389 Commits

Author	SHA1	Message	Date
Miroslav Stampar	6cdf08b81c	minor fix	2011-02-17 21:51:40 +00:00
Miroslav Stampar	22cd49a217	--technique can now be something like 123 which includes both techniques 1, 2 and 3	2011-02-17 21:39:16 +00:00
Miroslav Stampar	5fb11fd173	update regarding multiple DBMS payloads	2011-02-13 21:20:21 +00:00
Bernardo Damele	c3eb82e60b	Proper fix	2011-02-08 10:08:48 +00:00
Miroslav Stampar	dba2f74588	revert of r3274	2011-02-08 09:44:34 +00:00
Bernardo Damele	cfe2da0195	Minor fix	2011-02-08 00:13:39 +00:00
Miroslav Stampar	e023e0d233	proper fix	2011-02-07 12:32:08 +00:00
Bernardo Damele	3719f085ae	Added back-end dbms' OS based methods to Backend object - will be used for refactoring	2011-02-07 00:21:17 +00:00
Miroslav Stampar	4df8a03c04	using OrderedDict to store parameters in order of appearance	2011-02-04 18:07:21 +00:00
Bernardo Damele	fec88f6a6d	Minor fix	2011-02-04 15:57:53 +00:00
Miroslav Stampar	accf4e6ce0	one important fix (URI injection parameter '*' now can go anywhere)	2011-02-04 12:43:18 +00:00
Miroslav Stampar	c229efba05	revert	2011-02-04 11:33:21 +00:00
Miroslav Stampar	d211def899	minor adjustment (accepting strange new looking uri formats)	2011-02-04 10:55:03 +00:00
Miroslav Stampar	9a1a28c804	adding comments to filtering function	2011-02-03 23:09:08 +00:00
Miroslav Stampar	2dae57a56d	cosmetics	2011-02-02 14:35:21 +00:00
Miroslav Stampar	6c87bd1c63	added maskSensitiveData function	2011-02-02 14:25:16 +00:00
Bernardo Damele	3d966bd569	You never know..	2011-02-01 22:05:12 +00:00
Miroslav Stampar	705d45f4db	minor cosmetics	2011-02-01 11:10:23 +00:00
Miroslav Stampar	196e2d35b2	maybe we could ask user "are you willing to import local data content into error report" and use this function respectably	2011-02-01 11:06:56 +00:00
Bernardo Damele	6761933f75	Just.. cosmetics ;)	2011-01-31 22:51:14 +00:00
Miroslav Stampar	25c175a9a5	minor bug fix	2011-01-31 22:34:57 +00:00
Bernardo Damele	b04e1a0313	More detailed message for unhandled exception	2011-01-31 21:23:40 +00:00
Miroslav Stampar	8ef47307db	added checking of header values for GREP (error); still UNION to do	2011-01-31 12:21:17 +00:00
Miroslav Stampar	5e768be509	minor bug fix	2011-01-31 09:34:54 +00:00
Miroslav Stampar	f7feebe0df	fix for a bug reported by malice.anon@gmail.com (TypeError: encode() takes no keyword arguments)	2011-01-31 09:28:16 +00:00
Miroslav Stampar	ddf23ba7cc	refactoring	2011-01-30 11:36:03 +00:00
Miroslav Stampar	367d0639f0	refactoring (class names should always be Capital cased)	2011-01-28 16:36:09 +00:00
Miroslav Stampar	ddd296030d	added some more info to unhandled exception message(s)	2011-01-28 16:15:45 +00:00
Miroslav Stampar	81722b6881	major bug fix reported by Ahmed Shawky (there was a possibility of double url encoding of parameter values)	2011-01-27 18:36:28 +00:00
Miroslav Stampar	6cc69f5e16	now --technique is appliable also after the injections have been identified	2011-01-24 16:47:24 +00:00
Miroslav Stampar	81011be0d7	minor update of parseTargetUrl method	2011-01-24 14:52:50 +00:00
Miroslav Stampar	b18397fbc7	major revisit of --os-shell methods	2011-01-23 20:47:06 +00:00
Bernardo Damele	7d1c704575	Moved little precaution from checks.py to common.py. ... Initial refactoring of kb.os* get/set.	2011-01-20 21:56:10 +00:00
Miroslav Stampar	345e2288e1	important fix regarding encoding stuff	2011-01-20 13:54:18 +00:00
Bernardo Damele	bade0e3124	Major code refactoring - centralized all kb.dbms* info for both retrieval and set.	2011-01-19 23:06:15 +00:00
Miroslav Stampar	aea43a1e43	minor refactoring	2011-01-19 15:26:57 +00:00
Miroslav Stampar	eadaf680de	fuck yea	2011-01-19 15:25:48 +00:00
Miroslav Stampar	89e0fd0709	back to roots	2011-01-19 14:06:26 +00:00
Bernardo Damele	33485198e1	Code cleanup	2011-01-18 23:05:32 +00:00
Bernardo Damele	47565f9459	Minor code refactoring	2011-01-17 21:13:59 +00:00
Miroslav Stampar	041abb56e2	you can't believe how much man can learn when having good testing points	2011-01-17 13:59:22 +00:00
Miroslav Stampar	d225c5c9aa	was wrong about this one (just now tested on a real site)	2011-01-17 11:00:09 +00:00
Miroslav Stampar	ac0b5e6dbc	proper way to handle this (console output has totally different encoding than the page one)	2011-01-17 10:27:36 +00:00
Miroslav Stampar	2041361695	minor cosmetics	2011-01-16 23:20:52 +00:00
Miroslav Stampar	e2c821eb81	minor cosmetics	2011-01-16 22:35:54 +00:00
Miroslav Stampar	e881465a9f	minor improvement	2011-01-16 20:55:07 +00:00
Miroslav Stampar	30d6791968	update regarding time based data retrieval	2011-01-16 17:52:42 +00:00
Miroslav Stampar	2001bad7e1	automatic adjustment of timeSec for delayed queries	2011-01-16 12:04:32 +00:00
Miroslav Stampar	71391874eb	slightly faster and thread safer inference	2011-01-16 10:52:42 +00:00
Miroslav Stampar	29ea0950b6	now False is also affected (along with None and "")	2011-01-15 23:43:26 +00:00