Bernardo Damele
|
02b333e30b
|
Minor improvement
|
2011-01-15 23:54:03 +00:00 |
|
Miroslav Stampar
|
1fa8f0cba7
|
code reviewing part 2
|
2011-01-15 12:53:40 +00:00 |
|
Bernardo Damele
|
2d9b151883
|
Minor bug fix
|
2011-01-15 10:14:05 +00:00 |
|
Bernardo Damele
|
e4e9b11b79
|
Minor code refactoring and adjustments - kb.dbms is needed in fingerprint.py, not getIdentifiedDBMS because when checkDbms() method is called, it's within the fingerprint phase and at that stage, getIdentifiedDBMS() would always return kb.misc.fpDbms.
|
2011-01-14 12:47:07 +00:00 |
|
Bernardo Damele
|
3c95d71ea5
|
Minor bug fix - restored of so called kb.misc.testedDbms (now kb.misc.fpDbms) to force the DBMS (only) during the fingerprint phase
|
2011-01-14 11:55:20 +00:00 |
|
Bernardo Damele
|
2ac8debea0
|
Major code refactoring - moved to one location only (getIdentifiedDBMS() in common.py) the retrieval of identified/fingerprinted DBMS.
Minor bug fixes thanks to previous refactoring too.
|
2011-01-13 17:36:54 +00:00 |
|
Bernardo Damele
|
8a67aea754
|
One more step to fully working UNION exploitation after merge into detection phase
|
2011-01-12 01:13:32 +00:00 |
|
Miroslav Stampar
|
0eabca9fd4
|
update for a previous update (putting conf.dataEncoding in getUnicode wherever we know that data won't be 'touched' or 'used' in anyway related to the current web page - if not sure, just leave it as it is)
|
2011-01-03 22:31:29 +00:00 |
|
Miroslav Stampar
|
8e1927fe31
|
minor fix
|
2011-01-02 18:12:18 +00:00 |
|
Miroslav Stampar
|
5f9b6b2254
|
code refactoring
|
2011-01-02 16:51:21 +00:00 |
|
Miroslav Stampar
|
73e8a10527
|
minor fix
|
2011-01-02 09:12:20 +00:00 |
|
Miroslav Stampar
|
26b06bfcfb
|
update (http://dev.mysql.com/doc/refman/5.0/en/server-system-variables.html)
|
2011-01-01 19:38:51 +00:00 |
|
Miroslav Stampar
|
076560f59f
|
bug fix
|
2010-12-31 12:58:27 +00:00 |
|
Miroslav Stampar
|
5db8ebbfa9
|
update of mysql comment versions
|
2010-12-31 12:42:12 +00:00 |
|
Miroslav Stampar
|
40e3489099
|
minor update
|
2010-12-31 12:27:57 +00:00 |
|
Miroslav Stampar
|
ce19b0c431
|
optimization of comment checking in MySQL
|
2010-12-31 12:21:02 +00:00 |
|
Miroslav Stampar
|
42e7b1b3a7
|
bug fix
|
2010-12-30 22:40:37 +00:00 |
|
Miroslav Stampar
|
20e3a6d72f
|
fix/refactor/cosmetics (references: http://www.postgresql.org/docs/6.4/static/release.htm,http://www.postgresql.org/docs/8.2/static/functions-datetime.html#FUNCTIONS-DATETIME-TABLE,http://www.postgresql.org/docs/8.3/static/release-8-3.html)
|
2010-12-30 21:53:34 +00:00 |
|
Miroslav Stampar
|
7f4acaf6f9
|
now comment injection fingerprint works with all techniques
|
2010-12-30 21:24:26 +00:00 |
|
Miroslav Stampar
|
9853c1ec7f
|
fix for a bug reported by alessio.dallapiazza@gmail.com (AttributeError: users)
|
2010-12-25 09:13:57 +00:00 |
|
Miroslav Stampar
|
2c23a59ba5
|
fix for one of those more complex bugs (comparison was returning None while original page and/or page template were already had already DBMS error inside)
|
2010-12-24 12:13:48 +00:00 |
|
Miroslav Stampar
|
7c06dbffc3
|
bug fix (AttributeError: 'unicode' object has no attribute 'sort')
|
2010-12-22 18:55:50 +00:00 |
|
Miroslav Stampar
|
5d25da5135
|
better way to handle this one
|
2010-12-22 00:51:20 +00:00 |
|
Miroslav Stampar
|
306501363c
|
fuck, sorry, 0 was OK (STRCMP() returns 0 if the strings are the same)
|
2010-12-22 00:41:38 +00:00 |
|
Miroslav Stampar
|
d6e6afd6f2
|
minor fix ("To clarify a bit: STRCMP() is case-insensitive as of MySQL 4.0." - http://bugs.mysql.com/bug.php?id=2102)
|
2010-12-22 00:38:54 +00:00 |
|
Miroslav Stampar
|
6f2ce15478
|
minor refactoring
|
2010-12-22 00:27:21 +00:00 |
|
Miroslav Stampar
|
cb61401c18
|
bug fix (http://dev.mysql.com/doc/refman/5.0/es/news-5-0-11.html - "Added support of where clause for queries with FROM DUAL")
|
2010-12-22 00:20:56 +00:00 |
|
Miroslav Stampar
|
f905adb7c1
|
way better as there is no official release version for FOUND_ROWS() (it appears somewhere in alphas/betas of 4.0.x - i've stumbled upon one site with 4.0.22 and it didn't recognized FOUND_ROWS).
|
2010-12-21 22:18:27 +00:00 |
|
Bernardo Damele
|
1a3f57e5fe
|
Cosmetics
|
2010-12-21 09:23:00 +00:00 |
|
Miroslav Stampar
|
03b275ce33
|
update
|
2010-12-20 23:27:04 +00:00 |
|
Miroslav Stampar
|
518b3e094c
|
bug fix (http://dev.mysql.com/doc/refman/5.0/en/information-functions.html#function_found-rows)
|
2010-12-20 23:00:03 +00:00 |
|
Miroslav Stampar
|
8fd3e7ba1f
|
thread based data added
|
2010-12-20 22:45:01 +00:00 |
|
Miroslav Stampar
|
364bc8e7d4
|
minor update
|
2010-12-20 11:25:18 +00:00 |
|
Miroslav Stampar
|
28da1141cf
|
some fixes (for MySQL < 4.0)
|
2010-12-20 11:23:57 +00:00 |
|
Miroslav Stampar
|
76024c455f
|
minor fix (using older commands for basic MySQL check)
|
2010-12-20 11:15:43 +00:00 |
|
Miroslav Stampar
|
36862e2efa
|
update
|
2010-12-18 15:57:47 +00:00 |
|
Miroslav Stampar
|
71cf0bd2a5
|
minor update
|
2010-12-18 13:08:37 +00:00 |
|
Miroslav Stampar
|
108a96c6b4
|
some fixes
|
2010-12-17 21:45:20 +00:00 |
|
Miroslav Stampar
|
a19cb2c13a
|
code refactoring (added UNKNOWN_DBMS_VERSION instead of "Unknown")
|
2010-12-17 21:29:09 +00:00 |
|
Miroslav Stampar
|
b4450c6ddd
|
added one more level of MSSQL version check (if first fails for some reason)
|
2010-12-17 21:01:14 +00:00 |
|
Miroslav Stampar
|
3ee44584d4
|
i've found a way! thank you hesus! fyea (ASC(MID) was just crashing when MID returned 'empty string')
|
2010-12-14 12:57:59 +00:00 |
|
Miroslav Stampar
|
4c6e902471
|
removed obsolete comment
|
2010-12-14 07:49:30 +00:00 |
|
Bernardo Damele
|
a02dd6b55b
|
Minor enhancement to speedup active dbms fingerprint (-f).
Code cleanup and refactoring.
|
2010-12-13 21:33:42 +00:00 |
|
Miroslav Stampar
|
e98d9c08e1
|
dumping table is now possible on Firebird too
|
2010-12-12 14:38:07 +00:00 |
|
Miroslav Stampar
|
f9bc6fc78f
|
minor fix
|
2010-12-11 22:14:35 +00:00 |
|
Miroslav Stampar
|
c93634b6c7
|
blind dumping of tables in sqlite implemented
|
2010-12-11 22:13:19 +00:00 |
|
Miroslav Stampar
|
e6c66fa37c
|
update regarding expectingNone in fingerprinting mode to cancel drop down to other techniques available
|
2010-12-11 17:55:28 +00:00 |
|
Miroslav Stampar
|
1beb1dd2cc
|
minor update
|
2010-12-11 09:30:38 +00:00 |
|
Miroslav Stampar
|
435f48b8cc
|
polite cosmetics
|
2010-12-10 15:28:56 +00:00 |
|
Bernardo Damele
|
7c87ad4065
|
Minor speedup in -f mysql
|
2010-12-10 13:05:46 +00:00 |
|