335 Commits

Author	SHA1	Message	Date
Miroslav Stampar	5d18c98ec2	quick fix for a bug reported by bugtrace (not using __goBooleanProxy because we don't have a proper vector this moment)	2010-12-11 17:20:39 +00:00
Miroslav Stampar	03447acc1d	avoiding some trashy match ratios	2010-12-11 17:12:19 +00:00
Miroslav Stampar	3dc0a51d34	major bug fix with boolean expressions	2010-12-11 08:46:19 +00:00
Miroslav Stampar	ac9080c07b	update	2010-12-11 08:24:29 +00:00
Miroslav Stampar	66db80804d	fix	2010-12-10 16:03:32 +00:00
Miroslav Stampar	435f48b8cc	polite cosmetics	2010-12-10 15:28:56 +00:00
Miroslav Stampar	977988c0ab	cosmetics	2010-12-10 15:24:25 +00:00
Miroslav Stampar	fa8d378e80	another update	2010-12-10 15:18:15 +00:00
Miroslav Stampar	1ef44cfe60	fix	2010-12-10 15:06:53 +00:00
Miroslav Stampar	fe186cde55	proper fix	2010-12-10 13:26:31 +00:00
Miroslav Stampar	9957881040	you won't believe commit	2010-12-10 13:20:59 +00:00
Miroslav Stampar	1fc9ed10a8	minor refactoring	2010-12-10 12:30:36 +00:00
Miroslav Stampar	4d8628e8fb	fix for booleans	2010-12-10 12:26:01 +00:00
Miroslav Stampar	471d9ccd65	another fix of my lala	2010-12-10 10:11:25 +00:00
Miroslav Stampar	029a6abba2	quick fix	2010-12-10 09:54:25 +00:00
Miroslav Stampar	441fc8dbd9	update regarding boolean based expressions	2010-12-09 21:15:18 +00:00
Miroslav Stampar	1492823de0	it wasn't pretty, now it's pretty	2010-12-09 20:06:20 +00:00
Bernardo Damele	9230877d98	cosmetics	2010-12-09 13:57:38 +00:00
Miroslav Stampar	196131bbca	minor cosmetics	2010-12-09 10:42:00 +00:00
Miroslav Stampar	3fd1c37d53	update	2010-12-09 07:49:18 +00:00
Bernardo Damele	b5c6527c72	Minor fix	2010-12-09 00:25:48 +00:00
Bernardo Damele	f5ce739bdf	Added support for time-based blind SQL injection via stacked queries too. Need to add vectors for some DBMS yet.	2010-12-08 23:52:31 +00:00
Miroslav Stampar	54f6673609	update	2010-12-08 22:38:26 +00:00
Miroslav Stampar	d6077273e0	update	2010-12-08 22:14:42 +00:00
Miroslav Stampar	40fadf2f35	minor update	2010-12-08 14:33:10 +00:00
Miroslav Stampar	01cf1394a4	code refactoring	2010-12-08 14:26:40 +00:00
Miroslav Stampar	6223f25dd9	code beautification	2010-12-08 13:04:48 +00:00
Miroslav Stampar	64cc2588f1	now resume is available for time-based blinds too	2010-12-08 12:49:26 +00:00
Miroslav Stampar	537b619165	removing junk	2010-12-08 12:30:25 +00:00
Miroslav Stampar	b5e45939e3	sqlmap premiere of blind time based query/bisection	2010-12-08 12:28:54 +00:00
Miroslav Stampar	47bb31fb47	code refactoring	2010-12-08 11:30:25 +00:00
Miroslav Stampar	1ae2fa7f1a	update regarding time based payloads	2010-12-08 11:26:54 +00:00
Miroslav Stampar	bdff4aba6a	switching to quick_ratio	2010-12-07 23:57:43 +00:00
Miroslav Stampar	c1b82cf09c	ratio() gives a considerable lag on real life cases, as real_quick_ratio() gives almost as good results	2010-12-07 23:53:44 +00:00
Miroslav Stampar	a4a63f5b1e	minor update	2010-12-07 23:49:00 +00:00
Miroslav Stampar	293ce18fed	two major bug fixes regarding time calculation (previously comparison was also a part of "delta", which screwed results in cases with large pages; other was a standard distribution based one)	2010-12-07 23:32:33 +00:00
Miroslav Stampar	dc651d59ec	little mathematics here and there (used "Rules for normally distributed data")	2010-12-07 19:19:12 +00:00
Bernardo Damele	81e7465ed2	Cosmetics	2010-12-07 17:16:21 +00:00
Miroslav Stampar	294119d2ec	more advanced time technique(s)	2010-12-07 16:04:53 +00:00
Miroslav Stampar	e53fef546e	update regarding session page templates	2010-12-07 14:35:31 +00:00
Miroslav Stampar	add6235b16	removed pageTemplate from injection(s), it's not longer stored in session, and it's reloaded when resuming from session	2010-12-07 14:06:54 +00:00
Miroslav Stampar	0dc630203f	code refactoring	2010-12-07 13:34:06 +00:00
Miroslav Stampar	d77ddbee47	OR based inference works for the first time in history and fingerprint of 4 major DBMSes is now injection based (instead of AND)	2010-12-06 18:20:57 +00:00
Bernardo Damele	17449754fe	Got rid of UNION false cond	2010-12-05 16:16:15 +00:00
Miroslav Stampar	9e5f933ace	some updates	2010-12-04 15:47:02 +00:00
Miroslav Stampar	eeb199375b	usage of compiled regexes in case of dynamic markings and other refactoring	2010-12-04 13:23:28 +00:00
Miroslav Stampar	0fc7a8f9e8	code refactoring	2010-12-04 10:13:18 +00:00
Miroslav Stampar	04714374f9	now you can use kb.pageTemplate to set a page which will be used as a template in comparison process (at least in '-[RANDNUM] OR' cases we'll need to use different template(s))	2010-12-04 10:05:18 +00:00
Miroslav Stampar	5764816891	minor cosmetics	2010-12-03 22:28:09 +00:00
Bernardo Damele	5d37df6104	Ugly code to set the cookies when got them from a 302 redirect too	2010-12-03 17:41:10 +00:00