1199 Commits

Author	SHA1	Message	Date
Miroslav Stampar	aab14fa2d3	minor refactoring/cosmetics	2010-12-24 11:06:57 +00:00
Miroslav Stampar	23dc408901	prioritization of tests based on DBMS error messages and some comments in common.py	2010-12-24 10:55:41 +00:00
Miroslav Stampar	a09716a701	minor update	2010-12-24 10:07:56 +00:00
Miroslav Stampar	d9f08e4aa3	randomization of user agents	2010-12-24 10:04:27 +00:00
Miroslav Stampar	d5eebb1cbf	fix for a fundamentally bad presumtion (ratio should be > 0.6 in stable pages), especially today when we have stuff like where=2; also, just imagine 500s which could just say something like FALSE, while on ratio level it would be far below 0.6	2010-12-24 09:49:19 +00:00
Miroslav Stampar	cb17e61f35	bug fix (UnicodeDecodeError: 'ascii' codec can't decode byte 0xa9 in position 959)	2010-12-24 02:54:26 +00:00
Miroslav Stampar	8470de7b76	bug fix for boolean proxy when using time based payloads	2010-12-23 23:46:08 +00:00
Miroslav Stampar	7f7fb93155	cosmetics	2010-12-23 18:44:18 +00:00
Miroslav Stampar	017ea9e686	update	2010-12-23 14:06:22 +00:00
Miroslav Stampar	73f33c1999	bug fix of re-introduced bug (in multiple target mode sites with similar URI weren't skipped)	2010-12-23 11:28:13 +00:00
Miroslav Stampar	8fc60215ed	lol. this was a pesky bug. heuristic wasn't working on one mssql test site and i couldn't find why. at end the problem was that when the HTTP code was raised (like 500) no parseResponse was called.	2010-12-22 19:12:46 +00:00
Miroslav Stampar	7c06dbffc3	bug fix (AttributeError: 'unicode' object has no attribute 'sort')	2010-12-22 18:55:50 +00:00
Bernardo Damele	c1f2534e9a	More bug fixes to properly distinguish between full inband and single-entry inband sql injections	2010-12-22 15:47:52 +00:00
Bernardo Damele	250608660d	Minor bug fix to always show HTTP request and response when verbose is set accordingly to 4, 5 or 6 regardless of the HTTP response code (error or not)	2010-12-22 13:41:36 +00:00
Bernardo Damele	5228f336da	Minor fix for ctrl+c during detection phase	2010-12-22 13:15:44 +00:00
Miroslav Stampar	08c88495d0	removed that ugly hack	2010-12-22 13:09:04 +00:00
Miroslav Stampar	8212b7b745	bug fix	2010-12-22 12:16:04 +00:00
Miroslav Stampar	5be9c04e44	update regarding Sybase syntax	2010-12-22 10:39:56 +00:00
Miroslav Stampar	d974a966b8	minor fix for end phase (Ctrl+C)	2010-12-21 23:55:55 +00:00
Miroslav Stampar	fb75d0636b	minor update	2010-12-21 23:42:59 +00:00
Miroslav Stampar	39a13077c4	minor bug fix	2010-12-21 23:09:41 +00:00
Miroslav Stampar	09479c85dc	minor bug fix	2010-12-21 22:35:44 +00:00
Miroslav Stampar	7a525f28d4	cosmetics	2010-12-21 15:26:23 +00:00
Miroslav Stampar	b2e7f9484d	minor tuning (2 techniques MAX per value used)	2010-12-21 15:24:14 +00:00
Miroslav Stampar	6c1133c4d4	some code refactoring	2010-12-21 15:13:13 +00:00
Miroslav Stampar	466d61ee85	minor fix	2010-12-21 14:29:47 +00:00
Miroslav Stampar	385e208f38	code refactoring regarding standard output suppression and some threading issues	2010-12-21 14:21:24 +00:00
Miroslav Stampar	0e68248f60	minor update of heuristic check	2010-12-21 12:56:18 +00:00
Miroslav Stampar	16f1f4e13e	when doing dynamic checks there are cases when 404 can be raised (perfectly normal)	2010-12-21 11:04:49 +00:00
Bernardo Damele	aca074b769	Removed unused outdated code	2010-12-21 10:49:52 +00:00
Bernardo Damele	ad6b528b33	Bit more verbose comment	2010-12-21 10:47:39 +00:00
Miroslav Stampar	6b37ddada4	removed some blank trailing spaces (with extra/shutils/blanks.sh)	2010-12-21 10:31:56 +00:00
Bernardo Damele	1a3f57e5fe	Cosmetics	2010-12-21 09:23:00 +00:00
Miroslav Stampar	d554460aec	minor fix	2010-12-21 01:09:39 +00:00
Miroslav Stampar	116c141dfa	another fix	2010-12-21 00:47:07 +00:00
Miroslav Stampar	416755c0b7	minor adjustments	2010-12-21 00:25:03 +00:00
Miroslav Stampar	8067365b93	fix for a bug reported by m4l1c3 (AttributeError: '_MainThread' object has no attribute 'ident')	2010-12-20 23:47:53 +00:00
Miroslav Stampar	e10670d9ac	added end detection phase choice into Ctrl+C list	2010-12-20 23:34:00 +00:00
Miroslav Stampar	29001a4fce	minor update	2010-12-20 23:21:01 +00:00
Miroslav Stampar	b34fe5c334	no more need for such a huge timeout because any timeout exceptions will now be considered as a successful time-based attack (previously we wanted to get back to the program, hence there was such a huge timeout)	2010-12-20 22:49:48 +00:00
Miroslav Stampar	8fd3e7ba1f	thread based data added	2010-12-20 22:45:01 +00:00
Miroslav Stampar	c9e8aae8a2	we'll need to do some cleanup around threading data model we use (some of the data we currently use we'll need to spread via copies around used threads)	2010-12-20 19:34:41 +00:00
Miroslav Stampar	e09bc2406c	minor refactoring	2010-12-20 19:24:20 +00:00
Miroslav Stampar	5852bad963	some refactoring	2010-12-20 18:56:06 +00:00
Miroslav Stampar	19d8733e9a	this is strictly for educational purposes	2010-12-20 17:30:47 +00:00
Miroslav Stampar	c948bced61	should solve the problem with timeout problems in time-based payloads	2010-12-20 16:45:41 +00:00
Miroslav Stampar	eaf8929085	more minor updates	2010-12-20 10:48:53 +00:00
Miroslav Stampar	fd00ff7a82	minor bug fix	2010-12-20 10:37:03 +00:00
Miroslav Stampar	e9f1ecb9e7	minor update	2010-12-20 10:32:58 +00:00
Miroslav Stampar	10a7a2dfb2	kids, don't use this at home	2010-12-20 10:13:14 +00:00