Commit Graph

594 Commits

Author SHA1 Message Date
Bernardo Damele
378ce46061 NVARCHAR is not supported on Sybase Adaptive Server 2013-10-18 12:23:50 +01:00
Miroslav Stampar
4c39235c2f Minor revert (5->3) 2013-10-11 00:39:44 +02:00
Miroslav Stampar
6305c1e703 Making a comma-less RLIKE payload 2013-10-11 00:39:11 +02:00
Miroslav Stampar
dbaa35f9fe Minor fix 2013-10-10 23:53:43 +02:00
Miroslav Stampar
2dc570d7a8 Minor patch (for ORDER BY 'col' cases) 2013-10-10 23:08:20 +02:00
Miroslav Stampar
6f2c89bd7c Fix for an Issue #529 2013-09-25 10:22:23 +02:00
Miroslav Stampar
31684dbc89 Fix for an Issue #524 2013-09-13 16:16:46 +02:00
Miroslav Stampar
96ccdb7c83 Adding new regular expressions for error messages 2013-09-06 19:41:40 +02:00
Miroslav Stampar
a711c9ed36 Minor cleanup and initial work for #58 2013-08-09 14:13:48 +02:00
Miroslav Stampar
de31688c4f Update for an Issue #481 2013-07-29 18:25:27 +02:00
Miroslav Stampar
df5a6beb6e Queries for Issue #481 2013-07-27 11:11:11 +02:00
stamparm
dbb0d7f700 Important fix (Issue #489) - we had a bad presumption than only public schema could be used for enumeration (while all schemas inside a current db could be used) 2013-07-19 13:24:35 +02:00
stamparm
27bf37e741 Updating to higher levels for HSQLDB specific payloads (like for e.g. Firebird) 2013-07-04 15:41:08 +02:00
stamparm
f97b35dcc1 Patch for an Issue #475 2013-07-01 13:43:38 +02:00
Bernardo Damele
9a8bec760f added fingerprint for HSQLDB based on Tomcat stacktrace message 2013-07-01 12:17:52 +01:00
stamparm
925098686d Minor fix 2013-07-01 13:05:57 +02:00
stamparm
e3124b9176 Replacing tabs with spaces (Issue #475) 2013-07-01 12:56:34 +02:00
Bernardo Damele
2ca5df2802 minor fix 2013-07-01 11:31:28 +01:00
stamparm
b5e644694a Minor cleanup 2013-07-01 12:05:02 +02:00
Miroslav Stampar
aeb83ba651 Merge pull request #475 from Meatballs1/hsql_clean
HSQL Payloads and Query Support
2013-07-01 02:38:04 -07:00
Meatballs
604694c0e5 Cleanup queries.xml 2013-06-24 23:22:52 +01:00
Meatballs
55a37183d4 Cleanup payloads file 2013-06-24 15:04:52 +01:00
Meatballs
355d3f86be hsql payloads and queries xml 2013-06-24 14:34:54 +01:00
Miroslav Stampar
4336a8fa7c Fix for overnight (previously removed : from prefix/suffix was important for XMLType payload) 2013-06-24 14:18:42 +02:00
Miroslav Stampar
fca6772df6 Implementation for an Issue #468 2013-06-22 00:13:46 +02:00
stamparm
20b8186fcc Fix for an Issue #467 2013-06-19 10:41:58 +02:00
Miroslav Stampar
ad07add549 Fixing MySQL/stacked payloads (also removing stacked conditional-error version as it's syntatically incorrect) 2013-06-05 14:32:06 +02:00
stamparm
f456b5a28d Bug fix (this payload was also doable on MySQL - with CAST it's strictly being bound to Oracle only) 2013-05-29 17:41:42 +02:00
Miroslav Stampar
19b87074c6 Minor fix 2013-05-22 23:30:33 +04:00
Miroslav Stampar
d34286fe44 Temporary disabling 2013-05-12 13:45:32 +02:00
Miroslav Stampar
427d88b194 Minor overnight fix 2013-05-04 11:39:23 +02:00
stamparm
ff62b0d3ea Replacing a substring query for PgSQL with a non-comma version (there are no compatibility issues while skipping problems with possible comma filtering) 2013-04-25 10:14:03 +02:00
stamparm
9c264e6426 Revert back of SQLite3 time-based payload as of regression test failing 2013-04-10 11:10:19 +02:00
stamparm
acc650d3dc Minor fine tuning 2013-04-03 15:14:25 +02:00
stamparm
125168c515 Reverting back to 8002531b63 (that last 76dcbbda0f resulted in 'too big blob') 2013-04-03 14:38:13 +02:00
stamparm
76dcbbda0f Reverting last commit and making heavy query on SQLite heavier 2013-04-03 14:23:28 +02:00
stamparm
8002531b63 Heavy queries should not have --time-sec set to some small value in live tests as their responses are machine dependent (on fast machines --time-sec=2 will result in fast responses making sqlmap life harder) 2013-04-03 14:17:13 +02:00
stamparm
64ba88096f Adding a new test case (Issue #423) 2013-03-21 12:13:13 +01:00
Bernardo Damele
30cf933445 added one more test case 2013-03-05 18:21:45 +00:00
stamparm
46b9a602ba Minor style update (because of consistency with other payloads; also, Oracle is uppercase oriented) 2013-03-01 12:43:08 +01:00
Miroslav Stampar
f593e1d30f Reverting last commit as there is bunch of similar 2013-02-20 17:35:36 +01:00
stamparm
e2b7384921 Adding a new test case (--sql-query) 2013-02-20 14:10:39 +01:00
Miroslav Stampar
6c8e8e2a0f Minor fix 2013-02-18 15:23:55 +01:00
Miroslav Stampar
75a9404cb5 Bug fix (unenclosed 'SELECT * FROM user' returns result for a system function user <- previous results were illegal) 2013-02-18 14:15:48 +01:00
Bernardo Damele
5abca52924 added one more test case 2013-02-15 17:11:40 +00:00
Miroslav Stampar
b3b3899dab Fix for an Issue #273 (must for MsSQL 2000; works on MsSQL > 2000) 2013-02-14 10:08:29 +01:00
Miroslav Stampar
3483fd4347 MAX not supported by MSSQL < 2005 2013-02-13 18:33:28 +01:00
Bernardo Damele
1384b8794f add parsed error messages to console_output for better debugging of failed regression test cases 2013-02-12 13:48:11 +00:00
Bernardo Damele
70230f3513 minor fix 2013-02-12 09:28:15 +00:00
Bernardo Damele
c8d1020a13 re-enabled brute-force test cases 2013-02-07 14:19:58 +00:00