1219 Commits

Author	SHA1	Message	Date
Miroslav Stampar	89c2640d23	basic --search now works with MS Access	2010-12-26 23:50:16 +00:00
Miroslav Stampar	f2373121d0	noticed little DoS behavior and lots of connections in netstat (best way to deal with zombie connections is to explicitly close them if not needed any more)	2010-12-26 14:36:51 +00:00
Miroslav Stampar	ceeb6374e8	bug fix (TypeError: object of type 'NoneType' has no len())	2010-12-26 13:27:24 +00:00
Miroslav Stampar	569e060aab	important improvement	2010-12-26 13:20:52 +00:00
Miroslav Stampar	a555d1ad68	minor improvement	2010-12-26 11:15:02 +00:00
Miroslav Stampar	320a6f9efb	minor minor update	2010-12-26 09:55:33 +00:00
Miroslav Stampar	17d74fc83c	cosmeticado	2010-12-26 09:53:40 +00:00
Miroslav Stampar	cd337d9f39	minor fix	2010-12-26 09:46:09 +00:00
Miroslav Stampar	eaf4b93856	minor update	2010-12-26 09:40:40 +00:00
Miroslav Stampar	562a6440d1	fix for a bug reported by nightman (same as http://bugs.python.org/issue8797)	2010-12-26 09:33:04 +00:00
Miroslav Stampar	6c72e41972	minor fix/update	2010-12-26 02:19:10 +00:00
Miroslav Stampar	c5c4aae3d5	minor update (to prevent adding too much items)	2010-12-25 10:42:36 +00:00
Miroslav Stampar	b472b96f92	bug fix, refactoring and improved extractErrorMessage capabilities	2010-12-25 10:16:20 +00:00
Miroslav Stampar	ea7ba19f6b	minor update	2010-12-25 09:43:14 +00:00
Miroslav Stampar	272476773f	getPageTextWordsSet on tableExists is pretty powerful stuff	2010-12-25 09:37:33 +00:00
Miroslav Stampar	6845d402fa	well, here and there, merry Christmas to all :)	2010-12-24 20:17:53 +00:00
Miroslav Stampar	2d115e0350	one more fix	2010-12-24 18:44:13 +00:00
Miroslav Stampar	edcf1a0872	few bug fixes	2010-12-24 18:40:48 +00:00
Miroslav Stampar	96a06351a1	minor fix (in testing phase raise404 should be set to False)	2010-12-24 12:36:00 +00:00
Miroslav Stampar	2c23a59ba5	fix for one of those more complex bugs (comparison was returning None while original page and/or page template were already had already DBMS error inside)	2010-12-24 12:13:48 +00:00
Miroslav Stampar	aab14fa2d3	minor refactoring/cosmetics	2010-12-24 11:06:57 +00:00
Miroslav Stampar	23dc408901	prioritization of tests based on DBMS error messages and some comments in common.py	2010-12-24 10:55:41 +00:00
Miroslav Stampar	a09716a701	minor update	2010-12-24 10:07:56 +00:00
Miroslav Stampar	d9f08e4aa3	randomization of user agents	2010-12-24 10:04:27 +00:00
Miroslav Stampar	d5eebb1cbf	fix for a fundamentally bad presumtion (ratio should be > 0.6 in stable pages), especially today when we have stuff like where=2; also, just imagine 500s which could just say something like FALSE, while on ratio level it would be far below 0.6	2010-12-24 09:49:19 +00:00
Miroslav Stampar	cb17e61f35	bug fix (UnicodeDecodeError: 'ascii' codec can't decode byte 0xa9 in position 959)	2010-12-24 02:54:26 +00:00
Miroslav Stampar	8470de7b76	bug fix for boolean proxy when using time based payloads	2010-12-23 23:46:08 +00:00
Miroslav Stampar	7f7fb93155	cosmetics	2010-12-23 18:44:18 +00:00
Miroslav Stampar	017ea9e686	update	2010-12-23 14:06:22 +00:00
Miroslav Stampar	73f33c1999	bug fix of re-introduced bug (in multiple target mode sites with similar URI weren't skipped)	2010-12-23 11:28:13 +00:00
Miroslav Stampar	8fc60215ed	lol. this was a pesky bug. heuristic wasn't working on one mssql test site and i couldn't find why. at end the problem was that when the HTTP code was raised (like 500) no parseResponse was called.	2010-12-22 19:12:46 +00:00
Miroslav Stampar	7c06dbffc3	bug fix (AttributeError: 'unicode' object has no attribute 'sort')	2010-12-22 18:55:50 +00:00
Bernardo Damele	c1f2534e9a	More bug fixes to properly distinguish between full inband and single-entry inband sql injections	2010-12-22 15:47:52 +00:00
Bernardo Damele	250608660d	Minor bug fix to always show HTTP request and response when verbose is set accordingly to 4, 5 or 6 regardless of the HTTP response code (error or not)	2010-12-22 13:41:36 +00:00
Bernardo Damele	5228f336da	Minor fix for ctrl+c during detection phase	2010-12-22 13:15:44 +00:00
Miroslav Stampar	08c88495d0	removed that ugly hack	2010-12-22 13:09:04 +00:00
Miroslav Stampar	8212b7b745	bug fix	2010-12-22 12:16:04 +00:00
Miroslav Stampar	5be9c04e44	update regarding Sybase syntax	2010-12-22 10:39:56 +00:00
Miroslav Stampar	d974a966b8	minor fix for end phase (Ctrl+C)	2010-12-21 23:55:55 +00:00
Miroslav Stampar	fb75d0636b	minor update	2010-12-21 23:42:59 +00:00
Miroslav Stampar	39a13077c4	minor bug fix	2010-12-21 23:09:41 +00:00
Miroslav Stampar	09479c85dc	minor bug fix	2010-12-21 22:35:44 +00:00
Miroslav Stampar	7a525f28d4	cosmetics	2010-12-21 15:26:23 +00:00
Miroslav Stampar	b2e7f9484d	minor tuning (2 techniques MAX per value used)	2010-12-21 15:24:14 +00:00
Miroslav Stampar	6c1133c4d4	some code refactoring	2010-12-21 15:13:13 +00:00
Miroslav Stampar	466d61ee85	minor fix	2010-12-21 14:29:47 +00:00
Miroslav Stampar	385e208f38	code refactoring regarding standard output suppression and some threading issues	2010-12-21 14:21:24 +00:00
Miroslav Stampar	0e68248f60	minor update of heuristic check	2010-12-21 12:56:18 +00:00
Miroslav Stampar	16f1f4e13e	when doing dynamic checks there are cases when 404 can be raised (perfectly normal)	2010-12-21 11:04:49 +00:00
Bernardo Damele	aca074b769	Removed unused outdated code	2010-12-21 10:49:52 +00:00