3445 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Miroslav Stampar	3f8eadf4fe	minor refactoring	2011-02-22 13:00:58 +00:00
Miroslav Stampar	dcad5410fe	minor refactoring	2011-02-22 12:54:22 +00:00
Miroslav Stampar	17c39fe231	fix for that non-HTML stuff	2011-02-22 11:32:55 +00:00
Miroslav Stampar	ff9080de48	MaxDB always precalculates values for both TRUE and FALSE, hence we can't trick him to run any "faulty" command (e.g. 1/0). This payload is fairly ok because in case of FALSE --> something=NULL is always NULL	2011-02-21 20:59:34 +00:00
Miroslav Stampar	08697e60a9	added some Microsoft Access payloads	2011-02-21 20:04:50 +00:00
Bernardo Damele	3e8c204121	Major bug fix to properly prepare UNION technique statement for --os-pwn and --is-dba	2011-02-21 16:00:56 +00:00
Miroslav Stampar	90582ed7dc	minor change	2011-02-21 11:35:21 +00:00
Miroslav Stampar	68a95fd1b1	minor update	2011-02-20 22:45:23 +00:00
Miroslav Stampar	aac817935a	further improvement of MaxDB support	2011-02-20 22:41:42 +00:00
Miroslav Stampar	a3ba8b6928	--dump now works on MaxDB too	2011-02-20 22:07:12 +00:00
Miroslav Stampar	70449eb01b	minor bug fix	2011-02-20 21:35:28 +00:00
Miroslav Stampar	345df5968d	minor update	2011-02-20 21:27:38 +00:00
Miroslav Stampar	0e512d3c09	minor update for MaxDB	2011-02-20 21:17:16 +00:00
Miroslav Stampar	59e666d16e	--is-dba (related) update for Sybase	2011-02-20 17:28:06 +00:00
Miroslav Stampar	4d52f7fc6e	minor fix regarding --dump-table on Sybase for --technique=23	2011-02-20 16:58:01 +00:00
Miroslav Stampar	67ec691eb1	more updates regarding Sybase	2011-02-20 16:28:48 +00:00
Miroslav Stampar	cc47737c44	minor update	2011-02-20 16:00:13 +00:00
Miroslav Stampar	823e4351b5	minor change	2011-02-20 12:34:09 +00:00
Miroslav Stampar	0c57f2af0f	minor fix	2011-02-20 12:20:44 +00:00
Miroslav Stampar	2f9227bcce	Sybase update (--passwords)	2011-02-20 12:07:32 +00:00
Bernardo Damele	6e1a08a805	Documentation update	2011-02-19 21:08:18 +00:00
Bernardo Damele	023a80c31c	Section explanation change to reflect recent enhancements	2011-02-19 21:06:24 +00:00
Bernardo Damele	60b05ff49f	Reflect new switch name	2011-02-19 21:05:15 +00:00
Bernardo Damele	8e60acae5d	Added support for --scope also in WebScarab logs (-l)	2011-02-19 21:03:55 +00:00
Miroslav Stampar	f30dea74f3	more Sybase updates	2011-02-19 18:36:26 +00:00
Miroslav Stampar	b71bb321dd	some more Sybase updates	2011-02-19 18:04:27 +00:00
Miroslav Stampar	cec7694aac	some progress regarding SYBASE	2011-02-19 14:56:58 +00:00
Miroslav Stampar	e0efe453ab	minor update regarding Sybase support	2011-02-19 14:07:08 +00:00
Miroslav Stampar	de7ca5a27c	minor update	2011-02-19 09:40:41 +00:00
Miroslav Stampar	72fc0a0565	minor refactoring	2011-02-19 09:36:57 +00:00
Miroslav Stampar	5f4ffc9287	update regarding Sybase dumping	2011-02-19 00:36:47 +00:00
Miroslav Stampar	df58bcaf95	minor improvement	2011-02-18 14:27:02 +00:00
Miroslav Stampar	3badf92ceb	not doing "basic" filtering in default cases because of a bug reported by Kazim	2011-02-18 07:38:13 +00:00
Miroslav Stampar	6cdf08b81c	minor fix	2011-02-17 21:51:40 +00:00
Miroslav Stampar	22cd49a217	--technique can now be something like 123 which includes both techniques 1, 2 and 3	2011-02-17 21:39:16 +00:00
Miroslav Stampar	7ebc1ab90a	minor cosmetics	2011-02-17 08:59:14 +00:00
Bernardo Damele	dcb398f916	Test 2	2011-02-16 11:12:15 +00:00
Bernardo Damele	fc7414db7a	Test	2011-02-16 11:09:58 +00:00
Miroslav Stampar	199f14df46	implementation of MySQL GROUP_CONCAT technique	2011-02-15 00:28:27 +00:00
Bernardo Damele	808b03fc3e	Minor reordering	2011-02-14 02:08:11 +00:00
Bernardo Damele	2ea828e416	Proper fix for r3307 (file-write on MySQL via UNION query tech)	2011-02-13 22:48:01 +00:00
Miroslav Stampar	417b311475	minor update	2011-02-13 22:02:47 +00:00
Miroslav Stampar	50d25c3b4d	update regarding explicit testing of ua and referer when using -p	2011-02-13 21:58:48 +00:00
Bernardo Damele	429ab631fe	Minor refactoring	2011-02-13 21:25:01 +00:00
Miroslav Stampar	5fb11fd173	update regarding multiple DBMS payloads	2011-02-13 21:20:21 +00:00
Bernardo Damele	45a005737d	Minor adjustment so that User-Agent and Referer headers are tests only when --level >= 3 and Cookie is tested only when --level >= 2	2011-02-13 21:08:42 +00:00
Miroslav Stampar	83d7803ce7	other techniques use dataToStdout for retrieved string, hence this update (also, fixing ugly retrieved: 0 or 1 while doing fingerprinting --flush-session -f --technique=2)	2011-02-12 20:03:28 +00:00
Miroslav Stampar	9f7d666451	removing --method per request of buawig	2011-02-12 19:50:27 +00:00
Miroslav Stampar	1cd483f42f	one more update	2011-02-12 10:24:09 +00:00
Miroslav Stampar	25a3a64327	we need this because of one pesky little bug going around (when union is recognized and the dbmses are fingerprinted, for those who don't have proper unescaping false TRUE is recognized in form of retrieved: %27%2B%28SELECT%20CAST...). tested on all major DBMSes.	2011-02-12 10:15:42 +00:00