Miroslav Stampar
|
0e68248f60
|
minor update of heuristic check
|
2010-12-21 12:56:18 +00:00 |
|
Miroslav Stampar
|
16f1f4e13e
|
when doing dynamic checks there are cases when 404 can be raised (perfectly normal)
|
2010-12-21 11:04:49 +00:00 |
|
Bernardo Damele
|
aca074b769
|
Removed unused outdated code
|
2010-12-21 10:49:52 +00:00 |
|
Bernardo Damele
|
ad6b528b33
|
Bit more verbose comment
|
2010-12-21 10:47:39 +00:00 |
|
Miroslav Stampar
|
6b37ddada4
|
removed some blank trailing spaces (with extra/shutils/blanks.sh)
|
2010-12-21 10:31:56 +00:00 |
|
Bernardo Damele
|
1a3f57e5fe
|
Cosmetics
|
2010-12-21 09:23:00 +00:00 |
|
Miroslav Stampar
|
d554460aec
|
minor fix
|
2010-12-21 01:09:39 +00:00 |
|
Miroslav Stampar
|
116c141dfa
|
another fix
|
2010-12-21 00:47:07 +00:00 |
|
Miroslav Stampar
|
416755c0b7
|
minor adjustments
|
2010-12-21 00:25:03 +00:00 |
|
Miroslav Stampar
|
a876fcedfb
|
minor update
|
2010-12-21 00:13:50 +00:00 |
|
Miroslav Stampar
|
8067365b93
|
fix for a bug reported by m4l1c3 (AttributeError: '_MainThread' object has no attribute 'ident')
|
2010-12-20 23:47:53 +00:00 |
|
Miroslav Stampar
|
e10670d9ac
|
added end detection phase choice into Ctrl+C list
|
2010-12-20 23:34:00 +00:00 |
|
Miroslav Stampar
|
03b275ce33
|
update
|
2010-12-20 23:27:04 +00:00 |
|
Miroslav Stampar
|
29001a4fce
|
minor update
|
2010-12-20 23:21:01 +00:00 |
|
Miroslav Stampar
|
518b3e094c
|
bug fix (http://dev.mysql.com/doc/refman/5.0/en/information-functions.html#function_found-rows)
|
2010-12-20 23:00:03 +00:00 |
|
Miroslav Stampar
|
b34fe5c334
|
no more need for such a huge timeout because any timeout exceptions will now be considered as a successful time-based attack (previously we wanted to get back to the program, hence there was such a huge timeout)
|
2010-12-20 22:49:48 +00:00 |
|
Miroslav Stampar
|
8fd3e7ba1f
|
thread based data added
|
2010-12-20 22:45:01 +00:00 |
|
Miroslav Stampar
|
c9e8aae8a2
|
we'll need to do some cleanup around threading data model we use (some of the data we currently use we'll need to spread via copies around used threads)
|
2010-12-20 19:34:41 +00:00 |
|
Miroslav Stampar
|
e09bc2406c
|
minor refactoring
|
2010-12-20 19:24:20 +00:00 |
|
Miroslav Stampar
|
5852bad963
|
some refactoring
|
2010-12-20 18:56:06 +00:00 |
|
Miroslav Stampar
|
36999a07c4
|
some filtering
|
2010-12-20 17:41:41 +00:00 |
|
Miroslav Stampar
|
19d8733e9a
|
this is strictly for educational purposes
|
2010-12-20 17:30:47 +00:00 |
|
Miroslav Stampar
|
c948bced61
|
should solve the problem with timeout problems in time-based payloads
|
2010-12-20 16:45:41 +00:00 |
|
Miroslav Stampar
|
364bc8e7d4
|
minor update
|
2010-12-20 11:25:18 +00:00 |
|
Miroslav Stampar
|
28da1141cf
|
some fixes (for MySQL < 4.0)
|
2010-12-20 11:23:57 +00:00 |
|
Miroslav Stampar
|
76024c455f
|
minor fix (using older commands for basic MySQL check)
|
2010-12-20 11:15:43 +00:00 |
|
Miroslav Stampar
|
eaf8929085
|
more minor updates
|
2010-12-20 10:48:53 +00:00 |
|
Miroslav Stampar
|
fd00ff7a82
|
minor bug fix
|
2010-12-20 10:37:03 +00:00 |
|
Bernardo Damele
|
e791f8f2b7
|
Minor fix
|
2010-12-20 10:33:24 +00:00 |
|
Miroslav Stampar
|
e9f1ecb9e7
|
minor update
|
2010-12-20 10:32:58 +00:00 |
|
Miroslav Stampar
|
10a7a2dfb2
|
kids, don't use this at home
|
2010-12-20 10:13:14 +00:00 |
|
Miroslav Stampar
|
13d5b2c0ff
|
code refactoring
|
2010-12-20 09:44:21 +00:00 |
|
Miroslav Stampar
|
4cb83654dc
|
minor update
|
2010-12-18 16:28:21 +00:00 |
|
Miroslav Stampar
|
36862e2efa
|
update
|
2010-12-18 15:57:47 +00:00 |
|
Miroslav Stampar
|
21d083272e
|
minor minor fix
|
2010-12-18 14:31:41 +00:00 |
|
Miroslav Stampar
|
4f73feec2f
|
now dictionary attack on multiple hash formats is supported (like mysql_passwd and mysql_old_passwd in one database)
|
2010-12-18 14:11:49 +00:00 |
|
Miroslav Stampar
|
71cf0bd2a5
|
minor update
|
2010-12-18 13:08:37 +00:00 |
|
Miroslav Stampar
|
05c6d661e8
|
cosmetics
|
2010-12-18 10:49:49 +00:00 |
|
Miroslav Stampar
|
03220d34ba
|
added Ctrl+C check in detection phase
|
2010-12-18 10:42:09 +00:00 |
|
Miroslav Stampar
|
e355f92f22
|
bug fix
|
2010-12-18 10:02:01 +00:00 |
|
Miroslav Stampar
|
fe67d3827c
|
code refactoring and some fixes
|
2010-12-18 09:51:34 +00:00 |
|
Miroslav Stampar
|
a067e805fa
|
minor update
|
2010-12-17 22:23:01 +00:00 |
|
Miroslav Stampar
|
108a96c6b4
|
some fixes
|
2010-12-17 21:45:20 +00:00 |
|
Miroslav Stampar
|
a19cb2c13a
|
code refactoring (added UNKNOWN_DBMS_VERSION instead of "Unknown")
|
2010-12-17 21:29:09 +00:00 |
|
Miroslav Stampar
|
b4450c6ddd
|
added one more level of MSSQL version check (if first fails for some reason)
|
2010-12-17 21:01:14 +00:00 |
|
Miroslav Stampar
|
07609bfb53
|
minor fix
|
2010-12-17 19:33:20 +00:00 |
|
Miroslav Stampar
|
bfdc4fa000
|
new error vector for MS SQL (from David Guimaraes' mail)
|
2010-12-17 19:00:20 +00:00 |
|
Miroslav Stampar
|
323af45ce4
|
added one more time request payload to confirm test results
|
2010-12-17 07:53:58 +00:00 |
|
Miroslav Stampar
|
e3fa3b0e8e
|
fix for a minor bug reported by nightman (AttributeError: 'NoneType' object has no attribute 'getFingerprint')
|
2010-12-17 07:48:32 +00:00 |
|
Miroslav Stampar
|
95b2c0803b
|
minor fix
|
2010-12-15 20:51:29 +00:00 |
|