675 Commits

Author	SHA1	Message	Date
Bernardo Damele	f848f259a6	upper() -D value for certain DBMSes	2013-01-23 16:22:28 +00:00
Bernardo Damele	012815333c	minor bug fix to ignore provided -D when brute-forcing columns/tables names and the DBMS is either Access, Firebird or SQLite	2013-01-23 15:52:03 +00:00
Miroslav Stampar	d6a361f859	Proper implementation for --technique=Q --dbms=Firebird	2013-01-22 16:31:26 +01:00
Miroslav Stampar	59b02539ca	More general approach regarding that last commit	2013-01-22 11:34:34 +01:00
Miroslav Stampar	75bf8528d1	Minor just in case update	2013-01-21 14:50:43 +01:00
Miroslav Stampar	069c6acabd	Another update for an Issue #362	2013-01-20 22:47:26 +01:00
Miroslav Stampar	b4a55a809e	Refactoring DBMS string escaping functions	2013-01-20 13:45:58 +01:00
Bernardo Damele	c95119559e	minor bug fix	2013-01-19 00:41:51 +00:00
Bernardo Damele	0e78fbef56	correctly format SQLi payload for inline query technique	2013-01-19 00:28:03 +00:00
Miroslav Stampar	601eb1e49a	Unescaping is renamed to escaping	2013-01-18 15:40:37 +01:00
Bernardo Damele	a43202f3c0	updated copyright	2013-01-18 14:07:51 +00:00
Miroslav Stampar	04aa39f0c6	Minor update	2013-01-15 13:51:19 +01:00
Miroslav Stampar	a5a309212a	Fix for an Issue #339	2013-01-14 16:18:03 +01:00
Miroslav Stampar	4b79269608	Minor bug fix	2013-01-11 11:10:18 +01:00
Miroslav Stampar	ec4e49d771	Minor refactoring	2013-01-10 16:09:28 +01:00
Miroslav Stampar	ca3d35a878	Some PEP8 related style cleaning	2013-01-10 13:18:44 +01:00
Miroslav Stampar	ca1c0c2a1d	Minor style update	2013-01-10 11:54:07 +01:00
Miroslav Stampar	bf5544903b	Minor style update	2013-01-09 16:10:26 +01:00
Miroslav Stampar	25f01a419f	Minor style update (for the sake of consistency over the code and our PEP8 adaptation)	2013-01-09 15:38:41 +01:00
Bernardo Damele	c155c6df84	minor bug fix for user's provided LIMIT'd statement when technique is full UNION SQLi	2013-01-07 23:31:11 +00:00
Miroslav Stampar	3abe87ac89	Minor fix with status update (Issue #305)	2013-01-07 18:53:08 +01:00
Miroslav Stampar	a8f02916a9	Minor fix (Issue #305)	2013-01-07 18:39:35 +01:00
Miroslav Stampar	e219fad8bf	Added a short comment	2013-01-07 18:19:48 +01:00
Miroslav Stampar	76839ff9d6	Fix for an Issue #305	2013-01-07 12:52:55 +01:00
Miroslav Stampar	dc21f3ce67	Minor just in case filtering of union results	2013-01-04 17:09:07 +01:00
Miroslav Stampar	e4a3c015e5	Replacing old and deprecated raise Exception style (PEP8)	2013-01-03 23:20:55 +01:00
Miroslav Stampar	75edb84a71	Minor update	2012-12-30 11:10:32 +01:00
Miroslav Stampar	58ad2f1c5d	Revert of last commit and proper fix	2012-12-29 10:35:05 +01:00
Miroslav Stampar	0e18fa9c5f	Minor fix	2012-12-28 23:43:47 +01:00
Miroslav Stampar	77625e5af7	Minor revert	2012-12-21 19:31:05 +01:00
Miroslav Stampar	8b3e17ed4d	Minor update (better approach for those old NOT IN cases in MsSQL - instead of standard pivot dump table)	2012-12-21 14:52:47 +01:00
Miroslav Stampar	0d5d84edc7	Minor cleanup	2012-12-20 21:03:41 +01:00
Miroslav Stampar	712cf4e4db	Fix for an Issue #316	2012-12-20 20:55:59 +01:00
Miroslav Stampar	c2c4601d6e	Minor restyling	2012-12-20 11:06:52 +01:00
Bernardo Damele	282aeb734f	ORDER BY does not play well with UNION query SQLi (related to issue #313)	2012-12-19 13:21:16 +00:00
Bernardo Damele	259b345f1f	catch ImportError exception if libmagic is not installed	2012-12-19 13:10:54 +00:00
Bernardo Damele	9149d77cc8	removed duplicate code - fixes issue #310	2012-12-19 12:17:56 +00:00
Bernardo Damele	d80744d3d5	preparation for issue #310	2012-12-19 11:40:00 +00:00
Bernardo Damele	dee56b17c3	handle "LIMIT num" as well as "LIMIT num, num" across all techniques - fixes issue #308	2012-12-19 10:50:15 +00:00
Miroslav Stampar	92e338251a	Finally working inference against MySQL/international letters (even chinese)	2012-12-19 10:44:02 +01:00
Bernardo Damele	8e95470415	minor refactoring	2012-12-19 00:46:23 +00:00
Miroslav Stampar	88d8494b5a	Implementation for an Issue #307	2012-12-18 16:03:35 +01:00
Miroslav Stampar	7f47623876	Minor patch	2012-12-18 11:10:06 +01:00
Bernardo Damele	1fdd804e94	replaced instances of dataToStdout with logger	2012-12-17 13:30:21 +00:00
Bernardo Damele	064d443d60	replaced unnecessary dataToStdout() call with appropriate logger.info() call	2012-12-17 11:30:08 +00:00
Miroslav Stampar	562044577b	Implementation for an Issue #292	2012-12-11 12:02:06 +01:00
Miroslav Stampar	996e882e78	Minor update	2012-12-10 17:13:00 +01:00
Miroslav Stampar	974407396e	Doing some more style updating (capitalization of exception classes; using _ is enough for private members - __ is used in Python specific methods)	2012-12-06 14:14:19 +01:00
Miroslav Stampar	ab67344448	Removed unused imports and variables (pyflake-ing)	2012-12-06 11:15:05 +01:00
Miroslav Stampar	775e0df04b	Update for an Issue #278	2012-12-05 10:45:17 +01:00