Miroslav Stampar
|
70f6eab715
|
minor update
|
2010-11-02 12:08:28 +00:00 |
|
Miroslav Stampar
|
685a8e7d2c
|
refactoring of hard coded dbms names
|
2010-11-02 11:59:24 +00:00 |
|
Miroslav Stampar
|
5269cb8c08
|
some code refactoring and beautification
|
2010-11-02 09:06:38 +00:00 |
|
Miroslav Stampar
|
13e93f564a
|
one bug fix in dynamic content engine and some code refactoring
|
2010-11-02 07:32:08 +00:00 |
|
Miroslav Stampar
|
73b33ed765
|
fix for a bug reported by Ulisses Castro (Too many open files) - also, added an important caching mechanism with thread safe logic
|
2010-11-01 20:56:13 +00:00 |
|
Bernardo Damele
|
f3cc41601c
|
Added check on --first and --last values
|
2010-10-31 14:42:13 +00:00 |
|
Bernardo Damele
|
0ffffef088
|
Implemented --tamper for direct connection too (-d)
|
2010-10-31 14:22:32 +00:00 |
|
Bernardo Damele
|
c7b374534b
|
Minor cosmetics
|
2010-10-31 12:29:00 +00:00 |
|
Bernardo Damele
|
617edf7fc2
|
Minor bug fix
|
2010-10-31 12:24:19 +00:00 |
|
Bernardo Damele
|
fcada4df0f
|
Removed debug print
|
2010-10-31 12:21:22 +00:00 |
|
Bernardo Damele
|
2a2f949275
|
Minor bug fix
|
2010-10-31 12:20:38 +00:00 |
|
Bernardo Damele
|
264247d318
|
revert of a stupid commit
|
2010-10-31 12:09:55 +00:00 |
|
Bernardo Damele
|
2fb059a644
|
Bug fix
|
2010-10-31 12:02:20 +00:00 |
|
Bernardo Damele
|
9d08cb3a6f
|
Revert r2209 and minor code refactoring
|
2010-10-31 11:51:45 +00:00 |
|
Bernardo Damele
|
3869ccebe8
|
Minor code refactoring
|
2010-10-31 11:17:51 +00:00 |
|
Bernardo Damele
|
6afc9bffaa
|
Minor bug fix: there will always be only one pair of delimiters as we add it for each place
|
2010-10-31 11:09:29 +00:00 |
|
Miroslav Stampar
|
0125198210
|
minor fix
|
2010-10-29 21:19:28 +00:00 |
|
Miroslav Stampar
|
5a38ac7ea9
|
important update regarding (Bug #209) - probably more will be needed
|
2010-10-29 16:11:50 +00:00 |
|
Bernardo Damele
|
b3b2c3864a
|
Minor code refactoring
|
2010-10-29 10:51:09 +00:00 |
|
Miroslav Stampar
|
d75578c81f
|
some update regarding common tables
|
2010-10-29 09:00:51 +00:00 |
|
Bernardo Damele
|
43de8247ac
|
Code refactoring
|
2010-10-27 20:39:50 +00:00 |
|
Bernardo Damele
|
d554ffc0ae
|
yes, I am quite paranoid with cosmetics
|
2010-10-27 10:37:54 +00:00 |
|
Miroslav Stampar
|
8803096343
|
some update regarding beep()
|
2010-10-26 08:32:58 +00:00 |
|
Miroslav Stampar
|
b9ff91b6e9
|
update of beep
|
2010-10-26 06:30:27 +00:00 |
|
Miroslav Stampar
|
9ec9d223e1
|
minor
|
2010-10-26 06:08:40 +00:00 |
|
Bernardo Damele
|
f5904d0bc0
|
Major bug fix to --union-test
|
2010-10-25 23:39:55 +00:00 |
|
Bernardo Damele
|
7effd0c301
|
Cosmetics
|
2010-10-25 22:54:56 +00:00 |
|
Miroslav Stampar
|
73eea81b3a
|
minor cosmetics
|
2010-10-25 19:45:53 +00:00 |
|
Miroslav Stampar
|
d7bf94d4d6
|
fix for --beep
|
2010-10-25 19:16:42 +00:00 |
|
Miroslav Stampar
|
228ac0cde5
|
refactoring regarding --check-payload
|
2010-10-25 18:38:54 +00:00 |
|
Bernardo Damele
|
7c343c2d67
|
Forgot
|
2010-10-25 16:34:43 +00:00 |
|
Bernardo Damele
|
215175e3b7
|
Minor code adjustments
|
2010-10-25 14:11:47 +00:00 |
|
Miroslav Stampar
|
24c5d7b313
|
code refactoring
|
2010-10-25 14:06:56 +00:00 |
|
Miroslav Stampar
|
9c94a233a1
|
conf.md5hash thrown out
|
2010-10-25 13:52:21 +00:00 |
|
Miroslav Stampar
|
9a3879feba
|
keeping things neat and tidy
|
2010-10-25 12:33:49 +00:00 |
|
Miroslav Stampar
|
71543092b7
|
update regarding comparison engine
|
2010-10-25 12:00:59 +00:00 |
|
Miroslav Stampar
|
8df7c88174
|
implementation of a new dynamic content removal engine
|
2010-10-25 10:41:37 +00:00 |
|
Miroslav Stampar
|
2194d47782
|
setting conf.threads when -o switch is used
|
2010-10-22 19:10:45 +00:00 |
|
Bernardo Damele
|
1288def3b7
|
Cosmetics
|
2010-10-22 14:23:14 +00:00 |
|
Miroslav Stampar
|
a9b50a1e82
|
minor fix
|
2010-10-21 23:09:57 +00:00 |
|
Miroslav Stampar
|
bc79eec702
|
removed queriesfile.py, implemented XMLObject approach (still shell.py and udf.py TODO)
|
2010-10-21 13:13:12 +00:00 |
|
Miroslav Stampar
|
be443c6947
|
refactoring regarding __START__,...
|
2010-10-21 09:51:07 +00:00 |
|
Bernardo Damele
|
d8bfa76dca
|
Minor possible bug fix
|
2010-10-20 22:12:53 +00:00 |
|
Bernardo Damele
|
e73e06069b
|
Minor code refactoring
|
2010-10-20 22:09:03 +00:00 |
|
Bernardo Damele
|
3b5c5cc457
|
Minor possible bug fix
|
2010-10-20 21:49:05 +00:00 |
|
Bernardo Damele
|
f95098693f
|
Removed unused functions
|
2010-10-20 21:16:28 +00:00 |
|
Miroslav Stampar
|
e24bff0497
|
nice refactoring
|
2010-10-20 09:46:57 +00:00 |
|
Miroslav Stampar
|
5d3cbec457
|
no more regex. web server independent.
|
2010-10-20 09:35:46 +00:00 |
|
Bernardo Damele
|
0817d1b78d
|
Cosmetics
|
2010-10-19 23:09:30 +00:00 |
|
Miroslav Stampar
|
8776db872c
|
minor refactoring
|
2010-10-19 23:05:24 +00:00 |
|
Miroslav Stampar
|
1b376c99a6
|
removed temp dictionary and replaced with kb.misc
|
2010-10-19 23:00:19 +00:00 |
|
Bernardo Damele
|
813f44da16
|
Minor bug fix for MSSQL connector --tables option
|
2010-10-19 22:11:17 +00:00 |
|
Miroslav Stampar
|
8d9201a3dc
|
minor update
|
2010-10-19 18:23:21 +00:00 |
|
Miroslav Stampar
|
4009ef385e
|
more update regarding error based injection support
|
2010-10-19 18:17:34 +00:00 |
|
Miroslav Stampar
|
ccda92536f
|
added header
|
2010-10-19 09:13:30 +00:00 |
|
Miroslav Stampar
|
264e0a6fda
|
added support for displaying revision number at unhandled exception message
|
2010-10-19 08:55:14 +00:00 |
|
Miroslav Stampar
|
729156e91c
|
proper fix
|
2010-10-18 21:39:46 +00:00 |
|
Miroslav Stampar
|
3d5494845c
|
minor bug fix
|
2010-10-18 21:32:50 +00:00 |
|
Bernardo Damele
|
1d74036ee3
|
Minor cosmetic fixes
|
2010-10-18 11:34:53 +00:00 |
|
Miroslav Stampar
|
6b70dadfb2
|
minor cosmetics
|
2010-10-18 09:09:22 +00:00 |
|
Miroslav Stampar
|
149837ebf5
|
added the same for proxy authorization header
|
2010-10-18 09:02:56 +00:00 |
|
Miroslav Stampar
|
aaebb4336e
|
fix for Bug #202
|
2010-10-18 08:54:08 +00:00 |
|
Bernardo Damele
|
64b9f94fcf
|
Renamed --common-prediction switch to --predict-output
|
2010-10-16 23:50:13 +00:00 |
|
Bernardo Damele
|
6211915da5
|
Cosmetic fix
|
2010-10-16 22:31:16 +00:00 |
|
Bernardo Damele
|
7b71262de6
|
Cosmetic fix
|
2010-10-16 22:07:29 +00:00 |
|
Bernardo Damele
|
a2997a6dce
|
Minor bug fix to --tamper
|
2010-10-16 21:55:34 +00:00 |
|
Bernardo Damele
|
2129935e06
|
Split character for tamper scripts (--tamper option) is now comma, not semi-colon.
Minor enhancement
|
2010-10-16 21:52:16 +00:00 |
|
Bernardo Damele
|
2dae934a2b
|
Minor bug fixes, code refactoring and enhanced --tamper functionality
|
2010-10-16 21:33:15 +00:00 |
|
Bernardo Damele
|
84ed7f192a
|
Cosmetic fixes
|
2010-10-16 15:10:48 +00:00 |
|
Miroslav Stampar
|
1336b97c2c
|
removed --useBetween switch and added new tampering module ./tamper/between.py
|
2010-10-15 23:48:07 +00:00 |
|
Bernardo Damele
|
e7c8be1d45
|
Minor layout adjustments
|
2010-10-15 15:37:15 +00:00 |
|
Miroslav Stampar
|
c9f0c75030
|
removed --space (usage of tampering modules is now a prefered way to do it)
|
2010-10-15 12:52:33 +00:00 |
|
Miroslav Stampar
|
d0514d18ec
|
removed that spaces from URI payloads
|
2010-10-15 12:49:03 +00:00 |
|
Miroslav Stampar
|
2fa8836c01
|
bug fix
|
2010-10-15 11:14:59 +00:00 |
|
Miroslav Stampar
|
d50684a057
|
added one more check
|
2010-10-15 11:05:50 +00:00 |
|
Miroslav Stampar
|
2b476e078c
|
minor cosmetics
|
2010-10-15 10:36:29 +00:00 |
|
Bernardo Damele
|
a80f6110cd
|
don't call variables 'file', it's a reserved word :)
|
2010-10-15 10:29:24 +00:00 |
|
Bernardo Damele
|
9fcab68700
|
Minor adjustments
|
2010-10-15 10:28:06 +00:00 |
|
Miroslav Stampar
|
207bef7f19
|
fix for that SQLite3 vs SQLite2 issue
|
2010-10-15 09:39:41 +00:00 |
|
Miroslav Stampar
|
d0df8cdac9
|
fix for that duplicates
|
2010-10-15 00:34:16 +00:00 |
|
Miroslav Stampar
|
4f7f20b94f
|
sorry, cosmetics
|
2010-10-14 23:18:29 +00:00 |
|
Miroslav Stampar
|
8b48833136
|
large commit with copyright header modifications
|
2010-10-14 14:41:14 +00:00 |
|
Miroslav Stampar
|
f07608ef4d
|
show static words in a sorted manner
|
2010-10-14 12:38:06 +00:00 |
|
Miroslav Stampar
|
162d01abed
|
commit of all sorts (bug fix for heuristics and URI injections, fine tunning of tampering modules with SQL keywords,...)
|
2010-10-14 11:06:28 +00:00 |
|
Miroslav Stampar
|
7e1f784eaa
|
cosmetic update
|
2010-10-14 06:00:10 +00:00 |
|
Miroslav Stampar
|
34580f56fc
|
added --tamper option
|
2010-10-12 22:45:25 +00:00 |
|
Miroslav Stampar
|
9a08f7feb8
|
minor update
|
2010-10-12 20:01:59 +00:00 |
|
Miroslav Stampar
|
d2ec132469
|
added --text-only switch
|
2010-10-12 19:41:29 +00:00 |
|
Miroslav Stampar
|
f9f79ffbaf
|
basic stuff for sybase
|
2010-10-12 19:05:12 +00:00 |
|
Miroslav Stampar
|
9ffa928783
|
added some user interaction when page is dynamic
|
2010-10-12 15:49:04 +00:00 |
|
Miroslav Stampar
|
73b77255e3
|
minor cosmetic update
|
2010-10-12 12:32:02 +00:00 |
|
Miroslav Stampar
|
6dcd05c39c
|
minor update
|
2010-10-11 14:38:04 +00:00 |
|
Miroslav Stampar
|
43892cddbb
|
some updates
|
2010-10-11 12:26:35 +00:00 |
|
Miroslav Stampar
|
2198a60684
|
bug fix (reported by james@ev6.net)
|
2010-10-10 20:51:11 +00:00 |
|
Miroslav Stampar
|
7a5bb2b0d6
|
update
|
2010-10-10 19:50:10 +00:00 |
|
Miroslav Stampar
|
8fcad29bbf
|
new feature --forms (still unfinished)
|
2010-10-10 18:56:43 +00:00 |
|
Miroslav Stampar
|
18d27cabc5
|
more changes
|
2010-10-07 15:34:17 +00:00 |
|
Miroslav Stampar
|
440ff639bb
|
more refactoring
|
2010-10-07 14:05:34 +00:00 |
|
Miroslav Stampar
|
1e9ae40397
|
major refactoring
|
2010-10-07 12:12:26 +00:00 |
|
Miroslav Stampar
|
1bf8939e2f
|
further updates
|
2010-10-06 22:43:04 +00:00 |
|