sqlmapproject/sqlmap
1
1
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2024-11-26 19:43:48 +03:00
Code Issues Packages Projects Releases Wiki Activity
4,557 Commits 4 Branches 117 Tags 97 MiB
43ddf39bea
Commit Graph

3246 Commits

Author SHA1 Message Date
Miroslav Stampar
6f450ac8bf Implementation for an Issue #155 2012-08-20 12:14:01 +02:00
Miroslav Stampar
823dde73ab Minor cleanup 2012-08-20 11:40:49 +02:00
Miroslav Stampar
2b6123c4f8 Minor style update 2012-08-20 11:29:23 +02:00
Miroslav Stampar
e0d9fa8666 Minor style update 2012-08-20 11:28:41 +02:00
Miroslav Stampar
76338add17 Fix for an Issue #152 2012-08-20 10:41:43 +02:00
Miroslav Stampar
59078bb1b8 Fix for an Issue #154 2012-08-20 10:05:13 +02:00
Miroslav Stampar
4649450603 Fix for an Issue #137 2012-08-16 22:20:24 +02:00
Miroslav Stampar
0d8fca30c9 Fix for an Issue #59 2012-08-16 11:31:43 +02:00
Miroslav Stampar
1af81c0de4 Implementation of an Issue #149 2012-08-15 22:31:25 +02:00
Miroslav Stampar
f358ab2e73 Implementation of an Issue #147 2012-08-15 16:37:18 +02:00
Miroslav Stampar
36b55cf209 Proper fix for an Issue #145 2012-08-14 22:28:42 +02:00
Miroslav Stampar
ab35ab4e2a Fix for an Issue #145 2012-08-14 18:52:45 +02:00
Miroslav Stampar
432b567584 Fix for an Issue #141 2012-08-08 00:03:58 +02:00
Miroslav Stampar
31ceb0cb6c Fix for an Issue #140 2012-08-07 10:57:29 +02:00
Miroslav Stampar
fec8a5cc9d Fix for an Issue #139 2012-08-07 00:50:58 +02:00
Miroslav Stampar
f797a6d813 Fix for an Issue #125 2012-07-31 13:06:45 +02:00
Miroslav Stampar
6f529542e3 Making those --string tips (containing escaped characters) decodable by sqlmap 2012-07-31 11:32:53 +02:00
Miroslav Stampar
142fc887f1 Fix for an Issue #129 2012-07-31 11:03:44 +02:00
Miroslav Stampar
bdbe8ff9d9 Fix for an Issue #132 2012-07-30 22:39:45 +02:00
Miroslav Stampar
47073f4afd Implementation of an Issue #131 2012-07-30 21:50:46 +02:00
Miroslav Stampar
93d35fe522 Minor update regarding Issue #129 2012-07-30 21:43:32 +02:00
Miroslav Stampar
b9ac50faef Minor bug fix 2012-07-30 12:09:20 +02:00
Miroslav Stampar
a86f9798b2 Minor refactoring together with a wider support for html entities 2012-07-30 11:21:32 +02:00
Miroslav Stampar
20a66567a3 Minor refactoring 2012-07-30 10:06:14 +02:00
Miroslav Stampar
cc2a916716 Fix for an Issue #126 2012-07-29 17:33:08 +02:00
Miroslav Stampar
1669c6bdb4 Another update for an Issue #28 2012-07-27 17:05:21 +02:00
Miroslav Stampar
6ffc5665d0 Update for Issue #28 2012-07-27 16:29:33 +02:00
Miroslav Stampar
07738004cc Fix for an Issue #123 2012-07-27 10:02:47 +02:00
Miroslav Stampar
a5062c1e4f Adding a warn message when --dns-domain is ignored (because of faster techniques) 2012-07-27 09:48:48 +02:00
Bernardo Damele
92c2b3bd4c Merge branch 'master' of github.com:sqlmapproject/sqlmap 2012-07-26 23:11:11 +01:00
Bernardo Damele
d492291744 working on issue #12 2012-07-26 23:11:07 +01:00
Miroslav Stampar
cba387a0a0 Minor speed up 2012-07-26 15:42:04 +02:00
Miroslav Stampar
efa99c4519 Implementation for an Issue #4 2012-07-26 14:07:05 +02:00
Miroslav Stampar
b3552494c4 Minor preparation for an Issue #48 2012-07-26 12:26:57 +02:00
Miroslav Stampar
3e9f1fe410 Minor style update 2012-07-26 12:13:16 +02:00
Miroslav Stampar
30f8d09651 Implementation for an Issue #70 2012-07-26 12:06:02 +02:00
Miroslav Stampar
231f0f76b5 Fix for an Issue #119 2012-07-26 00:49:51 +02:00
Miroslav Stampar
cba77410a9 Minor style update 2012-07-26 00:08:49 +02:00
Miroslav Stampar
18b1d1efd6 Fix for an Issue #121 2012-07-26 00:02:38 +02:00
Miroslav Stampar
2b60e61d54 Minor update for #119 2012-07-25 10:57:19 +02:00
Miroslav Stampar
922ea9d1f4 Update for Issue #118 2012-07-24 15:43:29 +02:00
Miroslav Stampar
f8c9868cb6 Implementation for an Issue #118 2012-07-24 15:34:50 +02:00
Miroslav Stampar
42f518b2d6 Minor update for letting unhandledExceptionMessage() do it's job if kb has not yet been initialized 2012-07-24 14:44:44 +02:00
Miroslav Stampar
b820975217 Improvement of decodeIntToUnicode() 2012-07-23 19:31:06 +02:00
Miroslav Stampar
1153b4563c Minor update for an Issue #111 2012-07-23 18:44:50 +02:00
Miroslav Stampar
fccd69721e Update for an Issue #111 2012-07-23 18:38:46 +02:00
Miroslav Stampar
ab9cb80602 Implementing Issue #111 2012-07-23 15:14:52 +02:00
Miroslav Stampar
6809449e31 Minor style update 2012-07-23 15:06:49 +02:00
Miroslav Stampar
63bf99ce77 Minor just in case update for an Issue #117 2012-07-23 14:46:43 +02:00
Miroslav Stampar
c6b724489b Minor style update 2012-07-23 14:26:42 +02:00
Miroslav Stampar
a7d1a0c250 Implementation for an Issue #117 2012-07-23 14:14:22 +02:00
Miroslav Stampar
3279ce53a8 Minor style update 2012-07-23 13:57:38 +02:00
Miroslav Stampar
534eccc9aa Fix for an Issue #115 2012-07-23 10:16:47 +02:00
Miroslav Stampar
1b6cb9442f Fix for an Issue #114 2012-07-21 23:31:36 +02:00
Bernardo Damele
0a4b6431a8 minor bug fix - issue #112 2012-07-21 16:51:01 +01:00
Miroslav Stampar
95e0d46e3e Fix for an Issue #110 2012-07-21 09:15:54 +02:00
Bernardo Damele
dba0a96c2e fall-back to UNION technique if web file stager was not uploaded with LIMIT 2012-07-20 17:11:22 +01:00
Bernardo Damele
cbe8f41746 minor code refactoring preparing for #96 2012-07-20 16:20:17 +01:00
Miroslav Stampar
f336afa913 Implementation for Issue #108 2012-07-20 09:48:09 +02:00
Miroslav Stampar
dcf8a27f12 Implementation for an Issue #67 2012-07-18 14:24:10 +02:00
Miroslav Stampar
4fc462c4d9 Minor update for an Issue #105 2012-07-18 14:09:04 +02:00
Miroslav Stampar
655dd55a6f Implementation of an Issue #105 2012-07-18 13:32:34 +02:00
Miroslav Stampar
08244c7ebf Fix for an Issue #104 2012-07-17 15:05:50 +02:00
Miroslav Stampar
e30646a54f Fix for an Issue #103 2012-07-17 10:36:22 +02:00
Miroslav Stampar
41d16e55cb Typo fix (#102) 2012-07-17 09:13:19 +02:00
Bernardo Damele
7198e3185b Merge branch 'master' of github.com:sqlmapproject/sqlmap 2012-07-17 00:25:08 +01:00
Bernardo Damele
318a01b867 minor typo fixes 2012-07-17 00:25:02 +01:00
Miroslav Stampar
d6ceb7af5e Merge branch 'master' of github.com:sqlmapproject/sqlmap 2012-07-17 00:19:52 +02:00
Miroslav Stampar
81d15e5051 Fix for an Issue #101 2012-07-17 00:19:33 +02:00
Bernardo Damele
5f876bdbbe minor adjustments 2012-07-16 22:50:29 +01:00
Miroslav Stampar
c96e44b30c Fix for an Issue #100 2012-07-16 23:28:01 +02:00
Miroslav Stampar
ffbbb10abb Support for dotted identificator names 2012-07-16 23:13:21 +02:00
Miroslav Stampar
0e21cb54de Minor fix related to Issue #94 2012-07-16 16:06:39 +02:00
Miroslav Stampar
0f64e1e6c1 Minor update for Issue #94 (not fixing it) 2012-07-16 15:43:02 +02:00
Miroslav Stampar
0eff977c63 Refactoring for Issue #91 2012-07-16 12:24:54 +02:00
Miroslav Stampar
4d759984b2 Implementation for Issue #91 2012-07-16 12:12:52 +02:00
Miroslav Stampar
c1a14257a4 Removing --disable... switches and making changes in default choice(s) for respectable sections 2012-07-16 11:31:51 +02:00
Miroslav Stampar
07a85874fe Implementation for Issue #92 2012-07-16 11:07:47 +02:00
Miroslav Stampar
87ecf205cb More work for Issue #66 2012-07-14 17:01:04 +02:00
Miroslav Stampar
38d82771be Minor style update 2012-07-14 11:23:22 +02:00
Miroslav Stampar
805120ac52 Minor refactoring 2012-07-14 11:01:30 +02:00
Miroslav Stampar
9a7fc24ec2 Minor style update 2012-07-13 15:22:08 +02:00
Miroslav Stampar
ddb9caeef1 Revert of the previous commit 2012-07-13 15:05:19 +02:00
Miroslav Stampar
d165d5d5fe To not be confused with heuristic method in SQLi 2012-07-13 15:03:43 +02:00
Miroslav Stampar
32b700f130 Minor style update 2012-07-13 15:02:11 +02:00
Miroslav Stampar
fbb5db00ba Minor style update 2012-07-13 15:00:39 +02:00
Miroslav Stampar
786686da60 Minor language update 2012-07-13 14:53:42 +02:00
Miroslav Stampar
9ff9c951bc Language update 2012-07-13 14:33:16 +02:00
Miroslav Stampar
6677da63cd Fix for an Issue #88 2012-07-13 14:25:39 +02:00
Miroslav Stampar
3c81f74823 Minor style update 2012-07-13 12:22:37 +02:00
Miroslav Stampar
6ade007aec Minor update of language 2012-07-13 12:13:04 +02:00
Miroslav Stampar
c5ecc8b8db Closing work on Issue #83 2012-07-13 11:23:21 +02:00
Miroslav Stampar
48f68bd076 First commit for Issue #83 2012-07-13 10:35:22 +02:00
Miroslav Stampar
d834e8debf Minor update 2012-07-13 10:28:03 +02:00
Miroslav Stampar
b11fd8b9f7 Fix for an Issue #87 2012-07-13 10:11:16 +02:00
Bernardo Damele
162da75a04 modified homepage address 2012-07-12 18:38:03 +01:00
Miroslav Stampar
a49d685eb8 Hidding --beep (Issue #84) 2012-07-12 17:03:24 +02:00
Bernardo Damele
ea9c66108e cleanup for issue #68 2012-07-12 15:38:43 +01:00
Miroslav Stampar
569c9214bf Adding support for boldifying important logging messages 2012-07-12 16:30:35 +02:00
Miroslav Stampar
b2fe1c30f8 Minority report 2012-07-12 16:04:01 +02:00
Miroslav Stampar
8e18514e56 Minor refactoring for all that stickyness 2012-07-12 15:58:45 +02:00
Miroslav Stampar
fe61bdce75 Minor update 2012-07-12 15:25:26 +02:00
Miroslav Stampar
dbbca16c69 Minor renaming 2012-07-12 15:24:40 +02:00
Miroslav Stampar
9bc24cea6b Dealing with kb.currentMessage issue 2012-07-12 15:23:35 +02:00
Miroslav Stampar
b320dc118d Minor fix (recognizing if it's colorizing handler or not) 2012-07-12 14:55:54 +02:00
Miroslav Stampar
cba2a26b68 Finishing Issue #75 (inference dumping) 2012-07-12 14:46:57 +02:00
Miroslav Stampar
65639cdda6 First update for Issue #75 (error-based dumping) 2012-07-12 14:31:28 +02:00
Miroslav Stampar
3fd5119f3f Redesigning for Issue #75 2012-07-12 13:42:22 +02:00
Bernardo Damele
3d66e2dfb1 minor bug fix 2012-07-12 10:47:51 +01:00
Bernardo Damele
33cbbed4a8 I think we should not resume checkBooleanExpression() calls if --fresh-queries or --flush-session is provided 2012-07-12 01:39:15 +01:00
Bernardo Damele
f704a46341 silly blank line added 2012-07-12 01:38:29 +01:00
Bernardo Damele
ee3aeb8dcf actual implementation of issue #75, still some work to do 2012-07-12 01:16:00 +01:00
Bernardo Damele
3a94953ae2 leftover from previous commit 2012-07-12 01:15:34 +01:00
Bernardo Damele
a5924739f6 minor code refactoring in preparation of ticket #75 2012-07-12 01:12:30 +01:00
Bernardo Damele
53c0336b48 added --hostname switch to retrieve DBMS server hostname - closes issue #69 2012-07-12 00:01:57 +01:00
Bernardo Damele
4e64c1126d restored bold on questions to users (calls from readInput()) - issue #77 2012-07-11 22:56:11 +01:00
Bernardo Damele
247f95e051 restored kb.currentMessage - needed in cases where we send to dataToStdout() strings like "." (e.g. "creation in progres ..... done") 2012-07-11 22:48:27 +01:00
Bernardo Damele
2b3ea3e3b7 fixed colouring for PAYLOAD (-v 3) - issue #77 2012-07-11 22:40:52 +01:00
Miroslav Stampar
15ee5310d9 Adding traffic in and out to color_map 2012-07-11 20:42:18 +02:00
Miroslav Stampar
43cac2212b Fix for a case when ColorizingStreamHandler is not used 2012-07-11 20:36:32 +02:00
Miroslav Stampar
72378d4f61 Some more refactoring 2012-07-11 20:29:48 +02:00
Miroslav Stampar
c6464b44be Some more refactoring 2012-07-11 20:13:23 +02:00
Miroslav Stampar
d7926b8aac Minor refactoring 2012-07-11 19:54:21 +02:00
Bernardo Damele
53ccd09ca4 now also readInput() uses colouring 2012-07-11 17:53:32 +01:00
Bernardo Damele
02ec25b4b8 code refactoring 2012-07-11 17:44:23 +01:00
Bernardo Damele
77b275f1a6 conf->kb 2012-07-11 17:32:12 +01:00
Bernardo Damele
1d2c87e24e leftover 2012-07-11 17:22:01 +01:00
Bernardo Damele
105ac8ea77 deleted unnecessary hg file 2012-07-11 17:06:56 +01:00
Bernardo Damele
fa2f6f9a39 colourize manually crafter "logging" messages 2012-07-11 16:48:30 +01:00
Miroslav Stampar
295a7a8e5e Another update for Issue #80 2012-07-11 16:14:20 +02:00
Miroslav Stampar
9a4f8d5f45 Fix for Issue #80 2012-07-11 16:01:25 +02:00
Bernardo Damele
0702dd70b5 verify also that the web backdoor has been successfully uploaded 2012-07-11 14:08:51 +01:00
Bernardo Damele
31571e6e2d minor refactoring 2012-07-11 11:55:05 +01:00
Miroslav Stampar
9c4a62f725 Some work on Issue #68 2012-07-11 11:58:47 +02:00
Bernardo Damele
f219b39980 minor fix in case ctypes is not installed on Windows 2012-07-10 13:08:37 +01:00
Miroslav Stampar
8caffac4bc conf.unescape->kb.unescape 2012-07-10 10:55:04 +02:00
Miroslav Stampar
e7f78bf04f Fix for an issue where False value was displayed for --is.. switches 2012-07-10 10:31:14 +02:00
Bernardo Damele
ea77e7d9d1 added missing file - issue #77 2012-07-10 03:00:21 +01:00
Bernardo Damele
eb7ffb8f91 setup for implementing logging colouring - issue #77 2012-07-10 02:54:37 +01:00
Bernardo Damele
0a3899858d missed in previous commit 2012-07-10 01:37:53 +01:00
Bernardo Damele
a27f50ed1d added conf.unescape global variable to control whether or not the injected statements should be unescaped 2012-07-10 01:37:16 +01:00
Bernardo Damele
f645ac6040 dealing with variables in SQL procs - issue #33 2012-07-10 01:05:03 +01:00
Bernardo Damele
2527554f8e more work on #33 2012-07-10 00:53:07 +01:00
Bernardo Damele
c4af7b9aa0 initial work for issue #33 2012-07-10 00:27:08 +01:00
Bernardo Damele
d3da3f5c52 refactoring for issue #51 2012-07-10 00:19:32 +01:00
Bernardo Damele
25eca9d671 finally got this working on MSSQL 2005: commands can now be executed as another user (BULK INSERT must be used in such case, see comments in the code) - issue #34 2012-07-09 14:26:23 +01:00
Bernardo Damele
99c5ea54f7 cleanup for #34 2012-07-09 12:39:43 +01:00
Bernardo Damele
d08a54e375 properly display the command stdout 2012-07-09 10:52:48 +01:00
Miroslav Stampar
3ff28e58b4 Update regarding Issue #52 2012-07-08 19:24:25 +02:00
Miroslav Stampar
0d539a876d Minor fix (subversion->github) 2012-07-07 23:49:34 +02:00
Miroslav Stampar
a525dd4336 Fix for Issue #72 2012-07-07 19:02:46 +02:00
Miroslav Stampar
54e0a2d8ee --os-shell now works perfect for inference-like techniques too 2012-07-07 17:57:06 +02:00
Miroslav Stampar
823b3d8be8 Minor language fixes 2012-07-07 11:41:52 +02:00
Miroslav Stampar
2669528b24 Language typo 2012-07-07 11:16:33 +02:00
Miroslav Stampar
58f6687194 Some refactoring (reusing xpCmdshellForgeCmd) 2012-07-07 10:51:29 +02:00
Miroslav Stampar
8620767b77 Proper fix 2012-07-07 10:38:07 +02:00
Miroslav Stampar
f00a776d8d Minor fix for BigArray (now accepting negative indexes) 2012-07-07 10:35:29 +02:00
Miroslav Stampar
1c69eb5d30 Revert "major fix" 
This reverts commit 3a11fc2d9e.
 2012-07-07 10:26:13 +02:00
Bernardo Damele
3a11fc2d9e major fix 2012-07-06 22:55:34 +01:00
Miroslav Stampar
8c871476ee Some more refactoring 2012-07-06 17:34:40 +02:00
Miroslav Stampar
6bc0b34031 Some more refactoring 2012-07-06 17:28:01 +02:00
Miroslav Stampar
e948e4d45b Some more refactoring 2012-07-06 17:18:22 +02:00
Miroslav Stampar
1a8ebbfd43 Minor refactoring 2012-07-06 17:05:47 +02:00
Bernardo Damele
373fea03a3 fixed display of TABs 2012-07-06 15:13:23 +01:00
Miroslav Stampar
438a636973 Fix for issue Issue #60 2012-07-06 15:36:32 +02:00
Miroslav Stampar
76f7f907c6 Minor update for Issue #61 2012-07-06 14:33:40 +02:00
Miroslav Stampar
6a05e3fd79 Fix for Issue #61 2012-07-06 14:24:44 +02:00
Miroslav Stampar
1ebff35b19 Merge branch 'master' of github.com:sqlmapproject/sqlmap 2012-07-06 12:25:21 +02:00
Miroslav Stampar
982fcde1c0 Fix for Issue #62 2012-07-06 12:24:55 +02:00
Bernardo Damele
4fa6d51d93 improved issues link 2012-07-05 16:26:50 +01:00
Miroslav Stampar
bc5025b06c Fix for Issue #59 2012-07-05 12:34:27 +02:00
Miroslav Stampar
c3c1b9e957 Minor restyling 2012-07-04 20:28:18 +02:00
Miroslav Stampar
7ad6697446 Fix for Issue #57 2012-07-04 20:21:44 +02:00
Miroslav Stampar
23fb753759 Finishing work on Issue #52 2012-07-03 22:13:01 +02:00
Miroslav Stampar
40fc6488bf Fix for Issue #56 (Google has changed few things for retrieving PR) 2012-07-03 21:00:18 +02:00
Miroslav Stampar
bbf41f6658 Removing debugging leftover 2012-07-03 16:50:05 +02:00
Miroslav Stampar
ada627a022 Another update for Issue #52 2012-07-03 16:49:34 +02:00
Miroslav Stampar
70f754f6c5 Making work on Issue #52 2012-07-03 16:34:11 +02:00
Bernardo Damele
793fa464e3 website url fix 2012-07-03 13:14:39 +01:00
Miroslav Stampar
51f35674ca Removing obsolete switch --version as version is now displayed with every run (Issue #54) 2012-07-03 13:11:09 +02:00
Miroslav Stampar
481b46a004 Restyling output for Issue #52 2012-07-03 13:06:52 +02:00
Miroslav Stampar
6b419067b7 Another minor update for Issue #54 2012-07-03 12:49:35 +02:00
Miroslav Stampar
8b8677b938 Another minor update for Issue #54 2012-07-03 12:29:42 +02:00
Miroslav Stampar
47b6e696d8 Minor update for Issue #54 2012-07-03 12:21:40 +02:00
Miroslav Stampar
3af1532700 Implementation for Issue #54 2012-07-03 12:09:18 +02:00
Miroslav Stampar
5af6ca58a0 Merge branch 'master' of github.com:sqlmapproject/sqlmap 2012-07-03 00:50:45 +02:00
Miroslav Stampar
168aeadf76 Adding switch --output-dir (Issue #53) 2012-07-03 00:50:23 +02:00
Bernardo Damele
fd4cfb0cc0 working on #51 2012-07-02 15:28:19 +01:00
Bernardo Damele
7335072ab8 leftover 2012-07-02 15:11:21 +01:00
Bernardo Damele
04d803c7fd more tweaking for issue #34, it's totally not as trivial as it may look (OPENROWSET has many limitations on MSSQL >= 2005) 2012-07-02 15:02:00 +01:00
Bernardo Damele
b7d2680e55 minor refactoring, issue #51 2012-07-02 12:50:26 +01:00
Miroslav Stampar
8eefe4b71f Getting back revision number - displayed like in GitHub commits (Issue #52) 2012-07-02 13:01:20 +02:00
Bernardo Damele
add8352804 make the runAsDBMSUser() generic and ported to abstraction.py so the same function will be used for PostgreSQL dblink() too 2012-07-02 02:14:03 +01:00
Bernardo Damele
6697927098 initial support for --dbms-cred for MSSQL: can be used to execute OS commands as another DB use - useful if you have retrieved and cracked the 'sa' DBA password by any mean and can provide it to sqlmap 2012-07-02 02:04:19 +01:00
Bernardo Damele
7b4ecd9df0 added skeleton code for issue #34, still not usable 2012-07-02 00:22:34 +01:00
Bernardo Damele
4736d46677 just in case.. 2012-07-02 00:00:46 +01:00
Bernardo Damele
03d2c9c818 placeholder message when --update is provided, remove when the function is updated to pull changes from git 2012-07-01 23:59:44 +01:00
Bernardo Damele
18be319d13 hexencoding the command is much shorter than unescaping with CHAR() for MSSQL, also no need for spaces between nested comments when forging the xp_cmdshell command to run 2012-07-01 23:41:10 +01:00
Bernardo Damele
ff9e97a42c minor code refactoring 2012-07-01 23:31:45 +01:00
Bernardo Damele
ab412da27f I am back on stage and here to stay!!! to start.. a removal of confirm switch which masked cases where file write operations failed when set to False automatically, now at least it asks the user and defaults to Yes 2012-07-01 23:25:05 +01:00