7111 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Bernardo Damele	d235ee375b	code cleanup	2015-02-21 12:59:44 +00:00
Bernardo Damele	8be24d3e9b	minor enhancement, prefer intersect() each time DBMS values are comfronted	2015-02-21 12:59:27 +00:00
Bernardo Damele	388c0dfd77	trivial layout fix	2015-02-21 12:57:49 +00:00
Bernardo Damele	21c1ae427b	swapped generic and MySQL-specific UNION payloads - issue #1169	2015-02-21 12:57:28 +00:00
Bernardo Damele	ef9d4b58ae	minor signature for PHP pgsql functions	2015-02-21 02:24:03 +00:00
Bernardo Damele	52dd92748a	rework some of the logic of the detection phase based on identified DBMS along the way	2015-02-21 02:23:42 +00:00
Bernardo Damele	4f939b5719	avoid false positive message when extensive heuristic check is performed following detection of boolean blind injection detection: do only heuristic DBMS fingerprint for DBMS specific tables	2015-02-20 18:36:34 +00:00
Bernardo Damele	4bbf168b18	Minor titles fix	2015-02-20 18:35:13 +00:00
Bernardo Damele	ab6cc271d3	Major consistency rework of error-based payloads - issue #1169	2015-02-20 18:34:47 +00:00
Bernardo Damele	9fed41ddc2	Major consistency rework of boolean payloads - issue #1169	2015-02-20 18:34:23 +00:00
Bernardo Damele	2d886011c8	Consistency in enums	2015-02-20 18:33:04 +00:00
Bernardo Damele	1ecb921ba7	Consistency in enums	2015-02-20 18:31:47 +00:00
Bernardo Damele	214b9360e9	Minor fix to check for inline query payloads regardless of previously identified payloads and code cleanup	2015-02-20 18:30:42 +00:00
Bernardo Damele	3b3205c532	Minor stacked queries and time-based payloads cleanup - issue #1169	2015-02-20 15:44:06 +00:00
Bernardo Damele	79d4d970a5	trivial code cleanup	2015-02-20 15:42:28 +00:00
Bernardo Damele	5b65d2e133	more consistency of boolean blind payloads - issue #1169	2015-02-20 11:34:16 +00:00
Bernardo Damele	201b605f9b	Minor fix and consistency: do not ask to include all tests if level and risk are at the max settings already	2015-02-20 10:21:44 +00:00
Bernardo Damele	f547a776d8	consolidating blind based payloads - issue #1169	2015-02-19 16:42:26 +00:00
Bernardo Damele	4195f770a3	removing one unnecessary character from stacked payloads	2015-02-19 16:41:55 +00:00
Bernardo Damele	1e9586c90b	minor layout fix	2015-02-19 16:18:16 +00:00
Bernardo Damele	6cc092b926	split payloads in different files	2015-02-18 10:13:44 +00:00
Bernardo Damele	daa8e0d8c5	minor fix	2015-02-18 10:13:28 +00:00
Bernardo Damele	560bc7cc28	minor fixes	2015-02-18 09:51:07 +00:00
Bernardo Damele	c51ecf33f3	ported the recent MySQL time-based payload (introduced with 66c2a79397) to other techniques and conditions	2015-02-18 09:45:44 +00:00
Miroslav Stampar	1636088b75	Minor update	2015-02-16 11:48:53 +01:00
Bernardo Damele	32373996ee	standard message	2015-02-15 20:53:40 +00:00
Bernardo Damele	e17d212c23	bug fix introduced with 863d5a6281	2015-02-15 20:07:52 +00:00
Bernardo Damele	84349a370a	minor code cleanup	2015-02-15 19:51:07 +00:00
Bernardo Damele	32ab52b8ca	code refactoring: split boundaries and payloads XML files	2015-02-15 16:31:35 +00:00
Bernardo Damele	863d5a6281	--test-filter now ignores values of --risk and --level	2015-02-15 16:28:37 +00:00
Miroslav Stampar	2e5c11e427	Closes #1163	2015-02-13 10:59:03 +01:00
Miroslav Stampar	b1d13d1e7d	Patch for an Issue #1158	2015-02-06 09:05:41 +01:00
Miroslav Stampar	247384858e	Patch for an Issue #1159 (undo commit with single-quotes problem on windows)	2015-02-04 16:21:21 +01:00
Miroslav Stampar	38011743bb	Patch for an Issue #1157	2015-02-04 15:01:19 +01:00
Bernardo Damele	66c2a79397	added a time-based payload for MySQL when the simpler AND SLEEP(X) does not work	2015-02-03 15:14:41 +00:00
Miroslav Stampar	eecc0b924b	Patch for an Issue #1148	2015-02-03 10:06:00 +01:00
Miroslav Stampar	2af2aef43e	Minor patch for masking sensitive information (when formation -u=... is used)	2015-02-03 09:48:05 +01:00
Miroslav Stampar	59f0da369d	Patch for a bug reported via ML (Accept header ignored in --headers)	2015-02-02 22:07:16 +01:00
Miroslav Stampar	8b135e45bd	Patch for an Issue #1147	2015-02-02 22:05:31 +01:00
Miroslav Stampar	bf1c08a8a6	Bug fix	2015-01-30 22:43:40 +01:00
Miroslav Stampar	2e9bf47703	Heuristic check for WAF/IDS/IPS is now prone to tamper functions (Issue #1145)	2015-01-30 22:12:35 +01:00
Miroslav Stampar	9e90e357cf	Patch for an Issue #1146	2015-01-30 21:59:03 +01:00
Miroslav Stampar	9563e429d3	Removal of fun code	2015-01-30 21:49:22 +01:00
Miroslav Stampar	9f679a952f	Minor update	2015-01-29 10:44:36 +01:00
Miroslav Stampar	024c500d8e	Minor fix	2015-01-28 00:54:39 +01:00
Miroslav Stampar	5400bb2c95	Patch for an Issue #1142	2015-01-28 00:52:40 +01:00
Miroslav Stampar	fd632e5ada	Update for unhandled exception mechanism (BADA)	2015-01-26 09:09:38 +01:00
Miroslav Stampar	eb548959b3	Minor update	2015-01-26 08:59:10 +01:00
Miroslav Stampar	f0eac38ab4	Minor fix	2015-01-26 08:48:37 +01:00
Miroslav Stampar	ae95fd91c2	Implementation for an Issue #1135	2015-01-24 23:49:33 +01:00