106 Commits

Author	SHA1	Message	Date
Miroslav Stampar	2cc167a42e	fix for a bug reported by ToR: "AttributeError: 'NoneType' object has no attribute 'isdigit'"	2010-12-02 18:57:43 +00:00
Bernardo Damele	c22338ce90	Removed --error-test, --stacked-test and --time-test switches and adapted the code accordingly. This is due to the fact that the new XML based detection engine already supports all of those tests (and more).	2010-11-29 11:47:58 +00:00
Miroslav Stampar	ba4ea32603	first working version of dictionary attack	2010-11-23 13:24:02 +00:00
Bernardo Damele	a34c1b287c	Bug fix related to properly identify and parse the version from the banner (used for --stacked-test and other matters on MySQL/PgSQL)	2010-11-12 11:33:11 +00:00
Miroslav Stampar	42272ca78c	minor update	2010-11-11 22:26:36 +00:00
Miroslav Stampar	be992b4471	update regarding common columns existance check	2010-11-11 17:09:31 +00:00
Miroslav Stampar	4be0631161	refactoring of brute force techniques	2010-11-09 09:42:43 +00:00
Bernardo Damele	dac7436edf	Fix inconsistence with -b --error-test	2010-11-08 15:36:07 +00:00
Miroslav Stampar	862395ced1	further refactoring (all enumerations are now put into enums.py)	2010-11-08 09:20:02 +00:00
Miroslav Stampar	c8fe2fa8d8	minor fix	2010-11-04 22:00:14 +00:00
Miroslav Stampar	d7dbf814a0	fix/update for Access	2010-11-04 21:47:21 +00:00
Miroslav Stampar	6adee3792a	removed all trailing spaces from blank lines	2010-11-03 10:08:27 +00:00
Miroslav Stampar	4b56fa4f8f	now --tables work for MaxDB	2010-11-02 22:11:45 +00:00
Miroslav Stampar	b761523f3f	now --users works for MaxDB too	2010-11-02 21:52:48 +00:00
Miroslav Stampar	cd0d4135ac	implemented --banner for MaxDB and some minor fixes	2010-11-02 20:51:55 +00:00
Miroslav Stampar	685a8e7d2c	refactoring of hard coded dbms names	2010-11-02 11:59:24 +00:00
Miroslav Stampar	9d2c81baa9	more update for ms access	2010-11-02 11:06:47 +00:00
Bernardo Damele	486a113560	Consolidate logger messages for --*-test switches	2010-10-31 16:58:38 +00:00
Bernardo Damele	eab331ebd7	Minor bug fix	2010-10-31 13:46:08 +00:00
Bernardo Damele	65a0a8d285	Delegate urlencoding to agent.py only	2010-10-31 13:28:05 +00:00
Bernardo Damele	17e8abe841	Removed useless call to urlencode()	2010-10-31 12:47:22 +00:00
Miroslav Stampar	a921fe0d5d	fix for using --banner --stacked-test together	2010-10-29 15:31:24 +00:00
Miroslav Stampar	d75578c81f	some update regarding common tables	2010-10-29 09:00:51 +00:00
Miroslav Stampar	749e25a217	Implementation of --passwords for Sybase	2010-10-26 21:35:30 +00:00
Bernardo Damele	f5904d0bc0	Major bug fix to --union-test	2010-10-25 23:39:55 +00:00
Miroslav Stampar	8a9a57c709	update for Sybase and major bug fix for --passwords on MSSQL	2010-10-25 22:11:38 +00:00
Miroslav Stampar	9b56fbafbe	that Sybase is going to be pain in the ass	2010-10-25 21:43:13 +00:00
Bernardo Damele	debaf2215f	Consistency between cmdline.py, optiondict.py and sqlmap.conf and got rid of --union-use switch	2010-10-25 15:54:45 +00:00
Bernardo Damele	215175e3b7	Minor code adjustments	2010-10-25 14:11:47 +00:00
Miroslav Stampar	32728d14b7	fix for --union-use with --error-test	2010-10-25 12:25:29 +00:00
Miroslav Stampar	f8850e3f41	update (xml fix and refactoring)	2010-10-23 07:44:34 +00:00
Miroslav Stampar	a7a53af924	update for Sybase	2010-10-23 07:37:43 +00:00
Miroslav Stampar	a8e42a4f2b	bug fix	2010-10-23 06:42:21 +00:00
Miroslav Stampar	dec4d858b3	fix for Bug #207	2010-10-22 14:01:48 +00:00
Miroslav Stampar	1b2ec826bf	misc fixes regarding new query retrieval format	2010-10-21 23:17:06 +00:00
Miroslav Stampar	bc79eec702	removed queriesfile.py, implemented XMLObject approach (still shell.py and udf.py TODO)	2010-10-21 13:13:12 +00:00
Bernardo Damele	e73e06069b	Minor code refactoring	2010-10-20 22:09:03 +00:00
Miroslav Stampar	1b376c99a6	removed temp dictionary and replaced with kb.misc	2010-10-19 23:00:19 +00:00
Miroslav Stampar	6a8b1046d4	first successfull run of error based sqlmap in history :). tested --banner, --current-user, --current-db on 4 major DBMSes. still hidden from users (turn on flag error in getValue() in inject.py)	2010-10-19 12:02:04 +00:00
Bernardo Damele	e7c8be1d45	Minor layout adjustments	2010-10-15 15:37:15 +00:00
Miroslav Stampar	4f7f20b94f	sorry, cosmetics	2010-10-14 23:18:29 +00:00
Miroslav Stampar	8b48833136	large commit with copyright header modifications	2010-10-14 14:41:14 +00:00
Miroslav Stampar	8abcdae1b5	some update	2010-09-30 19:45:23 +00:00
Miroslav Stampar	cf8e92699c	changes regarding EXISTS feature	2010-09-30 12:35:45 +00:00
Miroslav Stampar	e176b36a7f	update	2010-09-24 22:09:33 +00:00
Miroslav Stampar	18db96c45f	fix for bug reported by David Guimaraes (colEntry = entry[index] - IndexError: list index out of range)	2010-09-01 09:25:21 +00:00
Miroslav Stampar	b0ba559af5	minor update	2010-08-31 14:31:17 +00:00
Miroslav Stampar	c4040ab297	fix for Feature #136	2010-08-31 14:25:37 +00:00
Miroslav Stampar	12a5ec9f3d	more unicode refactoring	2010-06-02 12:45:40 +00:00
Bernardo Damele	b798222dd7	Minor fixes	2010-05-30 14:53:13 +00:00