643 Commits

Author	SHA1	Message	Date
Bernardo Damele	04caef6de0	Tuning	2010-12-13 23:04:26 +00:00
Bernardo Damele	cfcee6439e	Cosmetics	2010-12-13 21:55:30 +00:00
Bernardo Damele	4b79227b5a	Minor bug fix to properly merge options from .conf file (-c) with command line switches	2010-12-13 21:36:23 +00:00
Bernardo Damele	698f30e65e	Cosmetics	2010-12-13 21:34:35 +00:00
Miroslav Stampar	d56f47d530	fix for a bug reported by black zero (ValueError: invalid literal for int() with base 10: '1-20')	2010-12-12 23:59:55 +00:00
Miroslav Stampar	e98d9c08e1	dumping table is now possible on Firebird too	2010-12-12 14:38:07 +00:00
Miroslav Stampar	c93634b6c7	blind dumping of tables in sqlite implemented	2010-12-11 22:13:19 +00:00
Miroslav Stampar	b1babeefe5	update regarding dumping of tables with blind on Sqlite	2010-12-11 22:00:16 +00:00
Miroslav Stampar	6a24048aa6	urllib2 doesn't play well with '\n' when non unescaped chars used	2010-12-11 21:17:54 +00:00
Miroslav Stampar	d2a3e8f44f	first time firebird error-based query success	2010-12-11 11:17:24 +00:00
Miroslav Stampar	f021548bd0	added inference failsafe (like in for instance Firebirds SUBSTR always returns a string value, no matter which starting index you use)	2010-12-11 10:52:04 +00:00
Miroslav Stampar	1fc9ed10a8	minor refactoring	2010-12-10 12:30:36 +00:00
Miroslav Stampar	fe2039f5ba	coollyy little commits	2010-12-10 11:32:46 +00:00
Miroslav Stampar	d5e7a8d305	update	2010-12-10 10:54:17 +00:00
Bernardo Damele	b6dcbcef5b	Minor fix	2010-12-10 10:52:55 +00:00
Miroslav Stampar	bbffea2cbc	bug fix	2010-12-09 17:10:22 +00:00
Miroslav Stampar	0eb2c408a9	code refactoring	2010-12-09 16:49:02 +00:00
Bernardo Damele	5fb04515d3	Added hidden (for the moment) switch --technique	2010-12-09 13:47:17 +00:00
Miroslav Stampar	ec5c08ca7a	cosmetics	2010-12-09 09:24:20 +00:00
Miroslav Stampar	db39dc32fc	minor update	2010-12-09 00:59:39 +00:00
Bernardo Damele	9c61adb21d	Cosmetics	2010-12-09 00:26:06 +00:00
Miroslav Stampar	258e9fb50e	fix for a "bug" reported by Spencer J. McIntyre (os.makedirs(conf.outputPath, 0755) -> permission denied)	2010-12-08 21:16:18 +00:00
Miroslav Stampar	81c16926c1	code refactoring some more	2010-12-08 14:46:07 +00:00
Miroslav Stampar	95b48746a6	cosmetics	2010-12-08 14:29:09 +00:00
Miroslav Stampar	01cf1394a4	code refactoring	2010-12-08 14:26:40 +00:00
Miroslav Stampar	af22679605	minor update	2010-12-08 13:09:27 +00:00
Miroslav Stampar	6223f25dd9	code beautification	2010-12-08 13:04:48 +00:00
Miroslav Stampar	64cc2588f1	now resume is available for time-based blinds too	2010-12-08 12:49:26 +00:00
Miroslav Stampar	293ce18fed	two major bug fixes regarding time calculation (previously comparison was also a part of "delta", which screwed results in cases with large pages; other was a standard distribution based one)	2010-12-07 23:32:33 +00:00
Miroslav Stampar	b21eb88905	minor update	2010-12-07 22:45:38 +00:00
Miroslav Stampar	dc651d59ec	little mathematics here and there (used "Rules for normally distributed data")	2010-12-07 19:19:12 +00:00
Bernardo Damele	5f97312f29	Minor fix	2010-12-07 17:17:38 +00:00
Miroslav Stampar	ecd4a5a532	added standard deviation check in time based tests	2010-12-07 16:39:31 +00:00
Miroslav Stampar	294119d2ec	more advanced time technique(s)	2010-12-07 16:04:53 +00:00
Miroslav Stampar	add6235b16	removed pageTemplate from injection(s), it's not longer stored in session, and it's reloaded when resuming from session	2010-12-07 14:06:54 +00:00
Miroslav Stampar	0dc630203f	code refactoring	2010-12-07 13:34:06 +00:00
Bernardo Damele	8e78057ac8	Added counter of total HTTP(s) requests done during detection phase	2010-12-07 12:33:47 +00:00
Bernardo Damele	effd2ca0e3	Cosmetics	2010-12-07 12:32:58 +00:00
Miroslav Stampar	2af8835a94	fix for a bug reported by ToR (origValue = paramDict[kb.injection.parameter] -> KeyError in resume with missing injection parameter)	2010-12-07 10:57:32 +00:00
Miroslav Stampar	3d87489de5	minor update	2010-12-07 08:05:03 +00:00
Miroslav Stampar	61f82fd274	introducing [DELAYED] for heavy query time based payloads when response time is non-deterministic	2010-12-07 00:27:26 +00:00
Miroslav Stampar	2735848ab6	removed ERROR_SPACE	2010-12-06 22:40:07 +00:00
Miroslav Stampar	d77ddbee47	OR based inference works for the first time in history and fingerprint of 4 major DBMSes is now injection based (instead of AND)	2010-12-06 18:20:57 +00:00
Miroslav Stampar	27ee9a5ccf	minor refactoring	2010-12-06 15:50:19 +00:00
Miroslav Stampar	a43d252ae9	minor update	2010-12-06 00:14:08 +00:00
Bernardo Damele	17449754fe	Got rid of UNION false cond	2010-12-05 16:16:15 +00:00
Bernardo Damele	41e1b95c6c	Minor code refactoring and finally make exploitation work also on OR boolean-based injections	2010-12-05 11:25:44 +00:00
Miroslav Stampar	9e5f933ace	some updates	2010-12-04 15:47:02 +00:00
Miroslav Stampar	3f9450b9dc	minor fix	2010-12-04 14:43:35 +00:00
Miroslav Stampar	1f795622b3	some fine tuning of dynamicity removing engine	2010-12-04 13:39:35 +00:00