209 Commits

Author	SHA1	Message	Date
Bernardo Damele	034a3f387a	Minor improvement when testing for UNION query SQL injection to check only without comment and with DBMS specific comment (not anymore "random" unspecific comment characters)	2008-12-01 23:09:07 +00:00
Bernardo Damele	7d7170fc97	Minor code adjustments	2008-11-17 00:13:49 +00:00
Bernardo Damele	0bd5b52d95	Minor fixes	2008-11-13 00:03:04 +00:00
Bernardo Damele	ecc4a98071	Properly moved and improved inject.goStacked() function and newly ... implemented Time based blind SQL injection now is a single test file within the lib/techniques/ folder. Renamed lib/techniques/inference to lib/techniques/blind, it is more approriate and adapted the rest of the libraries. Updated ChangeLog file.	2008-11-12 23:44:09 +00:00
Bernardo Damele	81ed7c2086	Initial implementation of support for stacked queries. ... Added method to test for Time based blind SQL injection query stacking on the affected parameter a SLEEP() or similar DBMS specific function. Adapted libraries, plugins and XML with the above changes. Minor layout adjustments.	2008-11-12 00:36:50 +00:00
Bernardo Damele	a5b2366033	Implemented a better way to deal with % characters in parameters' value. Minor code restyle.	2008-10-16 15:31:02 +00:00
Bernardo Damele	d664f0387e	Fixed a bug reported by Bedirhan Urgun <bedirhanurgun@gmail.com>	2008-10-16 14:01:14 +00:00
Bernardo Damele	892a7b2f8a	propsets..	2008-10-15 15:56:32 +00:00
Bernardo Damele	8e3eb45510	After the storm, a restore..	2008-10-15 15:38:22 +00:00