Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							17486e472a 
							
						 
					 
					
						
						
							
							Proper english (--postfix is now --suffix) and --string/--regexp does not necessarily need to match into the original response body, it might well be in the injected True condition only!  
						
						
						
					 
					
						2010-11-17 22:00:09 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							360aff7a4d 
							
						 
					 
					
						
						
							
							sqlite3 library is not part of Gentoo (perhaps others) Python packages or installation bundle  
						
						
						
					 
					
						2010-11-17 17:20:32 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							6ef3846400 
							
						 
					 
					
						
						
							
							update regarding error parsing (and reporting)  
						
						
						
					 
					
						2010-11-16 10:42:42 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							64b5de44a0 
							
						 
					 
					
						
						
							
							Converted to new XML object format  
						
						
						
					 
					
						2010-11-12 10:11:13 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							66c82d72e4 
							
						 
					 
					
						
						
							
							Typo fix  
						
						
						
					 
					
						2010-11-12 10:02:02 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							42272ca78c 
							
						 
					 
					
						
						
							
							minor update  
						
						
						
					 
					
						2010-11-11 22:26:36 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							be992b4471 
							
						 
					 
					
						
						
							
							update regarding common columns existance check  
						
						
						
					 
					
						2010-11-11 17:09:31 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							0c8918bf07 
							
						 
					 
					
						
						
							
							Minor bug fix, thanks Alex  
						
						
						
					 
					
						2010-11-08 12:45:23 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							d551423379 
							
						 
					 
					
						
						
							
							further enum refactoring  
						
						
						
					 
					
						2010-11-08 09:44:32 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							862395ced1 
							
						 
					 
					
						
						
							
							further refactoring (all enumerations are now put into enums.py)  
						
						
						
					 
					
						2010-11-08 09:20:02 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							8e44aa605a 
							
						 
					 
					
						
						
							
							refactoring regarding injection place (more left)  
						
						
						
					 
					
						2010-11-08 08:02:36 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							27ce4b0cf0 
							
						 
					 
					
						
						
							
							Set proper verbose level for dbms direct error messages  
						
						
						
					 
					
						2010-11-07 22:14:06 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							d3e7e89e60 
							
						 
					 
					
						
						
							
							major improvement with display of payloads (all payloads are displayed now) and removal of "pesky" spaces  
						
						
						
					 
					
						2010-11-07 21:18:09 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							3f0a443b83 
							
						 
					 
					
						
						
							
							some updates  
						
						
						
					 
					
						2010-11-04 23:08:59 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							d7dbf814a0 
							
						 
					 
					
						
						
							
							fix/update for Access  
						
						
						
					 
					
						2010-11-04 21:47:21 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							6adee3792a 
							
						 
					 
					
						
						
							
							removed all trailing spaces from blank lines  
						
						
						
					 
					
						2010-11-03 10:08:27 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							cd0d4135ac 
							
						 
					 
					
						
						
							
							implemented --banner for MaxDB and some minor fixes  
						
						
						
					 
					
						2010-11-02 20:51:55 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							70f6eab715 
							
						 
					 
					
						
						
							
							minor update  
						
						
						
					 
					
						2010-11-02 12:08:28 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							685a8e7d2c 
							
						 
					 
					
						
						
							
							refactoring of hard coded dbms names  
						
						
						
					 
					
						2010-11-02 11:59:24 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							6ad8bbfc8e 
							
						 
					 
					
						
						
							
							one more ms access update  
						
						
						
					 
					
						2010-11-02 10:50:57 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c98d8fed83 
							
						 
					 
					
						
						
							
							minor ms access update  
						
						
						
					 
					
						2010-11-02 10:13:36 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							65a0a8d285 
							
						 
					 
					
						
						
							
							Delegate urlencoding to agent.py only  
						
						
						
					 
					
						2010-10-31 13:28:05 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							4f8e9da1b6 
							
						 
					 
					
						
						
							
							Minor bug fix to properly delete sqlmap temporary files on the database server file system at shutdown.  
						
						... 
						
						
						
						Minor improvements at ICMPsh tunnel to cleanup properly the dbms at shutdown and avoid checking/writing sys_bineval() UDF as it's a PE and needs to be called by sys_exec() only.
Got rid of useless doubleslash param in delRemoteFile() method.
Major code refactoring to xp_cmdshell.py methods and parent calls. 
						
					 
					
						2010-10-28 00:19:40 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							d554ffc0ae 
							
						 
					 
					
						
						
							
							yes, I am quite paranoid with cosmetics  
						
						
						
					 
					
						2010-10-27 10:37:54 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							f5904d0bc0 
							
						 
					 
					
						
						
							
							Major bug fix to --union-test  
						
						
						
					 
					
						2010-10-25 23:39:55 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							8a9a57c709 
							
						 
					 
					
						
						
							
							update for Sybase and major bug fix for --passwords on MSSQL  
						
						
						
					 
					
						2010-10-25 22:11:38 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							215175e3b7 
							
						 
					 
					
						
						
							
							Minor code adjustments  
						
						
						
					 
					
						2010-10-25 14:11:47 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							32728d14b7 
							
						 
					 
					
						
						
							
							fix for --union-use with --error-test  
						
						
						
					 
					
						2010-10-25 12:25:29 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							1b2ec826bf 
							
						 
					 
					
						
						
							
							misc fixes regarding new query retrieval format  
						
						
						
					 
					
						2010-10-21 23:17:06 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							24e4429bf6 
							
						 
					 
					
						
						
							
							or better yet, there is no need for _ or *args on getPrivileges (tried with SQLite and MSSql which crashed)  
						
						
						
					 
					
						2010-10-21 13:31:06 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							fe3967bdec 
							
						 
					 
					
						
						
							
							fix for --privileges (on MSSql --privileges returned exception)  
						
						
						
					 
					
						2010-10-21 13:28:29 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							bc79eec702 
							
						 
					 
					
						
						
							
							removed queriesfile.py, implemented XMLObject approach (still shell.py and udf.py TODO)  
						
						
						
					 
					
						2010-10-21 13:13:12 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							526694c80c 
							
						 
					 
					
						
						
							
							Minor fix  
						
						
						
					 
					
						2010-10-20 22:24:06 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							82f44989ce 
							
						 
					 
					
						
						
							
							update of error based injection and bug fix for --roles on MSSQL server  
						
						
						
					 
					
						2010-10-20 06:40:33 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							60a1b48194 
							
						 
					 
					
						
						
							
							Major bug fix for --os-pwn  
						
						
						
					 
					
						2010-10-17 20:44:16 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							8883918ef9 
							
						 
					 
					
						
						
							
							cosmetics  
						
						
						
					 
					
						2010-10-15 10:03:51 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							743e6d2655 
							
						 
					 
					
						
						
							
							cosmetics  
						
						
						
					 
					
						2010-10-15 10:02:09 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							207bef7f19 
							
						 
					 
					
						
						
							
							fix for that SQLite3 vs SQLite2 issue  
						
						
						
					 
					
						2010-10-15 09:39:41 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							4f7f20b94f 
							
						 
					 
					
						
						
							
							sorry, cosmetics  
						
						
						
					 
					
						2010-10-14 23:18:29 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							8b48833136 
							
						 
					 
					
						
						
							
							large commit with copyright header modifications  
						
						
						
					 
					
						2010-10-14 14:41:14 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							a63c2c9f7c 
							
						 
					 
					
						
						
							
							just a test  
						
						
						
					 
					
						2010-10-14 14:16:45 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							f700692c74 
							
						 
					 
					
						
						
							
							added missing files for Sybase  
						
						
						
					 
					
						2010-10-13 18:55:17 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							47022071cb 
							
						 
					 
					
						
						
							
							removed pdb  
						
						
						
					 
					
						2010-10-12 19:17:48 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							b4685aa77c 
							
						 
					 
					
						
						
							
							quick fix  
						
						
						
					 
					
						2010-10-12 19:16:58 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							f9f79ffbaf 
							
						 
					 
					
						
						
							
							basic stuff for sybase  
						
						
						
					 
					
						2010-10-12 19:05:12 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							1369529103 
							
						 
					 
					
						
						
							
							minor cosmetic update  
						
						
						
					 
					
						2010-10-11 13:52:32 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							78ba5da4f7 
							
						 
					 
					
						
						
							
							fix  
						
						
						
					 
					
						2010-09-23 22:07:33 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c4040ab297 
							
						 
					 
					
						
						
							
							fix for Feature  #136  
						
						
						
					 
					
						2010-08-31 14:25:37 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							e810fe7b0b 
							
						 
					 
					
						
						
							
							no need for obsolete (and hard to find) sqlite module when sqlite3 handles both database versions  
						
						
						
					 
					
						2010-08-31 13:37:53 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							54f9828e06 
							
						 
					 
					
						
						
							
							implemented active fingerprinting for MaxDB  
						
						
						
					 
					
						2010-08-30 14:16:23 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							48cc87f6a9 
							
						 
					 
					
						
						
							
							added support for fingerprinting SAP MaxDB (Issue 143)  
						
						
						
					 
					
						2010-08-30 13:29:19 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							26d1a07a1d 
							
						 
					 
					
						
						
							
							Minor code refactoring and bug fix in the *rare case* that MySQL on Linux runs as root or the plugin dir (/usr/lib/.*?/plugin is world-writable  
						
						
						
					 
					
						2010-07-01 10:39:04 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							9ea72f9640 
							
						 
					 
					
						
						
							
							Minor bug fixes to -d  
						
						
						
					 
					
						2010-06-25 13:24:43 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							660bf0b077 
							
						 
					 
					
						
						
							
							fix for that struct pack error  
						
						
						
					 
					
						2010-06-10 12:14:24 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							ac55e1b75f 
							
						 
					 
					
						
						
							
							fix for localhost firebird direct db access  
						
						
						
					 
					
						2010-06-10 12:02:48 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							12a5ec9f3d 
							
						 
					 
					
						
						
							
							more unicode refactoring  
						
						
						
					 
					
						2010-06-02 12:45:40 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							b380d34d3c 
							
						 
					 
					
						
						
							
							Added unicode support also to SQLite (2 and 3) connector - see  #184 .  
						
						
						
					 
					
						2010-05-29 15:35:38 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							0362f4408d 
							
						 
					 
					
						
						
							
							Added unicode support also to MSSQL connector - see  #184 .  
						
						
						
					 
					
						2010-05-29 15:29:21 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							4ba22b5098 
							
						 
					 
					
						
						
							
							Added unicode support also to Oracle connector - see  #184 .  
						
						
						
					 
					
						2010-05-29 12:14:51 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e98b049e7f 
							
						 
					 
					
						
						
							
							Added unicode support also to PostgreSQL connector - see  #184 .  
						
						
						
					 
					
						2010-05-29 11:46:41 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							89c721a451 
							
						 
					 
					
						
						
							
							More replacements from open() to codecs.open(). conf.dataEncoding has to be used only for non-binary files.  
						
						
						
					 
					
						2010-05-29 10:10:28 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							a3db3c03c1 
							
						 
					 
					
						
						
							
							str() -> unicode()  
						
						
						
					 
					
						2010-05-28 13:05:02 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							f24187f251 
							
						 
					 
					
						
						
							
							few fixes here and there  
						
						
						
					 
					
						2010-05-28 12:47:03 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							dc83f794ea 
							
						 
					 
					
						
						
							
							fix regarding proper string isinstance checking (including unicode)  
						
						
						
					 
					
						2010-05-25 10:09:35 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							f8cdde2d51 
							
						 
					 
					
						
						
							
							Layout adjustment  
						
						
						
					 
					
						2010-05-17 16:23:44 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e0e2349529 
							
						 
					 
					
						
						
							
							Refactor to --search -C and minor bug fix - See  #190 .  
						
						
						
					 
					
						2010-05-17 16:16:49 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							c9ee11e0e4 
							
						 
					 
					
						
						
							
							Added support to search for tables (--search with -T). See  #190 .  
						
						
						
					 
					
						2010-05-16 20:46:17 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							2323d858a9 
							
						 
					 
					
						
						
							
							modification of temporary directory from C:/Windows/Temp to %TEMP%  
						
						
						
					 
					
						2010-05-13 09:32:27 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							65a05452f7 
							
						 
					 
					
						
						
							
							Added option --search to work in conjunction with -D (done), -T (soon) or -C (replaces --dump -C) - See  #190 :  
						
						... 
						
						
						
						* --search -D foobar: searches all database names like the ones provided
* --search -T foobar: searches all databases' table names like the ones provided (soon)
* --search -C foobar: replaces --dump -C 
						
					 
					
						2010-05-07 13:40:57 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							a1b1f960cc 
							
						 
					 
					
						
						
							
							Finally fixed and adapted all code around to the new isWindowsDriveLetterPath() function  
						
						
						
					 
					
						2010-04-23 16:34:20 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							d034bf29ce 
							
						 
					 
					
						
						
							
							Add new "hinted" feature to MSSQL's getTables()  
						
						
						
					 
					
						2010-04-15 12:09:26 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							1ab78ce60e 
							
						 
					 
					
						
						
							
							Added support to directly connect also to SQLite 2 db file  
						
						
						
					 
					
						2010-04-13 22:43:38 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							4f299f22bf 
							
						 
					 
					
						
						
							
							removed timeout keyword which is not supported on linux build  
						
						
						
					 
					
						2010-04-13 10:11:14 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							6762f592c1 
							
						 
					 
					
						
						
							
							direct connection supported only on Windows machines  
						
						
						
					 
					
						2010-04-13 08:57:47 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							939fa5d2c4 
							
						 
					 
					
						
						
							
							some fixes  
						
						
						
					 
					
						2010-04-13 08:29:15 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							9e29120603 
							
						 
					 
					
						
						
							
							Minor fix to make MS Access direct access to work also from Linux  
						
						
						
					 
					
						2010-04-12 15:52:40 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							eecee3b274 
							
						 
					 
					
						
						
							
							Added resume functionality to -d and fixed logging with -d  
						
						
						
					 
					
						2010-04-12 09:35:20 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							758a858785 
							
						 
					 
					
						
						
							
							Minor adjustments  
						
						
						
					 
					
						2010-04-06 20:40:14 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							5556db80db 
							
						 
					 
					
						
						
							
							fix for that sqlite thread nagging with undocumented argument check_same_thread  
						
						
						
					 
					
						2010-04-06 16:01:37 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							e2810003ae 
							
						 
					 
					
						
						
							
							more update  
						
						
						
					 
					
						2010-04-06 15:12:52 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c24f1cc07c 
							
						 
					 
					
						
						
							
							some update  
						
						
						
					 
					
						2010-04-06 14:59:31 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							cad8f61d55 
							
						 
					 
					
						
						
							
							Force pymssql to version >= 1.0.2  
						
						
						
					 
					
						2010-03-31 15:31:11 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							b19de015c5 
							
						 
					 
					
						
						
							
							Minor bugs fixes  
						
						
						
					 
					
						2010-03-31 13:52:51 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							5fdebb5d5b 
							
						 
					 
					
						
						
							
							Added support to directly connect also to Microsoft SQL Server database.  
						
						... 
						
						
						
						Fixed direct connection to always use the same query as of UNION query SQL injection (= one query with multiple columns/entries output).
Minor fixes to Firebird/Access/SQLite connectors to use connector's execute()/fetchall() as wrapper for third-party libraries' methods.
Forced conf.timeout to 10 seconds when directly connecting to database.
Slightly improved regular expression to parse -d parameter.
Added import check for all connectors' third-party libraries.
Code refactoring:
* Moved conf.direct request to direct() function in lib/request/direct.py (code reused where needed).
* Back-delegated to generic connector close() and other methods. 
						
					 
					
						2010-03-31 10:50:47 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							d583cc07e7 
							
						 
					 
					
						
						
							
							ms access update  
						
						
						
					 
					
						2010-03-30 15:04:55 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							1973024ebf 
							
						 
					 
					
						
						
							
							added support for reusing connections  
						
						
						
					 
					
						2010-03-30 13:52:47 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							f0729565a9 
							
						 
					 
					
						
						
							
							fixes for sqlite  
						
						
						
					 
					
						2010-03-30 13:36:23 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							c2a6f21095 
							
						 
					 
					
						
						
							
							refactoring regarding usage of conf.dbmsConnector.connect()  
						
						
						
					 
					
						2010-03-30 13:03:19 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							88d74a00c1 
							
						 
					 
					
						
						
							
							ms access connector update  
						
						
						
					 
					
						2010-03-30 12:48:51 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							87d8c6719e 
							
						 
					 
					
						
						
							
							updates, fixes and stuff  
						
						
						
					 
					
						2010-03-30 11:06:30 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							f04449be03 
							
						 
					 
					
						
						
							
							update  
						
						
						
					 
					
						2010-03-29 23:48:21 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							4dd2cdef47 
							
						 
					 
					
						
						
							
							update  
						
						
						
					 
					
						2010-03-27 23:48:12 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							a0290a257b 
							
						 
					 
					
						
						
							
							Added support to connect directly also to Oracle - see  #158  
						
						
						
					 
					
						2010-03-27 21:50:19 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							1416cd0d86 
							
						 
					 
					
						
						
							
							Major enhancement to directly connect to the dbms without passing via a sql injection: adapted code accordingly - see  #158 . This feature relies on python third-party libraries to be able to connect to the database. For the moment it has been implemented for MySQL (with python-mysqldb module) and PostgreSQL (with python-psycopg2 module).  
						
						... 
						
						
						
						Minor layout adjustments. 
						
					 
					
						2010-03-26 23:23:25 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							2aadc5c939 
							
						 
					 
					
						
						
							
							Added support for --roles (for Oracle ROLE_PRIVS). Enhanced Oracle --privileges to fall-back to USER_SYS_PRIVS if DBA_SYS_PRIVS is not accessible (so session user is not DBA) - Fixes ticket  #180 .  
						
						... 
						
						
						
						Minor enhancement to Firebird to determine if a DB user is a DBA.
Minor code refactoring. 
						
					 
					
						2010-03-25 15:46:06 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							a63e251b25 
							
						 
					 
					
						
						
							
							Ahead with code refactoring, related to r1502.  
						
						... 
						
						
						
						Fixed svn:keywords propset to all .py files. 
						
					 
					
						2010-03-23 21:26:45 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							09768a7b62 
							
						 
					 
					
						
						
							
							Major code refactoring: moved and split plugins (mysql, pgsql, mssql, oracle) more granularly and organized.  
						
						... 
						
						
						
						Todo for firebird, sqlite, access. 
						
					 
					
						2010-03-22 22:57:57 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							0d559d14df 
							
						 
					 
					
						
						
							
							Initial support for SQLite (90% approx).  
						
						... 
						
						
						
						Initial support for Firebird (30% approx).
Initial support for Access (10% approx).
Shared libraries code/installation scripts ported to 64bit, directory structure adapted.
Minor code adjustments. 
						
					 
					
						2010-03-18 17:20:54 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							8663b5b68b 
							
						 
					 
					
						
						
							
							minor fixes  
						
						
						
					 
					
						2010-03-04 09:16:45 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							b544405878 
							
						 
					 
					
						
						
							
							fixed some issue involving banner parsing  
						
						
						
					 
					
						2010-03-04 09:15:26 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							156fdd96ef 
							
						 
					 
					
						
						
							
							Updated copyright  
						
						
						
					 
					
						2010-03-03 15:26:27 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							aa62465aad 
							
						 
					 
					
						
						
							
							minor update, also for that banner error  
						
						
						
					 
					
						2010-03-01 10:49:07 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							694356821d 
							
						 
					 
					
						
						
							
							sqlmap does not save nor leave back in temporary folder any file named 'sqlmapRANDOM', only random names now, less suspicious  
						
						
						
					 
					
						2010-02-26 13:13:50 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							42f53f380f 
							
						 
					 
					
						
						
							
							Now can work 'cause isWindowsPath has been fixed, normalizePath called after ntToPosixSlashes  
						
						
						
					 
					
						2010-02-26 12:40:23 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							66c9885b96 
							
						 
					 
					
						
						
							
							Minor path fix  
						
						
						
					 
					
						2010-02-26 11:34:48 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							38a37b89f6 
							
						 
					 
					
						
						
							
							fix for those slashes  
						
						
						
					 
					
						2010-02-26 11:07:23 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							89dc99188d 
							
						 
					 
					
						
						
							
							--read-file on PostgreSQL now relies on the new sys_fileread() UDF so that also binary files can be read.  
						
						... 
						
						
						
						Fixed a minor bug in custom UDF injection feature --udf-inject.
Major code refactoring. 
						
					 
					
						2010-02-11 22:57:50 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							f728208ff7 
							
						 
					 
					
						
						
							
							Minor cosmetic fix  
						
						
						
					 
					
						2010-02-10 15:51:52 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							5c92fad5dc 
							
						 
					 
					
						
						
							
							Avoid to check for existence of not needed UDFs and minor code adjustment for cleanup() method  
						
						
						
					 
					
						2010-02-05 23:14:16 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							d291464cd4 
							
						 
					 
					
						
						
							
							code refactoring regarding path normalization  
						
						
						
					 
					
						2010-02-04 14:50:54 +00:00 
						 
				 
			
				
					
						
							
							
								Miroslav Stampar 
							
						 
					 
					
						
						
						
						
							
						
						
							ec63fc4036 
							
						 
					 
					
						
						
							
							code refactoring - added functions posixToNtSlashes and ntToPosixSlashes  
						
						
						
					 
					
						2010-02-04 14:37:00 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							746cbdba96 
							
						 
					 
					
						
						
							
							Added support for takeover functionalities on PgSQL 8.4 running on Windows  
						
						
						
					 
					
						2010-01-14 01:40:11 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							b4ddfe8333 
							
						 
					 
					
						
						
							
							Minor bug fixed (variable undeclared)  
						
						
						
					 
					
						2010-01-13 21:26:59 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							4a72ad113a 
							
						 
					 
					
						
						
							
							Enhancements to PostgreSQL active fingerprint, now it covers also PostgreSQL 8.4 and minor speedups.  
						
						
						
					 
					
						2010-01-12 11:44:47 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							c7e1649655 
							
						 
					 
					
						
						
							
							Minor speedup  
						
						
						
					 
					
						2010-01-12 11:43:32 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							3a9f685e18 
							
						 
					 
					
						
						
							
							Enhancements to MySQL active fingerprint and comment injection fingerprint, now it covers also MySQL 5.5.x and improved on MySQL 5.1.x.  
						
						
						
					 
					
						2010-01-12 11:21:28 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							80bd146696 
							
						 
					 
					
						
						
							
							Added support for --dump with -C also on MSSQL  
						
						
						
					 
					
						2010-01-10 19:12:54 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e5dc3f51c8 
							
						 
					 
					
						
						
							
							Display a better message for the moment while working on support for --dump -C on MSSQL  
						
						
						
					 
					
						2010-01-10 00:30:45 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							bb61010a45 
							
						 
					 
					
						
						
							
							Avoid useless checks for --os-bof (no need to check for DBA or for xp_cmdshell). Minor code restyling.  
						
						
						
					 
					
						2010-01-04 15:02:56 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							2eb24c6368 
							
						 
					 
					
						
						
							
							Avoid useless queries  
						
						
						
					 
					
						2010-01-04 12:35:53 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							ce022a3b6e 
							
						 
					 
					
						
						
							
							sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.  
						
						
						
					 
					
						2010-01-02 02:02:12 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							6e36a6f8ed 
							
						 
					 
					
						
						
							
							Major enhancement to MSSQL MS09-004 exploit  
						
						
						
					 
					
						2009-11-17 23:33:20 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							89c43893d4 
							
						 
					 
					
						
						
							
							Merged back from personal branch to trunk (svn merge -r846:940 ...)  
						
						... 
						
						
						
						Changes:
* Major enhancement to the Microsoft SQL Server stored procedure
heap-based buffer overflow exploit (--os-bof) to automatically bypass
DEP memory protection.
* Added support for MySQL and PostgreSQL to execute Metasploit shellcode
via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an
option instead of uploading the standalone payload stager executable.
* Added options for MySQL, PostgreSQL and Microsoft SQL Server to
read/add/delete Windows registry keys.
* Added options for MySQL and PostgreSQL to inject custom user-defined
functions.
* Added support for --first and --last so the user now has even more
granularity in what to enumerate in the query output.
* Minor enhancement to save the session by default in
'output/hostname/session' file if -s option is not specified.
* Minor improvement to automatically remove sqlmap created temporary
files from the DBMS underlying file system.
* Minor bugs fixed.
* Major code refactoring. 
						
					 
					
						2009-09-25 23:03:45 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							458d59416c 
							
						 
					 
					
						
						
							
							Minor bug fix in MSSQL version fingerprint  
						
						
						
					 
					
						2009-08-11 09:16:20 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							3d4bfb3263 
							
						 
					 
					
						
						
							
							More appropriate warning message, got rid of a TODO  
						
						
						
					 
					
						2009-07-24 23:20:22 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							4b622ed860 
							
						 
					 
					
						
						
							
							Minor bug fix.  
						
						... 
						
						
						
						Adapted Metasploit wrapping functions to work with latest msf3 development version too. 
						
					 
					
						2009-07-06 14:40:33 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							03a6739fbf 
							
						 
					 
					
						
						
							
							Minor layout adjustments  
						
						
						
					 
					
						2009-06-11 15:34:31 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							f3e8d6db70 
							
						 
					 
					
						
						
							
							Fixed MySQL comment injection  
						
						
						
					 
					
						2009-05-01 16:29:45 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							16b4530bbe 
							
						 
					 
					
						
						
							
							Minor bug fixes to --os-shell (altought web backdoor functionality still to be reviewed).  
						
						... 
						
						
						
						Minor common library code refactoring.
Code cleanup.
Set back the default User-Agent to sqlmap for comparison algorithm reasons.
Updated THANKS. 
						
					 
					
						2009-04-27 23:05:11 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							06e8546177 
							
						 
					 
					
						
						
							
							Finally fixed MSSQL 2000 fingerprint  
						
						
						
					 
					
						2009-04-24 10:26:01 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							eeb34eb028 
							
						 
					 
					
						
						
							
							Again, minor fix to MSSQL 2000 fingerprint  
						
						
						
					 
					
						2009-04-23 21:13:34 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							8e88b32274 
							
						 
					 
					
						
						
							
							Minor fix in MSSQL 2000 fingerprint  
						
						
						
					 
					
						2009-04-23 08:36:39 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							8c0ac767f4 
							
						 
					 
					
						
						
							
							Updated to sqlmap 0.7 release candidate 1  
						
						
						
					 
					
						2009-04-22 11:48:07 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							b997df740a 
							
						 
					 
					
						
						
							
							Minor bug fix  
						
						
						
					 
					
						2009-02-25 20:11:14 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							5560f0b68a 
							
						 
					 
					
						
						
							
							Updated the copyright  
						
						
						
					 
					
						2009-01-12 21:35:38 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e10ab5aa0e 
							
						 
					 
					
						
						
							
							Major bug fixes  
						
						
						
					 
					
						2009-01-10 14:39:27 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							9e0d890171 
							
						 
					 
					
						
						
							
							Fixed MySQL 5.1 extensive fingerprint  
						
						
						
					 
					
						2009-01-02 23:21:31 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							c1010c20d8 
							
						 
					 
					
						
						
							
							Minor adjustments  
						
						
						
					 
					
						2008-12-30 21:24:01 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							24ddbdc89d 
							
						 
					 
					
						
						
							
							Minor layout adjustment  
						
						
						
					 
					
						2008-12-22 23:34:22 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							b0ad102efb 
							
						 
					 
					
						
						
							
							Better fingerprint technique for Microsoft SQL Server  
						
						
						
					 
					
						2008-12-22 23:32:43 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							79c8d63b88 
							
						 
					 
					
						
						
							
							Major speed increase in DBMS basic fingerprint  
						
						
						
					 
					
						2008-12-22 23:26:44 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							8d06975142 
							
						 
					 
					
						
						
							
							Major enhancement to make the comparison algorithm work properly also  
						
						... 
						
						
						
						on url not stables automatically by using the difflib SequenceMatcher
object: this changed a lot into the structure of the code, has to be
extensively beta-tested!
Please, do report bugs on sqlmap-users mailing list if you scout them.
Cheers,
Bernardo 
						
					 
					
						2008-12-20 01:54:08 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							c32ef9d751 
							
						 
					 
					
						
						
							
							Major bug fix to avoid tracebacks when multiple targets are specified and one  
						
						... 
						
						
						
						of them is not reachable.
Minor bug fix to make the --postfix work even if --prefix is not provided. 
						
					 
					
						2008-12-18 20:38:57 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							38c9627700 
							
						 
					 
					
						
						
							
							Minor enhancemet to support also --regexp, --excl-str and --excl-reg  
						
						... 
						
						
						
						options rather than only --string when comparing HTTP responses page
content 
						
					 
					
						2008-12-05 15:34:13 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e75487a26c 
							
						 
					 
					
						
						
							
							Reverted last commit, cleaner this way  
						
						
						
					 
					
						2008-12-01 23:33:15 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e2a805ef6a 
							
						 
					 
					
						
						
							
							Minor workaround because of latest bug fix  
						
						
						
					 
					
						2008-12-01 23:32:14 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							beea58f2e9 
							
						 
					 
					
						
						
							
							Updated MySQL versions  
						
						
						
					 
					
						2008-12-01 23:02:52 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							727664aea7 
							
						 
					 
					
						
						
							
							Minor enhancement to fingerprint the web server operating system and  
						
						... 
						
						
						
						the web application technology by parsing also HTTP response Server
header.
Refactor libraries and plugins that parses XML to fingerprint and show
on standard output the information.
Updated changelog. 
						
					 
					
						2008-11-18 17:42:46 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							7d0724843f 
							
						 
					 
					
						
						
							
							Major enhancement to the engine to parse XML files and matches on DBMS banner  
						
						... 
						
						
						
						and HTTP response headers.
Initial web application technology fingerprint (for the moment based only on
X-Powered-By HTTP response header and not shown yet to the user).
Minor layout adjustments. 
						
					 
					
						2008-11-17 17:41:02 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							66fb3c3033 
							
						 
					 
					
						
						
							
							Minor enhancement to show the DBMS operating system (if fingerprinted)  
						
						... 
						
						
						
						also when only -b option is provided since it's an information that
sqlmap get parsing the DBMS banner.
Got rid completely of useless passive fuzzing. 
						
					 
					
						2008-11-17 11:22:03 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							654aecedfe 
							
						 
					 
					
						
						
							
							Minor layout adjustments, minor fixes and updated changelog  
						
						
						
					 
					
						2008-11-17 00:00:54 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							fa0507ab39 
							
						 
					 
					
						
						
							
							Minor enhancement to fingerprint the back-end DBMS operating system (type,  
						
						... 
						
						
						
						version, release, distribution, codename and service pack) by parsing the
DBMS banner value when both -f and -b are provided: adapted the code and
added XML files defining regular expressions for matching.
Example of the -f -b output now on MySQL 5.0.67 running on latest Ubuntu:
--8<--
back-end DBMS:	active fingerprint: MySQL >= 5.0.38 and < 5.1.2
                comment injection fingerprint: MySQL 5.0.67
                banner parsing fingerprint: MySQL 5.0.67
                html error message fingerprint: MySQL
back-end DBMS operating system: Linux Ubuntu 8.10 (Intrepid)
--8<-- 
						
					 
					
						2008-11-15 23:41:31 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							4bf1fcb8ec 
							
						 
					 
					
						
						
							
							Minor layout adjustment  
						
						
						
					 
					
						2008-11-15 01:10:29 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							81ed7c2086 
							
						 
					 
					
						
						
							
							Initial implementation of support for stacked queries.  
						
						... 
						
						
						
						Added method to test for Time based blind SQL injection query stacking
on the affected parameter a SLEEP() or similar DBMS specific function.
Adapted libraries, plugins and XML with the above changes.
Minor layout adjustments. 
						
					 
					
						2008-11-12 00:36:50 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							0f79ec0088 
							
						 
					 
					
						
						
							
							Minor bug fix in MySQL comment injection fingerprint technique  
						
						
						
					 
					
						2008-11-04 16:05:43 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							03b90e0a3f 
							
						 
					 
					
						
						
							
							Be more user friendly on messages and minor code layout improvement  
						
						
						
					 
					
						2008-11-02 18:23:42 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							09ca578ca1 
							
						 
					 
					
						
						
							
							Major bug fix so that the users' privileges enumeration now works properly also on both MySQL < 5.0 and MySQL >= 5.0 also if the user has provided one or more users with -U option;  
						
						
						
					 
					
						2008-11-02 18:17:12 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							e2a0f7a47b 
							
						 
					 
					
						
						
							
							Fix typo  
						
						
						
					 
					
						2008-10-30 23:20:14 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							7ad9639ed0 
							
						 
					 
					
						
						
							
							Updated the database management system fingerprint checks to correctly identify MySQL 5.1.x, MySQL 6.0.x and PostgreSQL 8.3  
						
						
						
					 
					
						2008-10-29 15:32:12 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							2fcbb57e1c 
							
						 
					 
					
						
						
							
							Minor code restyling  
						
						
						
					 
					
						2008-10-26 17:00:07 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							4b02ed45fa 
							
						 
					 
					
						
						
							
							Due to last commit..  
						
						
						
					 
					
						2008-10-26 16:45:36 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							fce61ff950 
							
						 
					 
					
						
						
							
							Minor if condition adjustment  
						
						
						
					 
					
						2008-10-26 16:25:28 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							8f5fb5657d 
							
						 
					 
					
						
						
							
							Major improvement to correctly enumerate tables, columns and dump tables  
						
						... 
						
						
						
						entries on PostgreSQL when the database name is not 'public' or a system
database and on Oracle. Minor code restyle. 
						
					 
					
						2008-10-26 16:19:15 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							892a7b2f8a 
							
						 
					 
					
						
						
							
							propsets..  
						
						
						
					 
					
						2008-10-15 15:56:32 +00:00 
						 
				 
			
				
					
						
							
							
								Bernardo Damele 
							
						 
					 
					
						
						
						
						
							
						
						
							8e3eb45510 
							
						 
					 
					
						
						
							
							After the storm, a restore..  
						
						
						
					 
					
						2008-10-15 15:38:22 +00:00