| 
							
							
								 Miroslav Stampar | d95ff4350d | bug fix | 2011-09-20 13:08:35 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 4a3580d10b | minor fix | 2011-09-19 19:08:08 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | af7af0a1df | added version check (no more crashes on Python > 3 and < 2.6 | 2011-09-12 22:48:57 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | f890b29f81 | Proper reference to Metasploit Framework as now it's version 4, not 3 anymore | 2011-09-12 17:26:22 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 4fb6dab1a2 | minor bug fix | 2011-09-12 14:15:57 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 9a1ac96756 | bug fix | 2011-09-11 17:22:27 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 1bdde51d0e | minor just in case update | 2011-09-11 16:41:07 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 02f993583b | minor bug fix | 2011-09-09 11:36:09 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 2f4e34f5a0 | minor improvement for URI injections | 2011-09-08 11:13:12 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | d434047482 | minor bug fix | 2011-09-05 09:28:40 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 382db1b67a | degrading Microsoft Access UNION tests for one level down (it really does take toooooo long to scan a site with no vulnerable parameters and normal level) | 2011-08-31 20:35:57 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 793f1d7774 | new tampering script | 2011-08-29 15:42:01 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 08e0eb9b61 | minor lower/upper case fix | 2011-08-29 13:47:32 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 9be89422da | implemented parameter --skip | 2011-08-29 13:29:42 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e0f521cf9d | minor update regarding --randomize | 2011-08-29 13:08:25 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | ac00014c4a | implemented --randomize switch by request | 2011-08-29 12:50:52 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | d283e3eb3c | adding support for pre-WHERE injections | 2011-08-24 09:04:18 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 8fe069b495 | minor fix | 2011-08-23 21:48:39 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 01014eca17 | by request | 2011-08-23 21:45:01 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 606debe55c | better language | 2011-08-23 21:42:34 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 699cb89711 | minor corrections to the definition and minor typos | 2011-08-23 16:56:13 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | cfc1f2b70b | minor update | 2011-08-22 22:43:14 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | f4127a80d7 | improvement of UNION based injection detection (with non-NULL kb.uChar values searching of the content inside -1 UNION.. pages is used) | 2011-08-22 21:43:46 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | dafc4d93bd | typo | 2011-08-22 15:05:54 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 8a174248dc | fix for a bug reported by blueBoy | 2011-08-20 20:08:11 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | fb6a84b10b | minor update (when columns are missing from information_schema too) | 2011-08-18 07:03:53 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | cb32d46f2a | minor minor update | 2011-08-18 06:09:12 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 54bcc35ba7 | important bug fix (connection exception was causing losing of already retrieved data) | 2011-08-17 22:31:33 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 9d31322f3d | update regarding special case when conf.uChar appears only in testable pages | 2011-08-17 21:40:42 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 75ec146224 | minor beautification | 2011-08-17 21:17:02 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | f46baac70b | bug fix (when comment is None this was errornous) | 2011-08-17 10:58:29 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 9361e633f4 | Minor bug fix - some applications do really set cookies like param="value" with double-quotes | 2011-08-16 09:21:01 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e1dbb4443b | minor update related to the last commit | 2011-08-16 07:01:14 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 7cc5743c5d | minor adjustment of a time based char retrievals (no more infinite increasing of timeSec value for problematic characters) | 2011-08-16 06:50:20 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 600ef3eace | minor patch | 2011-08-16 06:22:04 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 262996fc5b | bug fix | 2011-08-16 06:14:40 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | df4abf1af1 | lowering constant value from 10 to 7 for da peace in da houz | 2011-08-12 17:19:19 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 702ed73a65 | Added --code switch to match in boolean-based tests against the HTTP response code | 2011-08-12 16:48:11 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | e34787db99 | update | 2011-08-12 16:06:41 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | fff4c34e33 | Search for --string and --regexp matches also in HTTP response headers | 2011-08-12 15:33:37 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 6d22d09a61 | doc updated | 2011-08-12 15:03:39 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 5e5133b8e7 | Should be fixed now | 2011-08-12 15:00:11 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 1505cb2a80 | typo | 2011-08-12 14:51:39 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 702ca22d54 | Minor bug fix for URI injections | 2011-08-12 14:48:44 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 28bba9f5e6 | More verbose warning message | 2011-08-12 13:47:38 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 10bdd90e60 | minor speed optimizations (as a result of profiling) | 2011-08-12 13:40:37 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 36280b33fa | Ask the user wheather or not to adjust the time delay - there have been a case where the forcing of conf.timeSec screwed the result in an extremely lagged and unreliable site | 2011-08-12 13:06:40 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 997c9ba1e8 | Minor adjustments to user's manual | 2011-08-12 12:56:55 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 41ae9bc7ff | minor bug fix | 2011-08-09 14:20:25 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 2ad267132a | minor update for empty normal responses (like AJAX requests) | 2011-08-05 10:55:21 +00:00 |  |