Bernardo Damele
|
e4e9b11b79
|
Minor code refactoring and adjustments - kb.dbms is needed in fingerprint.py, not getIdentifiedDBMS because when checkDbms() method is called, it's within the fingerprint phase and at that stage, getIdentifiedDBMS() would always return kb.misc.fpDbms.
|
2011-01-14 12:47:07 +00:00 |
|
Bernardo Damele
|
3c95d71ea5
|
Minor bug fix - restored of so called kb.misc.testedDbms (now kb.misc.fpDbms) to force the DBMS (only) during the fingerprint phase
|
2011-01-14 11:55:20 +00:00 |
|
Bernardo Damele
|
2ac8debea0
|
Major code refactoring - moved to one location only (getIdentifiedDBMS() in common.py) the retrieval of identified/fingerprinted DBMS.
Minor bug fixes thanks to previous refactoring too.
|
2011-01-13 17:36:54 +00:00 |
|
Bernardo Damele
|
8a67aea754
|
One more step to fully working UNION exploitation after merge into detection phase
|
2011-01-12 01:13:32 +00:00 |
|
Bernardo Damele
|
8bdb7ec58c
|
Ahead with UNION exploitation after UNION test moved to detection phase - a lot to do yet.
|
2011-01-12 00:47:39 +00:00 |
|
Bernardo Damele
|
06230e4d92
|
Minor code refactoring and cosmetics
|
2011-01-11 21:46:21 +00:00 |
|
Miroslav Stampar
|
0676b38063
|
revert of one thing for Bernardo and minor update
|
2011-01-10 10:30:17 +00:00 |
|
Miroslav Stampar
|
8e83a26acf
|
minor fix
|
2011-01-07 17:53:17 +00:00 |
|
Bernardo Damele
|
cc46940159
|
Minor refactoring
|
2011-01-07 17:10:32 +00:00 |
|
Miroslav Stampar
|
b313a20a3f
|
some fixes
|
2011-01-07 16:39:47 +00:00 |
|
Bernardo Damele
|
16a06117f7
|
Mere cosmetics
|
2011-01-07 16:36:32 +00:00 |
|
Miroslav Stampar
|
8a48baf789
|
update for a "problem" reported by nightman@email.de where he lost all of large dumped table because in the middle of dumping 401 was raised
|
2011-01-04 13:23:59 +00:00 |
|
Miroslav Stampar
|
0eabca9fd4
|
update for a previous update (putting conf.dataEncoding in getUnicode wherever we know that data won't be 'touched' or 'used' in anyway related to the current web page - if not sure, just leave it as it is)
|
2011-01-03 22:31:29 +00:00 |
|
Miroslav Stampar
|
8e1927fe31
|
minor fix
|
2011-01-02 18:12:18 +00:00 |
|
Miroslav Stampar
|
5f9b6b2254
|
code refactoring
|
2011-01-02 16:51:21 +00:00 |
|
Miroslav Stampar
|
b763feafd9
|
bug fix (TypeError: object of type 'NoneType' has no len())
|
2011-01-02 12:26:31 +00:00 |
|
Miroslav Stampar
|
f0dad2a1e4
|
minor bug fix (in multiple item search only last item was shown)
|
2011-01-02 12:23:36 +00:00 |
|
Miroslav Stampar
|
7b9d978cf9
|
minor fix (database and/or table names with - sign inside needs to be escaped by ` character or will lead to a "SQL syntax")
|
2011-01-02 11:01:20 +00:00 |
|
Miroslav Stampar
|
73e8a10527
|
minor fix
|
2011-01-02 09:12:20 +00:00 |
|
Miroslav Stampar
|
e28b9f26fc
|
minor fix
|
2011-01-02 08:01:01 +00:00 |
|
Miroslav Stampar
|
26b06bfcfb
|
update (http://dev.mysql.com/doc/refman/5.0/en/server-system-variables.html)
|
2011-01-01 19:38:51 +00:00 |
|
Miroslav Stampar
|
7ea3d060f6
|
some fixes/updates here and there
|
2011-01-01 12:41:51 +00:00 |
|
Miroslav Stampar
|
076560f59f
|
bug fix
|
2010-12-31 12:58:27 +00:00 |
|
Miroslav Stampar
|
5db8ebbfa9
|
update of mysql comment versions
|
2010-12-31 12:42:12 +00:00 |
|
Miroslav Stampar
|
40e3489099
|
minor update
|
2010-12-31 12:27:57 +00:00 |
|
Miroslav Stampar
|
ce19b0c431
|
optimization of comment checking in MySQL
|
2010-12-31 12:21:02 +00:00 |
|
Miroslav Stampar
|
42e7b1b3a7
|
bug fix
|
2010-12-30 22:40:37 +00:00 |
|
Miroslav Stampar
|
20e3a6d72f
|
fix/refactor/cosmetics (references: http://www.postgresql.org/docs/6.4/static/release.htm,http://www.postgresql.org/docs/8.2/static/functions-datetime.html#FUNCTIONS-DATETIME-TABLE,http://www.postgresql.org/docs/8.3/static/release-8-3.html)
|
2010-12-30 21:53:34 +00:00 |
|
Miroslav Stampar
|
7f4acaf6f9
|
now comment injection fingerprint works with all techniques
|
2010-12-30 21:24:26 +00:00 |
|
Miroslav Stampar
|
6f17e84e19
|
minor fix
|
2010-12-30 08:29:20 +00:00 |
|
Miroslav Stampar
|
a77b186aca
|
minor fix
|
2010-12-27 16:55:27 +00:00 |
|
Miroslav Stampar
|
5015f04826
|
minor update
|
2010-12-27 16:36:05 +00:00 |
|
Miroslav Stampar
|
9c1676bdfa
|
minor cosmetics
|
2010-12-27 14:44:00 +00:00 |
|
Miroslav Stampar
|
9fb0e0fc85
|
resume of brute forced data is now available
|
2010-12-27 14:17:20 +00:00 |
|
Miroslav Stampar
|
3d23f226ae
|
minor update
|
2010-12-27 11:47:50 +00:00 |
|
Miroslav Stampar
|
68462466f2
|
minor fix for a bug reported by shaohua pan (argument of type 'NoneType' is not iterable)
|
2010-12-27 11:36:36 +00:00 |
|
Miroslav Stampar
|
51a492e17d
|
pretty important commit (now dumped tables are prone to dictionary attack)
|
2010-12-27 10:56:28 +00:00 |
|
Miroslav Stampar
|
c8d5a6b980
|
update
|
2010-12-27 00:41:16 +00:00 |
|
Miroslav Stampar
|
89c2640d23
|
basic --search now works with MS Access
|
2010-12-26 23:50:16 +00:00 |
|
Miroslav Stampar
|
c4d6a367e9
|
this way order given in -C is preserved
|
2010-12-26 14:11:42 +00:00 |
|
Miroslav Stampar
|
c93f2a703d
|
minor update
|
2010-12-26 14:02:16 +00:00 |
|
Miroslav Stampar
|
e41acb6fc2
|
further ms access improvements
|
2010-12-26 02:13:56 +00:00 |
|
Miroslav Stampar
|
2c8115eed9
|
further improvement for ms access table dumping
|
2010-12-26 01:04:30 +00:00 |
|
Miroslav Stampar
|
5249762794
|
update
|
2010-12-25 16:46:33 +00:00 |
|
Miroslav Stampar
|
fb099615e2
|
minor update
|
2010-12-25 11:16:35 +00:00 |
|
Miroslav Stampar
|
9853c1ec7f
|
fix for a bug reported by alessio.dallapiazza@gmail.com (AttributeError: users)
|
2010-12-25 09:13:57 +00:00 |
|
Miroslav Stampar
|
6845d402fa
|
well, here and there, merry Christmas to all :)
|
2010-12-24 20:17:53 +00:00 |
|
Miroslav Stampar
|
706d8e0b88
|
development update (basic ms access dumping implemented)
|
2010-12-24 19:53:11 +00:00 |
|
Miroslav Stampar
|
2c23a59ba5
|
fix for one of those more complex bugs (comparison was returning None while original page and/or page template were already had already DBMS error inside)
|
2010-12-24 12:13:48 +00:00 |
|
Miroslav Stampar
|
7c06dbffc3
|
bug fix (AttributeError: 'unicode' object has no attribute 'sort')
|
2010-12-22 18:55:50 +00:00 |
|