284 Commits

Author	SHA1	Message	Date
Miroslav Stampar	2de88bd90b	minor update	2011-06-24 17:19:24 +00:00
Bernardo Damele	f8c32cf6b9	Moved folder	2011-06-18 12:34:41 +00:00
Miroslav Stampar	25b923bbc3	minor fixes and minor updates	2011-06-16 12:12:30 +00:00
Miroslav Stampar	4d51fa8155	minor update planned for a long time (in case of heuristic test was positive warn the user properly at the end if program fails)	2011-06-15 17:37:28 +00:00
Miroslav Stampar	9331abb96f	minor update	2011-06-11 08:33:36 +00:00
Bernardo Damele	d217cf71b2	Minor bug fix	2011-06-08 23:32:44 +00:00
Miroslav Stampar	d8155dfae9	change by request	2011-06-08 14:44:11 +00:00
Bernardo Damele	0d3e8a76d8	Cosmetics and a missing param	2011-06-08 14:40:42 +00:00
Miroslav Stampar	4a9640160e	more concise	2011-06-08 14:35:23 +00:00
Miroslav Stampar	1c633b7351	i am tired of pressing hundred times Ctrl+C in testing phase if --batch is specified	2011-06-07 22:14:18 +00:00
Miroslav Stampar	97d8c60c3f	better language	2011-06-03 15:58:19 +00:00
Miroslav Stampar	0a620bf322	more info to the user	2011-06-03 15:43:50 +00:00
Miroslav Stampar	8aa5625cd0	proper fix related to the last commit	2011-06-01 23:00:18 +00:00
Miroslav Stampar	fd57aae779	bug fix (until this moment we had UNION unfunctional for MSSQL)	2011-06-01 22:47:54 +00:00
Miroslav Stampar	45caadbd4a	important update - finally found what was causing headache for UNION payloads in noticeable number of cases	2011-05-26 21:54:19 +00:00
Miroslav Stampar	97bd5355dd	minor update	2011-05-26 21:18:55 +00:00
Miroslav Stampar	4f46a5ab63	minor usability enhancement regarding warning for --text-only switch	2011-05-26 20:48:18 +00:00
Miroslav Stampar	f11d5c91e3	minor update so that only one DNS request per scan is being done (before this commit there were two)	2011-05-12 14:32:39 +00:00
Miroslav Stampar	120b0d756e	unfix	2011-05-10 21:33:06 +00:00
Bernardo Damele	3a8309c4b0	Major bug fix to detect UNION query technique and various improvements to parsing and using of --union-char and --union-cols switches	2011-05-10 15:34:54 +00:00
Bernardo Damele	1151af52bb	More fix for save/resume of --technique	2011-05-07 21:08:14 +00:00
Bernardo Damele	2d8408c885	More fix for --technique resume	2011-05-05 16:38:46 +00:00
Bernardo Damele	6cff3e97f4	cosmetics	2011-05-02 21:48:08 +00:00
Miroslav Stampar	06498796b9	minor cosmetics	2011-05-02 20:51:53 +00:00
Bernardo Damele	955dbc85e7	Minor variable rename	2011-04-30 15:29:59 +00:00
Bernardo Damele	f56d135438	Minor code restyling	2011-04-30 13:20:05 +00:00
Bernardo Damele	441c288dd9	cosmeticados	2011-04-25 00:36:09 +00:00
Miroslav Stampar	304500a2e8	implemented checkFalsePositives method (simple Turing like tests)	2011-04-22 12:24:16 +00:00
Miroslav Stampar	df0331fe9b	some more refactoring	2011-04-19 23:04:10 +00:00
Miroslav Stampar	9b0db33cc5	initial page request can result in unwanted lag (e.g. slow DNS response,...), hence it's response time shouldn't be a part of response time statistical model	2011-04-19 08:55:38 +00:00
Miroslav Stampar	0387654166	update of copyright string (until year)	2011-04-15 12:33:18 +00:00
Bernardo Damele	5b21352656	cosmeticados ;)	2011-04-08 10:39:07 +00:00
Bernardo Damele	c6b9d89d31	Accept [RANDNUM] as <char> in payloads.xml and handle it accordingly	2011-04-07 11:10:35 +00:00
Bernardo Damele	05d12790f1	closes #219 - unhidden switch --technique and adapted code accordingly (renamed conf.technique to conf.tech to fit properly in the -h help message)	2011-04-06 14:41:44 +00:00
Miroslav Stampar	0916117447	improvement of error-based testing (no more sqlmap aborting on error-based payloads which happens very often on MySQL servers); also, minor improvement on brute forcing of column names	2011-03-30 18:32:10 +00:00
Miroslav Stampar	dd01d66f13	proper update regarding last commit	2011-03-29 22:10:08 +00:00
Miroslav Stampar	b5c9ccb755	Oracle XML based error payload has problems with char $ as with space	2011-03-21 13:13:12 +00:00
Miroslav Stampar	970cde5a8a	minor update regarding last commit	2011-03-17 09:23:46 +00:00
Miroslav Stampar	e64f225e65	minor refactoring	2011-03-11 20:16:34 +00:00
Miroslav Stampar	90582ed7dc	minor change	2011-02-21 11:35:21 +00:00
Miroslav Stampar	6cdf08b81c	minor fix	2011-02-17 21:51:40 +00:00
Miroslav Stampar	22cd49a217	--technique can now be something like 123 which includes both techniques 1, 2 and 3	2011-02-17 21:39:16 +00:00
Miroslav Stampar	7ebc1ab90a	minor cosmetics	2011-02-17 08:59:14 +00:00
Miroslav Stampar	5fb11fd173	update regarding multiple DBMS payloads	2011-02-13 21:20:21 +00:00
Miroslav Stampar	521635c84d	quick fix for UA and Referer	2011-02-11 23:36:23 +00:00
Miroslav Stampar	535eb9f3eb	implementation of referer feature	2011-02-11 23:07:03 +00:00
Miroslav Stampar	a6ab24e0b5	just a minor fix to stop nagging with "Do you want to skip test payloads specific for other DBMSes?" if n is pressed	2011-02-10 22:47:43 +00:00
Bernardo Damele	0a81415f2f	Minor code cleanup	2011-02-08 00:02:54 +00:00
Miroslav Stampar	2c4f6d2e99	fix (lol. we were using same comparison payload through the all test. it's a nono :) p.s. this way we are dealing with "reflective" problem too	2011-02-07 21:53:05 +00:00
Miroslav Stampar	a577d0e9a5	restraining "using unescaped version of the test because of zero knowledge of the back-end DBMS" once per test (before was once per boundary)	2011-02-07 21:18:01 +00:00