2535 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Bernardo Damele	0d3f6edcc4	typo	2011-03-21 16:27:13 +00:00
Miroslav Stampar	7b1021d100	minor update of THANKS file	2011-03-21 13:18:00 +00:00
Miroslav Stampar	b5c9ccb755	Oracle XML based error payload has problems with char $ as with space	2011-03-21 13:13:12 +00:00
Miroslav Stampar	1abcd507b8	hidding --group-concat switch	2011-03-21 12:13:21 +00:00
Miroslav Stampar	4889764114	minor update regarding last commit	2011-03-21 11:40:27 +00:00
Miroslav Stampar	5291fe35c9	proper implementation of --dbs on Oracle (we are using now schema names as a counterpart to dbs in other DBMSes)	2011-03-21 11:29:43 +00:00
Miroslav Stampar	f8a2cf0497	minor THANKS update	2011-03-21 09:53:34 +00:00
Bernardo Damele	19e2ed9803	Layout fix	2011-03-21 00:40:25 +00:00
Bernardo Damele	f7c1b7dc5f	Updated	2011-03-21 00:39:54 +00:00
Miroslav Stampar	3ca5cddca7	massive BUG FIX (if NULL is one of dumping values it will screw everything in corner cases because "SELECT 1 WHERE NULL IN (NULL)" and "SELECT 1 WHERE NULL NOT IN (NULL)" will always return nothing/nadda/zero/not even NULL)	2011-03-20 23:54:56 +00:00
Miroslav Stampar	9b1f2d82d0	minor update (that .strip() was a leftover)	2011-03-20 23:20:47 +00:00
Miroslav Stampar	db992a0a86	mssql likes to htmlescape error reports	2011-03-20 23:16:34 +00:00
Miroslav Stampar	088c815567	minor update (exposing --tor switch)	2011-03-19 18:28:51 +00:00
Miroslav Stampar	2cc91b8470	minor fix	2011-03-19 17:44:34 +00:00
Miroslav Stampar	7c2b3afafb	minor fix (-r required Content-Length which is a part of Burp log and as we share the parsing logic this was a headache for -r)	2011-03-19 17:37:26 +00:00
Miroslav Stampar	139448eeb9	little stabilization regarding POST url(de/en)coding	2011-03-19 16:53:14 +00:00
Miroslav Stampar	0fcd999e51	fix for a bug reported by malice	2011-03-18 16:52:46 +00:00
Miroslav Stampar	58e9a074d3	masking some more command line arguments	2011-03-18 16:47:18 +00:00
Miroslav Stampar	36233fac42	update regarding a feature request from andyroyalbattle@yahoo.it	2011-03-18 16:35:30 +00:00
Miroslav Stampar	00b9d85ffc	fix regarding bug report from andyroyalbattle@yahoo.it	2011-03-18 16:26:39 +00:00
Miroslav Stampar	4e300baaf2	minor cosmetics	2011-03-18 14:09:18 +00:00
Miroslav Stampar	3628887110	los cosmeticados	2011-03-18 14:08:36 +00:00
Miroslav Stampar	75c0e09f43	little refactoring	2011-03-18 13:46:51 +00:00
Miroslav Stampar	c301b245a9	adding default value for referer in case --referer was not defined and --level>=3 used (so it could be tested with default value)	2011-03-18 13:39:51 +00:00
Miroslav Stampar	b53c9a2599	minor fix and some refactoring	2011-03-18 00:24:02 +00:00
Bernardo Damele	3edb30968b	Pff.. just layout	2011-03-17 12:37:50 +00:00
Bernardo Damele	9526f0c4c2	Minor layout adjustments	2011-03-17 12:35:40 +00:00
Bernardo Damele	03fac62592	Minor code restyle	2011-03-17 12:34:29 +00:00
Miroslav Stampar	cbdd9e921e	minor cosmetics	2011-03-17 12:23:56 +00:00
Miroslav Stampar	6607a240cf	added logging to redirecthandler	2011-03-17 12:21:27 +00:00
Miroslav Stampar	9a513198dd	minor fix regarding last couple of commits	2011-03-17 11:25:37 +00:00
Miroslav Stampar	970cde5a8a	minor update regarding last commit	2011-03-17 09:23:46 +00:00
Miroslav Stampar	beba69faa9	implementation of request from Santiago (look for error based responses in redirects)	2011-03-17 09:12:28 +00:00
Miroslav Stampar	847ce863e3	refactoring	2011-03-17 08:54:20 +00:00
Miroslav Stampar	fbd0cfda29	minor update toward the implementation of request from Santiago	2011-03-17 06:39:05 +00:00
Miroslav Stampar	0535225fe7	throwing out obsolete ORDER BY 1 from inband queries	2011-03-16 14:18:12 +00:00
Bernardo Damele	f00aff5303	-v 0 shows both error, critical and raw_input messages	2011-03-11 22:02:38 +00:00
Bernardo Damele	d7d47b6257	Minor bug fix (revert)	2011-03-11 21:56:45 +00:00
Miroslav Stampar	e64f225e65	minor refactoring	2011-03-11 20:16:34 +00:00
Miroslav Stampar	2fd3f0d7b2	minor update (added comment)	2011-03-11 20:07:52 +00:00
Miroslav Stampar	6cc745f789	removal of deprecated piece of code (replaced later with that getCurrentThreadData().disableStdOut)	2011-03-11 20:04:15 +00:00
Miroslav Stampar	5eae525010	this was bothering me for some time (POST and/or GET payloads needs to be urlencoded throughly)	2011-03-11 19:57:44 +00:00
Bernardo Damele	d8a76ebe34	Minor bug fix for counting of entries for error-based and partial UNION query SQL injection techs	2011-03-11 16:03:19 +00:00
Bernardo Damele	3cb0ca4b63	Minor bug fix for --privileges on PgSQL with error-based SQL inj technique	2011-03-11 15:24:25 +00:00
Bernardo Damele	5af7410cb1	Another bug fix for --privileges on PgSQL with UNION query technique	2011-03-11 15:13:09 +00:00
Bernardo Damele	74ef1e53c7	Minor bug fixes to --privileges for PostgreSQL query (corner case)	2011-03-11 14:54:41 +00:00
Miroslav Stampar	1879a49506	fix for a bug reported by andreoaz@gmail.com	2011-03-10 20:40:12 +00:00
Miroslav Stampar	eb1cda7065	minor refactoring (more consistent)	2011-03-09 12:06:32 +00:00
Miroslav Stampar	62e3510387	minor refactoring	2011-03-09 11:37:37 +00:00
Miroslav Stampar	5c97f9a496	improvement of url encoding technique (implemented failsafe routine for shortening too long GET queries)	2011-03-09 09:36:56 +00:00