85 Commits

Author	SHA1	Message	Date
Miroslav Stampar	25f0ec3597	some minor range to xrange conversion (where safe to do)	2011-10-21 22:34:27 +00:00
Miroslav Stampar	7a3096ce25	some refactoring	2011-10-21 21:12:48 +00:00
Miroslav Stampar	9356f8005c	important bug fix	2011-10-21 21:07:06 +00:00
Miroslav Stampar	0a8e45955c	minor update	2011-10-21 20:44:18 +00:00
Miroslav Stampar	e3a719e7d2	minor update	2011-10-11 22:40:00 +00:00
Miroslav Stampar	7956390631	minor update	2011-10-11 22:27:49 +00:00
Miroslav Stampar	a7a29f33ad	minor update	2011-10-11 21:58:57 +00:00
Miroslav Stampar	7e80274fac	refactoring	2011-09-25 21:10:45 +00:00
Miroslav Stampar	744636a8c1	switching to SQLite resume support (on error and union techniques this moment)	2011-09-25 20:36:32 +00:00
Miroslav Stampar	8fe069b495	minor fix	2011-08-23 21:48:39 +00:00
Miroslav Stampar	cfc1f2b70b	minor update	2011-08-22 22:43:14 +00:00
Miroslav Stampar	f4127a80d7	improvement of UNION based injection detection (with non-NULL kb.uChar values searching of the content inside -1 UNION.. pages is used)	2011-08-22 21:43:46 +00:00
Miroslav Stampar	cb32d46f2a	minor minor update	2011-08-18 06:09:12 +00:00
Miroslav Stampar	9d31322f3d	update regarding special case when conf.uChar appears only in testable pages	2011-08-17 21:40:42 +00:00
Bernardo Damele	702ed73a65	Added --code switch to match in boolean-based tests against the HTTP response code	2011-08-12 16:48:11 +00:00
Bernardo Damele	fff4c34e33	Search for --string and --regexp matches also in HTTP response headers	2011-08-12 15:33:37 +00:00
Miroslav Stampar	e849b71027	minor typo	2011-08-03 14:31:42 +00:00
Miroslav Stampar	538b49bcc5	removing word "dramatically". i was too excited at the moment :). it is cool and all but we shouldn't put "highly subjective" attribs in reports	2011-08-03 13:26:38 +00:00
Miroslav Stampar	9423d15fb3	ORDER BY technique used for finding proper UNION col count (dramatical improvement of speed and capabilities) and one minor bug fix	2011-08-03 09:08:16 +00:00
Miroslav Stampar	edab7d01a5	minor fix	2011-08-02 17:31:13 +00:00
Miroslav Stampar	cb0981d858	proper way of handling 0 length results (as in __goInferenceProxy)	2011-08-02 08:39:32 +00:00
Miroslav Stampar	018d7ed646	improvement for limited queries (more stable to have TOP/LIMIT/OFFSET mechanisms as part of a subquery)	2011-07-31 23:40:09 +00:00
Miroslav Stampar	e522263640	fix for a neverending data retrieval in large full inband cases	2011-07-29 10:45:09 +00:00
Bernardo Damele	938716e361	Proper fix for --start and --stop consistency amongst different techniques	2011-07-26 10:06:28 +00:00
Miroslav Stampar	6bbb8139a0	update (smaller memory footprint in postprocessing phase because of safecharencode part)	2011-07-25 20:40:31 +00:00
Miroslav Stampar	5770c08784	minor optimization and refactoring	2011-07-25 20:17:44 +00:00
Miroslav Stampar	2033a28ae7	minor update regarding last commit (cleaner code)	2011-07-24 20:44:17 +00:00
Miroslav Stampar	3a3561fdaa	doing proper big table support for partial union too	2011-07-24 20:36:44 +00:00
Bernardo Damele	aedcf8c8d7	Changed homepage address	2011-07-07 20:10:03 +00:00
Bernardo Damele	067354b97f	Revert of last commit and proper fix to detect UNION query SQL injection against Microsoft Access	2011-07-07 13:20:40 +00:00
Bernardo Damele	9e1a6beb7a	Major bug fix in UNION detection, it was a leftover	2011-07-07 00:06:20 +00:00
Miroslav Stampar	34d9a91af1	bulk of fixes	2011-07-02 22:48:56 +00:00
Miroslav Stampar	9e232256f4	reverting that last commit because there is a mess with default dumping (startLimit is set to 0 which is not so friendly with --start and --stop logic)	2011-06-21 18:29:23 +00:00
Miroslav Stampar	3536320fc9	--stop is inclusive ("Last query output entry to retrieve")	2011-06-21 18:08:33 +00:00
Bernardo Damele	f8c32cf6b9	Moved folder	2011-06-18 12:34:41 +00:00