2612 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Bernardo Damele	0c01be0eeb	Ugly work-around to avoid unescaping WAITFOR DELAY time between single quotes (unescaped CHAR(..) value does not work).	2010-12-09 00:34:02 +00:00
Bernardo Damele	9c61adb21d	Cosmetics	2010-12-09 00:26:06 +00:00
Bernardo Damele	b5c6527c72	Minor fix	2010-12-09 00:25:48 +00:00
Bernardo Damele	3b293c4ea7	Added possible stacked queries time-based blind vector for MSSQL	2010-12-08 23:55:42 +00:00
Bernardo Damele	f5ce739bdf	Added support for time-based blind SQL injection via stacked queries too. Need to add vectors for some DBMS yet.	2010-12-08 23:52:31 +00:00
Bernardo Damele	10ef2b5de8	Minor bug fix	2010-12-08 23:09:42 +00:00
Miroslav Stampar	54f6673609	update	2010-12-08 22:38:26 +00:00
Miroslav Stampar	d6077273e0	update	2010-12-08 22:14:42 +00:00
Miroslav Stampar	5aee1fd8e0	updated THANKS file	2010-12-08 21:19:46 +00:00
Miroslav Stampar	258e9fb50e	fix for a "bug" reported by Spencer J. McIntyre (os.makedirs(conf.outputPath, 0755) -> permission denied)	2010-12-08 21:16:18 +00:00
Miroslav Stampar	69c4f94980	update	2010-12-08 15:40:01 +00:00
Miroslav Stampar	81c16926c1	code refactoring some more	2010-12-08 14:46:07 +00:00
Miroslav Stampar	40fadf2f35	minor update	2010-12-08 14:33:10 +00:00
Miroslav Stampar	95b48746a6	cosmetics	2010-12-08 14:29:09 +00:00
Miroslav Stampar	ed09c53ee4	minor minor update	2010-12-08 14:27:37 +00:00
Miroslav Stampar	01cf1394a4	code refactoring	2010-12-08 14:26:40 +00:00
Miroslav Stampar	af22679605	minor update	2010-12-08 13:09:27 +00:00
Miroslav Stampar	6223f25dd9	code beautification	2010-12-08 13:04:48 +00:00
Miroslav Stampar	64cc2588f1	now resume is available for time-based blinds too	2010-12-08 12:49:26 +00:00
Miroslav Stampar	537b619165	removing junk	2010-12-08 12:30:25 +00:00
Miroslav Stampar	b5e45939e3	sqlmap premiere of blind time based query/bisection	2010-12-08 12:28:54 +00:00
Miroslav Stampar	ad00fe13c1	another fix for MySQL time based payloads	2010-12-08 12:00:27 +00:00
Miroslav Stampar	8227e6d3cf	bug fix for BENCHMARK time-based vectors	2010-12-08 11:49:55 +00:00
Miroslav Stampar	47bb31fb47	code refactoring	2010-12-08 11:30:25 +00:00
Miroslav Stampar	1ae2fa7f1a	update regarding time based payloads	2010-12-08 11:26:54 +00:00
Miroslav Stampar	bdff4aba6a	switching to quick_ratio	2010-12-07 23:57:43 +00:00
Miroslav Stampar	c1b82cf09c	ratio() gives a considerable lag on real life cases, as real_quick_ratio() gives almost as good results	2010-12-07 23:53:44 +00:00
Miroslav Stampar	a4a63f5b1e	minor update	2010-12-07 23:49:00 +00:00
Miroslav Stampar	293ce18fed	two major bug fixes regarding time calculation (previously comparison was also a part of "delta", which screwed results in cases with large pages; other was a standard distribution based one)	2010-12-07 23:32:33 +00:00
Miroslav Stampar	b21eb88905	minor update	2010-12-07 22:45:38 +00:00
Miroslav Stampar	575e50673b	minor update	2010-12-07 19:27:01 +00:00
Miroslav Stampar	398b82644a	little explanation	2010-12-07 19:25:26 +00:00
Miroslav Stampar	dc651d59ec	little mathematics here and there (used "Rules for normally distributed data")	2010-12-07 19:19:12 +00:00
Bernardo Damele	ee72838231	Removed debug print	2010-12-07 17:19:29 +00:00
Bernardo Damele	5f97312f29	Minor fix	2010-12-07 17:17:38 +00:00
Bernardo Damele	8ff7c9a5a1	Works on Oracle's GROUP BY too	2010-12-07 17:17:01 +00:00
Bernardo Damele	81e7465ed2	Cosmetics	2010-12-07 17:16:21 +00:00
Miroslav Stampar	ecd4a5a532	added standard deviation check in time based tests	2010-12-07 16:39:31 +00:00
Miroslav Stampar	294119d2ec	more advanced time technique(s)	2010-12-07 16:04:53 +00:00
Miroslav Stampar	4959da3ce6	it's a must to double check time based payloads	2010-12-07 14:59:11 +00:00
Miroslav Stampar	e53fef546e	update regarding session page templates	2010-12-07 14:35:31 +00:00
Miroslav Stampar	add6235b16	removed pageTemplate from injection(s), it's not longer stored in session, and it's reloaded when resuming from session	2010-12-07 14:06:54 +00:00
Miroslav Stampar	0dc630203f	code refactoring	2010-12-07 13:34:06 +00:00
Miroslav Stampar	4f01d4c109	number crunching based time payloads are now affected by conf.timeSec	2010-12-07 13:24:18 +00:00
Miroslav Stampar	d0936bc8ed	adding vectors for SQLite time-based payloads	2010-12-07 13:14:56 +00:00
Bernardo Damele	54b8cb76a1	Messed up with my last merge, all fixed now	2010-12-07 12:59:53 +00:00
Miroslav Stampar	b38a634d95	bug fix	2010-12-07 12:55:31 +00:00
Bernardo Damele	7c32db6e9d	Forgot when merged with my last commit	2010-12-07 12:52:09 +00:00
Bernardo Damele	acac0d346f	Minor bug fixes and adjustments	2010-12-07 12:45:45 +00:00
Bernardo Damele	8e78057ac8	Added counter of total HTTP(s) requests done during detection phase	2010-12-07 12:33:47 +00:00