194 Minor overnight fix 2013-05-04 11:39:23 +02:00
stamparm
ff62b0d3ea Replacing a substring query for PgSQL with a non-comma version (there are no compatibility issues while skipping problems with possible comma filtering) 2013-04-25 10:14:03 +02:00
stamparm
9c264e6426 Revert back of SQLite3 time-based payload as of regression test failing 2013-04-10 11:10:19 +02:00
stamparm
acc650d3dc Minor fine tuning 2013-04-03 15:14:25 +02:00
stamparm
125168c515 Reverting back to 8002531b63 (that last 76dcbbda0f resulted in 'too big blob') 2013-04-03 14:38:13 +02:00
stamparm
76dcbbda0f Reverting last commit and making heavy query on SQLite heavier 2013-04-03 14:23:28 +02:00
stamparm
8002531b63 Heavy queries should not have --time-sec set to some small value in live tests as their responses are machine dependent (on fast machines --time-sec=2 will result in fast responses making sqlmap life harder) 2013-04-03 14:17:13 +02:00
stamparm
64ba88096f Adding a new test case (Issue #423) 2013-03-21 12:13:13 +01:00
Bernardo Damele
30cf933445 added one more test case 2013-03-05 18:21:45 +00:00