Bernardo Damele
|
d546fc5ad5
|
slight update to regression test regexp
|
2014-01-13 17:24:09 +00:00 |
|
Bernardo Damele
|
9a1be29b45
|
updated test cases for regression test
|
2014-01-13 17:12:59 +00:00 |
|
Bernardo Damele
|
dfa9076a70
|
fixed and improved web shell upload in MySQL (it was actually broken since fc57b7565d )
|
2014-01-13 17:12:37 +00:00 |
|
Miroslav Stampar
|
6863436d4e
|
Implementation for an Issue #596
|
2014-01-13 10:05:56 +01:00 |
|
Bernardo Damele
|
b4139f5b82
|
added takeover shared object for PgSQL 9.1 Linux 32-bit - issue #20
|
2014-01-10 18:16:25 +00:00 |
|
Bernardo Damele
|
4975aafa65
|
updated live tests
|
2014-01-10 17:38:04 +00:00 |
|
Bernardo Damele
|
148767941b
|
new host
|
2014-01-10 17:23:27 +00:00 |
|
Bernardo Damele
|
d9e00adfae
|
minor fix
|
2014-01-10 17:23:16 +00:00 |
|
Miroslav Stampar
|
36f3ab5798
|
Minor bug fix (for cases when race between thread and main thread is causing server._running to not be set to True)
|
2014-01-09 15:46:55 +01:00 |
|
Miroslav Stampar
|
cb1f17cb04
|
Proper patch for an Issue #591
|
2014-01-02 12:15:56 +01:00 |
|
Miroslav Stampar
|
5437f8bf36
|
Fix for an Issue #85
|
2014-01-02 12:09:58 +01:00 |
|
Miroslav Stampar
|
4de83daf03
|
Minor style update
|
2014-01-02 11:06:19 +01:00 |
|
Miroslav Stampar
|
e0143e397a
|
Consistency fix (down below we use direct SQL)
|
2014-01-02 10:59:53 +01:00 |
|
Miroslav Stampar
|
0b4fcb6845
|
Fix for an Issue #591
|
2014-01-02 10:55:40 +01:00 |
|
Miroslav Stampar
|
854a55166c
|
Fix for an Issue #588
|
2014-01-02 10:29:10 +01:00 |
|
Miroslav Stampar
|
9b4b070ecf
|
Minor cosmetics
|
2014-01-02 10:05:58 +01:00 |
|
Miroslav Stampar
|
192a911b76
|
Patch for an Issue #28
|
2013-12-29 16:16:50 +01:00 |
|
Miroslav Stampar
|
41d6c1af82
|
Patch for an Issue #589
|
2013-12-28 13:47:40 +01:00 |
|
Miroslav Stampar
|
6c80f2903b
|
Patch for an Issue #564
|
2013-12-27 11:02:59 +01:00 |
|
Miroslav Stampar
|
178056968f
|
Cleaning a leftover (deleted) made for Issue #564
|
2013-12-27 10:49:15 +01:00 |
|
Miroslav Stampar
|
cadbddd607
|
Adding a boundary proposed in Issue #564
|
2013-12-27 10:46:18 +01:00 |
|
Miroslav Stampar
|
7718edac9b
|
Fix for an Issue #570
|
2013-12-27 09:40:33 +01:00 |
|
Miroslav Stampar
|
02de2aee6d
|
Patch for an Issue #582
|
2013-12-26 22:27:04 +01:00 |
|
Miroslav Stampar
|
ab64d385d6
|
Bug fix (stacked queries as in PgSQL and MsSQL DNS tunneling queries MUST end with the comment - not the recognized underlying technique's suffix)
|
2013-12-25 22:18:57 +01:00 |
|
Miroslav Stampar
|
2c2667b2be
|
Minor patch for an Issue #575
|
2013-12-18 00:56:24 +01:00 |
|
Miroslav Stampar
|
fd6dcd8bf5
|
Merge pull request #583 from mattoufoutu/api
RESTful API improvements
|
2013-12-17 14:10:19 -08:00 |
|
Miroslav Stampar
|
9ead80d707
|
Minor patch for Issue #585
|
2013-12-17 09:39:43 +01:00 |
|
Miroslav Stampar
|
f18abb1e9c
|
Minor update (proxy can be also a https one (e.g. Burp for HTTPS targets)
|
2013-12-17 09:30:51 +01:00 |
|
Miroslav Stampar
|
7d8eb148ce
|
Patch for an Issue #565 (DuckDuckGo doesn't like identity encoding)
|
2013-12-17 09:30:04 +01:00 |
|
Miroslav Stampar
|
4819e19200
|
Patch for an Issue #584
|
2013-12-16 22:00:47 +01:00 |
|
Mathieu Deous
|
4c9456dd72
|
moar logging!
|
2013-12-15 16:59:47 +01:00 |
|
Mathieu Deous
|
438ad73016
|
avoid names shadowing
|
2013-12-15 09:22:01 +01:00 |
|
Mathieu Deous
|
eda9a3da67
|
all instance attributes should be defined in constructor
|
2013-12-15 09:16:38 +01:00 |
|
Mathieu Deous
|
3effaee2a1
|
avoid using global variables, use a "store" class
|
2013-12-15 00:19:58 +01:00 |
|
Mathieu Deous
|
c70f2a4e6d
|
unused imports
|
2013-12-15 00:00:08 +01:00 |
|
Mathieu Deous
|
aa02019638
|
return file content in a json message when calling download endpoint
|
2013-12-14 16:33:17 +01:00 |
|
Mathieu Deous
|
c87ad1bab5
|
make returned values more coherent
|
2013-12-14 16:22:30 +01:00 |
|
Mathieu Deous
|
72137e85f9
|
do not reset options when firing a scan
|
2013-12-14 15:59:47 +01:00 |
|
Mathieu Deous
|
af7ad31182
|
fix commit method usage (belongs to connection, not cursor)
|
2013-12-14 15:58:09 +01:00 |
|
Mathieu Deous
|
c5a3f54b89
|
remove unused imports
|
2013-12-14 15:47:26 +01:00 |
|
Mathieu Deous
|
8a946509b9
|
PEP8
|
2013-12-14 15:44:10 +01:00 |
|
Miroslav Stampar
|
5b2ded0b18
|
Fix for an Issue #577
|
2013-12-13 21:00:26 +01:00 |
|
Miroslav Stampar
|
437278e32d
|
Fix for an Issue #580
|
2013-12-13 19:48:05 +01:00 |
|
Miroslav Stampar
|
93628cdd62
|
Merge pull request #578 from mattoufoutu/master
api's get_option function doesn't lookup the right object
|
2013-12-09 04:52:34 -08:00 |
|
Mathieu Deous
|
c3dd6e1e32
|
api's get_option function doesn't lookup the right object
|
2013-12-08 17:46:02 +01:00 |
|
Bernardo Damele
|
a06a6de193
|
minor bug fix
|
2013-12-06 13:26:34 +00:00 |
|
Miroslav Stampar
|
b7244a07cb
|
Changing testing payload for MsSQL (BINARY_CHECKSUM seems to be blocked in some cases)
|
2013-12-04 11:32:42 +01:00 |
|
Miroslav Stampar
|
b0ca34ff27
|
Bug fix (payload character '=' was not being url-encoded in custom (user) post cases - when posthint was None)
|
2013-12-04 10:09:54 +01:00 |
|
Miroslav Stampar
|
bf3fbb0ae0
|
Ignore Google analytics cookies
|
2013-12-04 09:56:37 +01:00 |
|
Miroslav Stampar
|
dd2ddec79a
|
Minor fix (better extraction of original value in case of replacement and custom POST injection mark)
|
2013-12-03 13:37:04 +01:00 |
|