Miroslav Stampar
|
19dcaeaabf
|
fix for "Payload: id=1 ; SELECT PG_SLEEP(5);--" (blank space was added in case when prefixes weren't stated)
|
2011-01-16 18:25:18 +00:00 |
|
Miroslav Stampar
|
718eef8753
|
minor fix
|
2011-01-16 18:11:35 +00:00 |
|
Miroslav Stampar
|
30d6791968
|
update regarding time based data retrieval
|
2011-01-16 17:52:42 +00:00 |
|
Miroslav Stampar
|
ec1ab3cd2a
|
removing timeSec from injection configuration attributes as it highly depends on current connection "variables"
|
2011-01-16 12:12:01 +00:00 |
|
Miroslav Stampar
|
2001bad7e1
|
automatic adjustment of timeSec for delayed queries
|
2011-01-16 12:04:32 +00:00 |
|
Miroslav Stampar
|
71391874eb
|
slightly faster and thread safer inference
|
2011-01-16 10:52:42 +00:00 |
|
Miroslav Stampar
|
fb166e9445
|
adding USER_LOCK stacked query support for ORACLE (older versions)
|
2011-01-16 10:31:16 +00:00 |
|
Miroslav Stampar
|
f31c028232
|
Oracle stacked vector based on DBMS_LOCK.SLEEP (https://foro.undersecurity.net/read.php?46,1436)
|
2011-01-16 10:07:56 +00:00 |
|
Bernardo Damele
|
0fc4ebdc1b
|
Major bug fix.
Minor code refactoring.
|
2011-01-16 01:17:09 +00:00 |
|
Bernardo Damele
|
c0d5daee99
|
More refactoring and cleanup
|
2011-01-16 00:15:30 +00:00 |
|
Bernardo Damele
|
02b333e30b
|
Minor improvement
|
2011-01-15 23:54:03 +00:00 |
|
Miroslav Stampar
|
29ea0950b6
|
now False is also affected (along with None and "")
|
2011-01-15 23:43:26 +00:00 |
|
Bernardo Damele
|
6e4b65a822
|
Minor refactoring
|
2011-01-15 23:28:31 +00:00 |
|
Bernardo Damele
|
558f3894f4
|
Minor improvement
|
2011-01-15 23:20:52 +00:00 |
|
Bernardo Damele
|
d3a28124b1
|
More code cleanup
|
2011-01-15 23:11:36 +00:00 |
|
Bernardo Damele
|
4a35f598b8
|
Minor refactoring
|
2011-01-15 22:09:53 +00:00 |
|
Miroslav Stampar
|
d2ce647113
|
one of my stupidest commits (just in case)
|
2011-01-15 18:17:46 +00:00 |
|
Miroslav Stampar
|
0f565c941e
|
bug fix and proper warning message
|
2011-01-15 16:59:53 +00:00 |
|
Miroslav Stampar
|
e105e1ea32
|
bug fix (some sites raise 404 during union tests)
|
2011-01-15 16:42:33 +00:00 |
|
Miroslav Stampar
|
3873d204bb
|
important update for dictionary attack
|
2011-01-15 15:56:11 +00:00 |
|
Miroslav Stampar
|
e17ac5fdca
|
update
|
2011-01-15 15:14:22 +00:00 |
|
Miroslav Stampar
|
44504746cf
|
minor update
|
2011-01-15 13:43:08 +00:00 |
|
Miroslav Stampar
|
5bdb50c224
|
code review part 3
|
2011-01-15 13:15:10 +00:00 |
|
Miroslav Stampar
|
1fa8f0cba7
|
code reviewing part 2
|
2011-01-15 12:53:40 +00:00 |
|
Miroslav Stampar
|
6a0e0cde3c
|
code review of modules in lib/core directory
|
2011-01-15 12:13:45 +00:00 |
|
Bernardo Damele
|
2d9b151883
|
Minor bug fix
|
2011-01-15 10:14:05 +00:00 |
|
Miroslav Stampar
|
05b2a338fe
|
cosmetics
|
2011-01-14 16:12:44 +00:00 |
|
Miroslav Stampar
|
bff989d348
|
minor update
|
2011-01-14 15:43:53 +00:00 |
|
Miroslav Stampar
|
daf5662eab
|
update
|
2011-01-14 15:33:49 +00:00 |
|
Bernardo Damele
|
1cfd6a6b9d
|
Code cleanup
|
2011-01-14 15:16:34 +00:00 |
|
Miroslav Stampar
|
08f7e20c51
|
minor code refactoring
|
2011-01-14 14:55:59 +00:00 |
|
Miroslav Stampar
|
fb9d7cdfaa
|
refactoring, code clearing and removal of obsolete switch --longest-common
|
2011-01-14 14:37:03 +00:00 |
|
Bernardo Damele
|
534f51f9fc
|
Minor bug fix
|
2011-01-14 14:20:28 +00:00 |
|
Bernardo Damele
|
e4e9b11b79
|
Minor code refactoring and adjustments - kb.dbms is needed in fingerprint.py, not getIdentifiedDBMS because when checkDbms() method is called, it's within the fingerprint phase and at that stage, getIdentifiedDBMS() would always return kb.misc.fpDbms.
|
2011-01-14 12:47:07 +00:00 |
|
Bernardo Damele
|
3c95d71ea5
|
Minor bug fix - restored of so called kb.misc.testedDbms (now kb.misc.fpDbms) to force the DBMS (only) during the fingerprint phase
|
2011-01-14 11:55:20 +00:00 |
|
Bernardo Damele
|
f209b7a65e
|
Updated
|
2011-01-14 09:56:55 +00:00 |
|
Bernardo Damele
|
7d9fd5a7b7
|
Minor bug fix
|
2011-01-14 09:49:14 +00:00 |
|
Miroslav Stampar
|
b2c7ae77d4
|
minor update
|
2011-01-14 09:45:47 +00:00 |
|
Miroslav Stampar
|
676b95b30a
|
minor code refactoring
|
2011-01-14 09:44:56 +00:00 |
|
Bernardo Damele
|
f8c04ce020
|
Minor bug fix
|
2011-01-13 20:59:13 +00:00 |
|
Bernardo Damele
|
2ac8debea0
|
Major code refactoring - moved to one location only (getIdentifiedDBMS() in common.py) the retrieval of identified/fingerprinted DBMS.
Minor bug fixes thanks to previous refactoring too.
|
2011-01-13 17:36:54 +00:00 |
|
Miroslav Stampar
|
a1d1f69c3f
|
revert
|
2011-01-13 15:28:08 +00:00 |
|
Miroslav Stampar
|
d937e27b19
|
minor fix
|
2011-01-13 15:19:37 +00:00 |
|
Miroslav Stampar
|
b0fdbdb13b
|
minor update
|
2011-01-13 15:15:56 +00:00 |
|
Bernardo Damele
|
877ea31521
|
Verbose docstring
|
2011-01-13 12:05:14 +00:00 |
|
Miroslav Stampar
|
ac5b49f555
|
update
|
2011-01-13 11:24:03 +00:00 |
|
Bernardo Damele
|
af4ee81e62
|
Cosmetics
|
2011-01-13 11:23:07 +00:00 |
|
Miroslav Stampar
|
ece2eb31ca
|
minor update
|
2011-01-13 11:08:29 +00:00 |
|
Bernardo Damele
|
ee4727850c
|
Minor bug fix
|
2011-01-13 10:29:47 +00:00 |
|
Bernardo Damele
|
ca33728fbc
|
Minor fix to avoid query splitting/unpacking when the statement is EXISTS()
|
2011-01-13 10:00:40 +00:00 |
|