Miroslav Stampar
1196a1b7f8
Fixes #405
2017-04-10 14:50:17 +02:00
Miroslav Stampar
c2262eda1a
Update of smalldict.txt with 7 (small) more from SecLists
2017-04-07 16:30:36 +02:00
Miroslav Stampar
02eacc32c1
Minor cleanup
2017-04-07 16:30:02 +02:00
Miroslav Stampar
b1a112f72c
Updating wordlist.zip file with 15 dicts from SecLists
2017-04-07 16:18:21 +02:00
Miroslav Stampar
464caf056b
Minor update
2017-04-07 15:55:18 +02:00
Miroslav Stampar
44c85f8351
Reverting back the bottle.py revision because of numerous Python 2.6 incompatibilities
2017-04-07 15:10:28 +02:00
Miroslav Stampar
ad3283fd24
Another Python 2.6 patch
2017-04-07 15:05:54 +02:00
Miroslav Stampar
07208c45ef
Patch of bottle.py for Python 2.6
2017-04-07 14:59:24 +02:00
Miroslav Stampar
751f423ae0
Adding latest revision of bottle.py
2017-04-07 14:55:25 +02:00
Miroslav Stampar
c124086021
Minor update for #1282
2017-04-07 14:46:41 +02:00
Miroslav Stampar
f285bc7459
Minor update
2017-04-07 14:30:52 +02:00
Miroslav Stampar
b4c4d3f72a
Fixes latest Python 2.6 compatibility issues
2017-04-06 11:37:42 +02:00
Miroslav Stampar
cfe34f61b8
Implementation for an Issue #1895
2017-04-06 11:33:59 +02:00
Miroslav Stampar
c1c7ea33fe
Minor update
2017-03-30 12:05:05 +02:00
Miroslav Stampar
4458a443ef
Fixes #1664
2017-03-30 11:58:03 +02:00
Miroslav Stampar
16bd3a1f02
Fixes #2453
2017-03-30 11:42:34 +02:00
Miroslav Stampar
a358bc0a38
Minor update
2017-03-30 10:24:57 +02:00
Miroslav Stampar
aebae6e27b
Added (heuristic) support for #1679
2017-03-30 10:16:35 +02:00
Miroslav Stampar
0a3e771b1b
Fixes #2449
2017-03-28 15:22:53 +02:00
Miroslav Stampar
f82c0497fa
Fixes #2447
2017-03-27 22:36:04 +02:00
Miroslav Stampar
715763885d
Fixes #2306
2017-03-24 14:20:18 +01:00
Miroslav Stampar
4aae5d9a9d
Fixes #2444
2017-03-19 21:34:47 +01:00
Miroslav Stampar
1bc583d358
Another patch related to the #2440
2017-03-17 09:43:45 +01:00
Miroslav Stampar
e506a390db
Minor patch (prevent message spamming of multiple union column possibilities)
2017-03-15 16:18:20 +01:00
Miroslav Stampar
c5b4af8636
Dummy commit (to provoke rehash)
2017-03-15 16:07:52 +01:00
Miroslav Stampar
c29e47f72f
Fixes #2440
2017-03-15 16:04:56 +01:00
Miroslav Stampar
60e8c725f9
Fixes #2437
2017-03-12 23:24:13 +01:00
Miroslav Stampar
5dba32b2e1
Fixes #2431
2017-03-12 09:52:37 +01:00
Miroslav Stampar
ef04c99069
No more dumb usage of '--dbms'
2017-03-06 12:53:04 +01:00
Miroslav Stampar
e2fb16c98c
Fixes #2425
2017-03-06 12:05:58 +01:00
Miroslav Stampar
d2b16c5c91
Fixes #2422
2017-03-01 11:09:55 +01:00
Miroslav Stampar
9f0c42dde0
Minor leftover
2017-03-01 10:09:13 +01:00
Miroslav Stampar
78ca371162
Adding option --web-root (Issue #2419 )
2017-03-01 10:07:26 +01:00
Miroslav Stampar
a35c976759
Proper implementation for an Issue #2418
2017-02-28 14:00:42 +01:00
Ekultek
71984fc452
updated IP address regex as to not provide false positive
2017-02-28 06:35:37 -06:00
Miroslav Stampar
a0a6702a4e
Minor patch (reported via ML)
2017-02-28 13:16:19 +01:00
Miroslav Stampar
b18444f215
Issue #2417 (most probably -> most likely)
2017-02-27 22:14:52 +01:00
Miroslav Stampar
7ea524800a
Taking couple of suggestions from #2417
2017-02-27 22:03:15 +01:00
Miroslav Stampar
7960045cf9
Fixes #2277 and #2300
2017-02-27 13:58:07 +01:00
Brie Carranza
1475ba441c
Correct typo in basic.py
2017-02-26 09:05:36 -05:00
Miroslav Stampar
b2585cc8ea
Patch for #2410
2017-02-25 07:58:59 +01:00
Miroslav Stampar
7b263327cc
Update for #2410
2017-02-25 07:54:54 +01:00
Niklas Femerstrand
1b938c758f
Adds option command to api client
2017-02-25 10:24:00 +07:00
Miroslav Stampar
5a08b71999
Minor update
2017-02-23 11:36:37 +01:00
Miroslav Stampar
4b420e7579
Removing Google PageRank as it is dead now
2017-02-23 11:33:39 +01:00
Miroslav Stampar
6b580a682a
Minor update
2017-02-20 10:06:06 +01:00
Miroslav Stampar
d6e7c2acdc
Minor touch
2017-02-19 01:48:12 +01:00
Tomahock
7fe1820ce4
Fix proxyFile regex to properly match an address with a -
2017-02-17 23:32:32 +00:00
Miroslav Stampar
98e449e38c
Adding plus2fnconcat tamper script (Issue #2396 )
2017-02-17 10:26:25 +01:00
Miroslav Stampar
9acf122ba6
Patch for an Issue #2396
2017-02-16 16:56:54 +01:00
Miroslav Stampar
2ed144ec85
Patch for wrong encoding reported privately via email
2017-02-16 15:52:07 +01:00
Miroslav Stampar
ec0c103952
Bug fix (reported privately)
2017-02-15 10:30:29 +01:00
Miroslav Stampar
a35d1e5373
Minor patch related to the email from ML
2017-02-14 13:14:35 +01:00
Miroslav Stampar
f5cf22a536
Update for an Issue #2377
2017-02-06 13:57:33 +01:00
Miroslav Stampar
38f16decef
Update for an Issue #2384
2017-02-06 13:28:33 +01:00
Miroslav Stampar
15f86e85b1
Minor update for #2379
2017-02-06 12:03:18 +01:00
Miroslav Stampar
5217efc69b
Fixes #2379
2017-02-06 12:01:46 +01:00
Miroslav Stampar
03bbf552ef
Patch for an Issue #2382
2017-02-06 11:14:45 +01:00
Miroslav Stampar
664684ad8f
Update for #2378
2017-02-03 23:04:38 +01:00
samogot
1c1f259df4
Update settings.py
...
fix - looking for any tag
2017-02-03 16:50:16 +02:00
samogot
6249823335
Minor parse-error extension
...
parse errors produced by Yii PHP Framework
2017-02-03 16:36:57 +02:00
Miroslav Stampar
bad3f80a1c
Touch update
2017-01-31 14:18:36 +01:00
Miroslav Stampar
9851a5703a
Fixes #2373
2017-01-31 14:00:12 +01:00
Miroslav Stampar
2a3014b606
Fixes #2367
2017-01-24 18:07:06 +01:00
Miroslav Stampar
16d5e22b72
Fixes #2358
2017-01-21 23:58:37 +01:00
Miroslav Stampar
a8a6dce38b
Fixes #2366
2017-01-21 23:09:15 +01:00
Miroslav Stampar
f542e828d2
Fixes #2364
2017-01-20 13:11:12 +01:00
Miroslav Stampar
cf182882b1
Minor update
2017-01-18 10:40:39 +01:00
Miroslav Stampar
dd5ac6f1e7
Fixes #2357
2017-01-18 10:33:54 +01:00
Miroslav Stampar
1e7a453ff6
Fixes #2356
2017-01-18 10:19:23 +01:00
Miroslav Stampar
138aa6db65
Patch for an Issue #2351
2017-01-16 15:23:38 +01:00
Miroslav Stampar
121f0376ea
Implementation for #2351
2017-01-16 14:29:23 +01:00
Miroslav Stampar
dfc684640a
Proper implementation for #2347
2017-01-16 14:01:44 +01:00
Miroslav Stampar
104fbc80af
Patch for #2348
2017-01-16 13:53:46 +01:00
Miroslav Stampar
cadba37059
Proper implementation for #2350
2017-01-16 13:44:46 +01:00
Miroslav Stampar
750d57ec96
Fixed bug reported privately via email
2017-01-13 14:41:41 +01:00
Miroslav Stampar
9a86365d92
Fixes #2333
2017-01-08 01:21:31 +01:00
Miroslav Stampar
f794d9d5a5
Fixes #2328
2017-01-02 15:26:32 +01:00
Miroslav Stampar
c29db43bfa
Minor refactoring
2017-01-02 15:14:59 +01:00
Miroslav Stampar
e0eeed0a96
Minor update
2017-01-02 14:31:19 +01:00
Miroslav Stampar
55272f7a3b
New version preparation
2017-01-02 14:19:18 +01:00
Miroslav Stampar
6ff07f01eb
Fixes #2326
2016-12-31 13:39:22 +01:00
Miroslav Stampar
1c737d7515
Fixes #2322
2016-12-28 22:11:14 +01:00
Francisco Blas Izquierdo Riera (klondike)
025e9ac5b4
Fix the logic used for --param-exclude
...
The current logic will skip all existing parameters if no param-exclude is defined.
This breaks previous behaviour, makes it harder to use the tool and is quite confusing.
The new logic will always check the parameter is set before running any other checks instead of shortcircuit an empoty(always true) regexp.
2016-12-28 12:25:05 +01:00
Miroslav Stampar
89bbf5284c
Adding new option --param-exclude on private request
2016-12-25 23:16:44 +01:00
Miroslav Stampar
44b00d629d
Fixes #2312
2016-12-21 10:33:35 +01:00
Miroslav Stampar
afc3b30c41
Minor refactoring
2016-12-20 09:56:44 +01:00
Miroslav Stampar
17c556a63d
Minor patches (and one bug from ML)
2016-12-20 09:53:44 +01:00
Miroslav Stampar
edc6f47758
Some refactoring
2016-12-19 23:47:39 +01:00
Miroslav Stampar
bb6e8fd4ce
Minor bug fix (reported privately via email)
2016-12-15 16:09:09 +01:00
Miroslav Stampar
c54c2204a1
Fixes #2303
2016-12-12 10:47:05 +01:00
Miroslav Stampar
f7f33bef9f
Minor patches
2016-12-09 23:19:03 +01:00
Miroslav Stampar
4bd7d81cea
Patches #2300
2016-12-09 23:14:18 +01:00
Miroslav Stampar
f6815df5c3
Fixes #2302
2016-12-09 23:10:14 +01:00
Miroslav Stampar
42cea2e03c
Better git clone (faster; without too much commit history)
2016-12-08 11:04:42 +01:00
Miroslav Stampar
52177065ca
Patch for an Issue #2297
2016-12-06 15:43:09 +01:00
Miroslav Stampar
e74149970b
Minor debug update
2016-12-03 22:06:18 +01:00
Miroslav Stampar
90b0ac37c8
New WAF script (AWS WAF)
2016-12-01 23:09:06 +01:00
Miroslav Stampar
63a74777f2
Minor update
2016-12-01 23:08:49 +01:00
Miroslav Stampar
4ac319b074
Adding new tamper script plus2concat (thank you Luka Pusic)
2016-12-01 22:28:07 +01:00
Miroslav Stampar
2a754eef1c
Adding switch --ignore-redirects (Issue #2286 )
2016-11-25 13:32:28 +01:00
Miroslav Stampar
4e1bdb0c70
Minor update
2016-11-25 12:34:13 +01:00
Miroslav Stampar
c35ba8b226
Fixes #2279
2016-11-17 22:34:10 +01:00
Miroslav Stampar
7e6879ec41
Minor patch for #2272
2016-11-11 13:46:41 +01:00
Miroslav Stampar
ea961678ee
Fixes #2273
2016-11-11 10:28:50 +01:00
Miroslav Stampar
d4414e6631
Minor misspell
2016-11-11 10:21:57 +01:00
Miroslav Stampar
eb098f6527
Fixes #2268
2016-11-09 12:27:10 +01:00
Miroslav Stampar
5772d8904d
Fixes #2266
2016-11-09 12:20:54 +01:00
Miroslav Stampar
7000373c4b
Minor patch
2016-11-09 12:18:15 +01:00
Miroslav Stampar
a60c9b0dcc
Minor patch
2016-11-09 11:29:08 +01:00
Miroslav Stampar
2eb7a1d264
Patch related to the #2265
2016-11-07 23:14:17 +01:00
Miroslav Stampar
13f0949f9e
Another patch for #1596
2016-11-07 09:31:07 +01:00
Miroslav Stampar
076a42cbfe
Patch related to the #1596
2016-11-07 09:28:00 +01:00
Miroslav Stampar
ce19525bc3
Fixes #2262
2016-11-05 22:36:58 +01:00
Miroslav Stampar
6da2e49100
Fixes #2261
2016-11-04 15:04:38 +01:00
Miroslav Stampar
1e44c4d669
Patch related to #2257
2016-11-02 12:04:21 +01:00
Miroslav Stampar
10097dd124
Fixes #2253
2016-10-29 00:13:04 +02:00
Miroslav Stampar
f4e36fc049
Patch for an Issue #2252
2016-10-28 11:52:48 +02:00
Miroslav Stampar
083ce111f0
Minor speed up
2016-10-26 22:33:04 +02:00
Hanno Heinrichs
2cc604e356
Fix several typos
2016-10-26 21:41:57 +02:00
Miroslav Stampar
044f05e772
Fixes #2246
2016-10-24 23:52:33 +02:00
Miroslav Stampar
6f343080e8
Fixes #2245
2016-10-24 23:33:49 +02:00
Miroslav Stampar
25c34c7728
Fixes #2244
2016-10-24 23:29:18 +02:00
Miroslav Stampar
d2bbe80455
Fixes #2243
2016-10-22 22:07:29 +02:00
Miroslav Stampar
0398cbdc76
Minor refactoring
2016-10-22 21:52:18 +02:00
Miroslav Stampar
e0149e1c5f
Minor update
2016-10-21 13:05:45 +02:00
Miroslav Stampar
98c6d8f582
Merge pull request #2240 from lightos/master
...
Support for timeout param when using Websockets
2016-10-21 13:03:08 +02:00
Miroslav Stampar
d605b3af3c
Revisiting banner xmls (Issue #2239 )
2016-10-21 13:01:28 +02:00
Roberto Salgado
a6cbbc5ea9
Support for timeout param when using Websockets
...
A fix for the timeout parameter being ignored when using Web-sockets.
2016-10-20 12:13:39 -07:00
Miroslav Stampar
5c80e988ba
Fixes #2238
2016-10-20 00:47:53 +02:00
Miroslav Stampar
10ffcb8b00
Fixes #2237
2016-10-20 00:19:16 +02:00
Miroslav Stampar
38d74cf61c
Minor update
2016-10-19 13:07:25 +02:00
Miroslav Stampar
1db6953f08
Proper fix for #2236
2016-10-18 20:17:51 +02:00
Miroslav Stampar
d431c7d155
Fixes #2236
2016-10-18 20:07:19 +02:00
Miroslav Stampar
5ab4d54df0
Minor update of THIRD-PARTY.md
2016-10-18 13:49:29 +02:00
Miroslav Stampar
877d46e9f7
Fixes #2234
2016-10-18 13:46:56 +02:00
Miroslav Stampar
7e69cc112f
Fixes #2235
2016-10-18 13:37:36 +02:00
Miroslav Stampar
5b14eecd25
Bug fix (reconnecting in case of timeouted direct connection)
2016-10-17 22:55:07 +02:00
Miroslav Stampar
24eaf55dc8
Removing bad decision for -d (user should be able to choose)
2016-10-17 22:32:23 +02:00
Miroslav Stampar
6be10b307d
Minor patch
2016-10-17 22:02:41 +02:00
Miroslav Stampar
91ad71b1e0
Minor cosmetics
2016-10-17 12:36:42 +02:00
Miroslav Stampar
d6255de205
Fixes #2231
2016-10-17 12:33:07 +02:00
Miroslav Stampar
c293a6a25a
Fixes #2229 and #2230
2016-10-15 09:53:12 +02:00
Miroslav Stampar
b1175017f9
Minor update regarding to the last commit
2016-10-15 00:54:32 +02:00
Miroslav Stampar
75c9f91f11
Fixes #2226
2016-10-15 00:51:35 +02:00
Miroslav Stampar
9ff2dcf1c1
Fixes #2228
2016-10-15 00:16:53 +02:00
Miroslav Stampar
6c4e9ae427
Updating SocksiPy to PySocks (updated fork)
2016-10-14 23:16:26 +02:00
Miroslav Stampar
748e94dcee
Minor update for #2224
2016-10-13 23:25:46 +02:00
Miroslav Stampar
f389bd71c0
Implementation for an Issue #2224
2016-10-13 23:17:54 +02:00
Miroslav Stampar
1126ff86ce
Fixes #2223
2016-10-13 23:07:11 +02:00
Miroslav Stampar
79377fedab
Minor update
2016-10-13 23:06:04 +02:00
Miroslav Stampar
5d2972f362
Implementation for an Issue #2221
2016-10-11 17:33:36 +02:00
Miroslav Stampar
ae465bbaf8
Minor revert of leftover
2016-10-11 01:09:30 +02:00
Miroslav Stampar
1b95dd2d9d
Fix for a bug reported privately by user (in some cases data has not been retrieved)
2016-10-11 01:07:31 +02:00
Miroslav Stampar
6130185ac6
Minor consistency update with the wiki
2016-10-11 00:35:39 +02:00
Miroslav Stampar
c92fde120d
Implements #2220
2016-10-10 23:27:41 +02:00
Miroslav Stampar
7eab1bcbf9
Automating even more switch --tor
2016-10-10 14:19:44 +02:00
Miroslav Stampar
4c05307357
Disabling socket pre-connect in case of --tor, --proxy and --proxy-file
2016-10-10 01:57:55 +02:00
Miroslav Stampar
0037c28e9e
Preventing obnoxious 'install git' on MacOS
2016-10-10 01:35:22 +02:00
Miroslav Stampar
2b279233b6
Fixes #2219
2016-10-09 14:19:40 +02:00
Miroslav Stampar
b51b80b174
Fix for a privately reported bug
2016-10-08 21:11:43 +02:00
Miroslav Stampar
e4b0ac9ae5
Minor update of common user columns
2016-10-07 14:48:05 +02:00
Miroslav Stampar
7f416846b7
Minor revisit of MsSQL error-based payloads
2016-10-06 23:50:32 +02:00
Miroslav Stampar
5b7254af96
Minor patch
2016-10-06 22:27:29 +02:00
Miroslav Stampar
c83d417298
Fixes #2212
2016-10-05 23:02:20 +02:00
Miroslav Stampar
b42dc6e7a5
Update of Oracle and PostgreSQL system databases/schemas
2016-10-05 17:58:35 +02:00
Miroslav Stampar
8124fe391d
Bug fix for using --search in combination with -D CD
2016-10-05 17:43:57 +02:00
Miroslav Stampar
833ca4b640
Minor refactoring
2016-10-05 17:41:02 +02:00
Miroslav Stampar
3b244858f8
Adding performance_schema as one more of MySQL's system database
2016-10-05 17:33:24 +02:00
Miroslav Stampar
6107696e25
Minor patch (--help should display basic help)
2016-10-05 17:01:58 +02:00
Miroslav Stampar
af1c9c7fb2
Related to the last commit
2016-10-04 23:48:09 +02:00
Miroslav Stampar
06b54ab134
Better choice of used table (INFORMATION_SCHEMA.CHARACTER_SETS can also be found in MsSQL and PgSQL; mysql.db can have permission problems)
2016-10-04 23:43:00 +02:00
Miroslav Stampar
fee5c7bd7c
Adding two new payloads and minor cosmetics
2016-10-04 23:39:18 +02:00
Miroslav Stampar
fb8afc6add
Adding a new payload (Oracle boolean based on error response)
2016-10-04 22:12:00 +02:00
Miroslav Stampar
6c372a09bd
Minor update
2016-10-04 11:55:16 +02:00
Miroslav Stampar
171cf6f54d
Minor fine tuning for SQLi heuristic check
2016-10-04 11:32:06 +02:00
Miroslav Stampar
029bb5554d
Minor cleanup of user-agents
2016-10-04 10:48:10 +02:00
Miroslav Stampar
c69cb79d66
Fixes #2208
2016-10-04 10:39:28 +02:00
Miroslav Stampar
dc8301689e
Implementation for an Issue #2204
2016-10-02 11:13:40 +02:00
Miroslav Stampar
d8dd37510c
Fixes #2202
2016-10-01 21:02:40 +02:00
Miroslav Stampar
d1680b04f3
Minor code consistency update
2016-09-29 21:26:47 +02:00
Miroslav Stampar
102d4b4119
Bug fix for uploading files in case of web subdirectories
2016-09-29 21:14:28 +02:00
Miroslav Stampar
b3b49b3492
Minor patch for --parse-errors
2016-09-29 18:07:00 +02:00
Miroslav Stampar
7a89433251
Minor patch
2016-09-29 18:02:20 +02:00
Miroslav Stampar
ced6711128
Playing a bit with logo
2016-09-29 15:59:28 +02:00
Miroslav Stampar
bdf76f8d4d
Revisiting user-agents (newer versions of mainstream browsers)
2016-09-29 15:21:32 +02:00
Miroslav Stampar
571ae174bd
Minor language update
2016-09-29 14:55:43 +02:00
Miroslav Stampar
332726356c
Minor language update
2016-09-29 14:03:46 +02:00
Miroslav Stampar
4ea9d3b884
Replacing generic concatenation || with CONCAT (far better choice)
2016-09-29 13:35:16 +02:00
Miroslav Stampar
3409953538
Revisiting default level 1 payloads (MySQL stacked queries are as frequent as double rainbows)
2016-09-29 12:59:51 +02:00
Miroslav Stampar
3b3ab072e6
Adding short option(s) for setting verbosity (e.g. -vvv)
2016-09-29 11:19:25 +02:00
Miroslav Stampar
fef407e09c
Making HTTP requests up to 20% smaller (fine tuning the request headers)
2016-09-29 10:44:00 +02:00
Miroslav Stampar
5afccce3c6
Minor patch
2016-09-28 16:56:47 +02:00
Miroslav Stampar
e439095593
Bug fix for MySQL's --os-pwn
2016-09-28 15:39:34 +02:00
Miroslav Stampar
e77126e847
Removing obsolete functionality
2016-09-28 15:00:26 +02:00
Miroslav Stampar
3ef01f0e31
Minor update
2016-09-28 14:48:33 +02:00
Miroslav Stampar
d36b5c0a4b
Adding time-based blind (heavy query) payloads for Informix (Issue #552 )
2016-09-28 10:30:09 +02:00
Miroslav Stampar
e5a758bdf4
Fixes #2192
2016-09-28 09:55:14 +02:00
Miroslav Stampar
617509869d
Minor patch for Informix --parse-errors
2016-09-27 14:58:10 +02:00
Miroslav Stampar
5079c42788
Adding Informix parameter replacement payloads (Issue #552 )
2016-09-27 14:39:17 +02:00