Miroslav Stampar
|
e8ac7414f2
|
bug fix
|
2011-06-20 21:36:15 +00:00 |
|
Miroslav Stampar
|
d6062e8fc9
|
minor fix for crawler and far less message overlaps in future
|
2011-06-20 21:18:12 +00:00 |
|
Miroslav Stampar
|
8968c708a0
|
minor update
|
2011-06-20 14:27:24 +00:00 |
|
Miroslav Stampar
|
17fac6f67f
|
minor update
|
2011-06-20 13:53:39 +00:00 |
|
Miroslav Stampar
|
29314f425e
|
minor fix
|
2011-06-20 13:42:31 +00:00 |
|
Miroslav Stampar
|
f09340fc89
|
minor update
|
2011-06-20 12:40:14 +00:00 |
|
Miroslav Stampar
|
4d1fa5596b
|
added support for --scope in --crawl mode
|
2011-06-20 12:37:51 +00:00 |
|
Miroslav Stampar
|
42746cc706
|
bug fix
|
2011-06-20 12:18:46 +00:00 |
|
Miroslav Stampar
|
67fab9f2e2
|
putting this to info messages (user needs to know at this place why is it waiting)
|
2011-06-20 12:17:19 +00:00 |
|
Miroslav Stampar
|
b1426b5131
|
bug fix
|
2011-06-20 12:11:09 +00:00 |
|
Miroslav Stampar
|
cda39ca350
|
minor update
|
2011-06-20 11:46:23 +00:00 |
|
Miroslav Stampar
|
07e2c72943
|
adding Beautifulsoup (BSD) into extras; adding --crawl to options
|
2011-06-20 11:32:30 +00:00 |
|
Miroslav Stampar
|
8c04aa871a
|
english typo
|
2011-06-20 11:00:23 +00:00 |
|
Miroslav Stampar
|
bdb530da1f
|
minor update
|
2011-06-19 10:11:27 +00:00 |
|
Miroslav Stampar
|
d5bc149636
|
made changes by buawig request (504 is treated as a classical timeout)
|
2011-06-19 09:57:41 +00:00 |
|
Miroslav Stampar
|
83af83da9e
|
minor beautification (WordsSet is considered as a bad english)
|
2011-06-18 15:47:19 +00:00 |
|
Bernardo Damele
|
f8c32cf6b9
|
Moved folder
|
2011-06-18 12:34:41 +00:00 |
|
Bernardo Damele
|
28ef61b997
|
Use getPageTextWordsSet() also in --common-columns
|
2011-06-18 12:30:26 +00:00 |
|
Bernardo Damele
|
6b2f44de14
|
Minor layout adjustment
|
2011-06-18 12:27:12 +00:00 |
|
Bernardo Damele
|
cd07139919
|
Layout adjustments
|
2011-06-18 11:58:14 +00:00 |
|
Miroslav Stampar
|
31ad0875b4
|
added by request
|
2011-06-18 11:34:51 +00:00 |
|
Miroslav Stampar
|
e4be141602
|
minor fix for --smoke-test
|
2011-06-18 11:26:17 +00:00 |
|
Bernardo Damele
|
c7e1aeeef2
|
layout
|
2011-06-18 11:02:48 +00:00 |
|
Miroslav Stampar
|
905fef0eae
|
now user can explicitly state number of UNION affected columns via --union-cols (e.g. --union-cols=5)
|
2011-06-18 10:51:14 +00:00 |
|
Miroslav Stampar
|
fde3e4cece
|
better
|
2011-06-18 09:52:07 +00:00 |
|
Miroslav Stampar
|
2f129b01c0
|
"Please consider to provide" is a bad English
|
2011-06-18 09:46:22 +00:00 |
|
Miroslav Stampar
|
1440c9f2d4
|
minor update
|
2011-06-17 22:28:07 +00:00 |
|
Miroslav Stampar
|
87e9842371
|
better language
|
2011-06-17 22:13:45 +00:00 |
|
Miroslav Stampar
|
ce3170edef
|
minor update/better language
|
2011-06-17 22:11:40 +00:00 |
|
Miroslav Stampar
|
ec6fa384eb
|
update
|
2011-06-17 22:04:25 +00:00 |
|
Miroslav Stampar
|
0c9fa5c550
|
fix
|
2011-06-17 17:12:47 +00:00 |
|
Miroslav Stampar
|
043f2f92c1
|
minor update
|
2011-06-17 17:10:52 +00:00 |
|
Miroslav Stampar
|
c9a6aad5c3
|
minor fix by request
|
2011-06-17 16:58:50 +00:00 |
|
Miroslav Stampar
|
a0129dcbcb
|
this is confusing for normal users (i've just get a mail where dude thinks that he needs to use tamper script because of this :)
|
2011-06-17 16:52:39 +00:00 |
|
Miroslav Stampar
|
f3ee2c09fb
|
cleaner fix
|
2011-06-17 15:32:23 +00:00 |
|
Miroslav Stampar
|
bb987ec98f
|
fix for DNS leakage
|
2011-06-17 15:23:58 +00:00 |
|
Miroslav Stampar
|
9498a3f259
|
little stabilization of multi threading
|
2011-06-17 12:50:28 +00:00 |
|
Miroslav Stampar
|
d27afaed7e
|
some fixes
|
2011-06-16 14:27:44 +00:00 |
|
Miroslav Stampar
|
6b1d5a0ab8
|
minor fix
|
2011-06-16 14:11:30 +00:00 |
|
Miroslav Stampar
|
530c296519
|
minor fix
|
2011-06-16 13:56:17 +00:00 |
|
Miroslav Stampar
|
0eeb48f8f5
|
some fixes
|
2011-06-16 13:41:02 +00:00 |
|
Miroslav Stampar
|
7733e5866a
|
minor update regarding mnemonics (again)
|
2011-06-16 12:34:38 +00:00 |
|
Miroslav Stampar
|
17e4c6b564
|
minor update regarding mnemonics
|
2011-06-16 12:26:50 +00:00 |
|
Miroslav Stampar
|
25b923bbc3
|
minor fixes and minor updates
|
2011-06-16 12:12:30 +00:00 |
|
Miroslav Stampar
|
3995891ab4
|
new file containing default settings
|
2011-06-16 11:43:07 +00:00 |
|
Miroslav Stampar
|
6f681b45ad
|
cleaning up a bit for a configuration mess
|
2011-06-16 11:42:13 +00:00 |
|
Bernardo Damele
|
f515c9c9e0
|
Dealt with SVN update login traceback. Need to investigate further why it asks for credentials sometimes
|
2011-06-16 10:11:11 +00:00 |
|
Miroslav Stampar
|
63d98d8ce6
|
fix for a bug reported by rdsears@mtu.edu (ignored config file items)
|
2011-06-16 08:08:49 +00:00 |
|
Miroslav Stampar
|
4d51fa8155
|
minor update planned for a long time (in case of heuristic test was positive warn the user properly at the end if program fails)
|
2011-06-15 17:37:28 +00:00 |
|
Miroslav Stampar
|
e0ad72031f
|
minor update
|
2011-06-15 12:04:30 +00:00 |
|
Miroslav Stampar
|
1d93a03eeb
|
introducing mnemonics
|
2011-06-15 11:58:50 +00:00 |
|
Miroslav Stampar
|
d55a242908
|
minor improvement. messages are now warnings (not errors because lots of them are not causing problems for a normal usage) and most of all it's being checked only if the --dependencies is used (until now this switch has been ignored and turned on by default - always)
|
2011-06-14 19:38:35 +00:00 |
|
Miroslav Stampar
|
a4328e914b
|
minor update
|
2011-06-14 19:29:42 +00:00 |
|
Miroslav Stampar
|
1e17c0d4a1
|
switching to debug mode for missing dependencies
|
2011-06-14 08:47:06 +00:00 |
|
Bernardo Damele
|
8978fded03
|
typo fix
|
2011-06-13 19:00:27 +00:00 |
|
Bernardo Damele
|
7152a1ed3b
|
Added --dependences to show which sqlmap dependences are not available
|
2011-06-13 18:44:02 +00:00 |
|
Miroslav Stampar
|
0990f16f7f
|
minor update for invalid cases like 'iso-8859-1 (western europe)'
|
2011-06-12 08:36:21 +00:00 |
|
Miroslav Stampar
|
2da56ea507
|
fix of a language bug
|
2011-06-11 21:17:30 +00:00 |
|
Miroslav Stampar
|
9331abb96f
|
minor update
|
2011-06-11 08:33:36 +00:00 |
|
Miroslav Stampar
|
f8dde2c23b
|
adding --titles switch (killer switch for pages with lots of dynamicity and/or international ones)
|
2011-06-10 23:18:43 +00:00 |
|
Miroslav Stampar
|
15d72ec566
|
minor improvement for special cases with --string/--regexp
|
2011-06-10 23:05:47 +00:00 |
|
Miroslav Stampar
|
8fac4605a9
|
minor fix for None results
|
2011-06-10 22:28:15 +00:00 |
|
Miroslav Stampar
|
71093b1cad
|
adding one more user friendly message
|
2011-06-09 09:58:42 +00:00 |
|
Miroslav Stampar
|
fae089646b
|
minor fix
|
2011-06-09 08:38:17 +00:00 |
|
Miroslav Stampar
|
9202fedf7b
|
minor fix
|
2011-06-09 08:14:54 +00:00 |
|
Miroslav Stampar
|
af5fe457bd
|
revert of the revert (it's a good idea to have it like this because of problems with e.g. --text-only and binary content)
|
2011-06-09 07:53:31 +00:00 |
|
Miroslav Stampar
|
8ec4bc9d9d
|
revert of the last commit. have to think about it
|
2011-06-09 06:32:53 +00:00 |
|
Miroslav Stampar
|
9c093d91f2
|
minor update
|
2011-06-09 06:14:35 +00:00 |
|
Bernardo Damele
|
d217cf71b2
|
Minor bug fix
|
2011-06-08 23:32:44 +00:00 |
|
Bernardo Damele
|
6aade8e6fc
|
grammar fix, again
|
2011-06-08 16:40:22 +00:00 |
|
Bernardo Damele
|
d160888784
|
Grammar fix
|
2011-06-08 16:25:18 +00:00 |
|
Bernardo Damele
|
1c6ee1dc36
|
Rephrase
|
2011-06-08 16:22:16 +00:00 |
|
Bernardo Damele
|
0d8d6a4ace
|
Cosmetics
|
2011-06-08 16:08:20 +00:00 |
|
Bernardo Damele
|
70cac24909
|
Cosmetics
|
2011-06-08 15:31:27 +00:00 |
|
Bernardo Damele
|
64bef644c3
|
This was missing
|
2011-06-08 15:30:59 +00:00 |
|
Miroslav Stampar
|
d8155dfae9
|
change by request
|
2011-06-08 14:44:11 +00:00 |
|
Miroslav Stampar
|
6387d98ab0
|
quick fix
|
2011-06-08 14:42:48 +00:00 |
|
Bernardo Damele
|
0d3e8a76d8
|
Cosmetics and a missing param
|
2011-06-08 14:40:42 +00:00 |
|
Miroslav Stampar
|
4a9640160e
|
more concise
|
2011-06-08 14:35:23 +00:00 |
|
Miroslav Stampar
|
6b81eef65a
|
refactoring
|
2011-06-08 14:30:12 +00:00 |
|
Bernardo Damele
|
cd6ceb733e
|
Adjustment and refactoring for takeover via web backdoor
|
2011-06-08 14:16:53 +00:00 |
|
Bernardo Damele
|
cce3208b35
|
Cleanup
|
2011-06-08 14:15:34 +00:00 |
|
Bernardo Damele
|
7da3d8dbd1
|
minor layout adjustment
|
2011-06-08 13:01:33 +00:00 |
|
Miroslav Stampar
|
f65abdaae3
|
added switch --cookie-del by request
|
2011-06-08 08:27:24 +00:00 |
|
Miroslav Stampar
|
4eeeb3655e
|
asking and skipping to the next google result page if no usable links found
|
2011-06-07 23:24:17 +00:00 |
|
Miroslav Stampar
|
1c633b7351
|
i am tired of pressing hundred times Ctrl+C in testing phase if --batch is specified
|
2011-06-07 22:14:18 +00:00 |
|
Miroslav Stampar
|
75c12c5edb
|
fix for a bug reported by cclements@flatearth.net (TypeError: argument of type 'NoneType' is not iterable)
|
2011-06-07 21:46:49 +00:00 |
|
Miroslav Stampar
|
e7e23d1b79
|
fix for a Ctrl+C bug reported by nightman@email.de
|
2011-06-07 17:16:01 +00:00 |
|
Miroslav Stampar
|
26062ec71e
|
minor update
|
2011-06-07 15:13:51 +00:00 |
|
Miroslav Stampar
|
50dde39e68
|
minor update
|
2011-06-07 10:32:18 +00:00 |
|
Miroslav Stampar
|
e9bf768f23
|
more refactoring
|
2011-06-07 10:08:12 +00:00 |
|
Miroslav Stampar
|
7a3cc38e3c
|
refactoring and stabilization of multithreading
|
2011-06-07 09:50:00 +00:00 |
|
Miroslav Stampar
|
5f7858455d
|
fix for a bug reported by l0rda@l0rda.biz
|
2011-06-07 05:57:21 +00:00 |
|
Miroslav Stampar
|
03c3f83893
|
minor fix
|
2011-06-06 13:34:49 +00:00 |
|
Miroslav Stampar
|
24ed99e5a3
|
fix for a bug reported by aboynes@gmail.com
|
2011-06-06 08:50:48 +00:00 |
|
Miroslav Stampar
|
97d8c60c3f
|
better language
|
2011-06-03 15:58:19 +00:00 |
|
Miroslav Stampar
|
0a620bf322
|
more info to the user
|
2011-06-03 15:43:50 +00:00 |
|
Miroslav Stampar
|
8c80413c52
|
well, important fix for blind based cases (especially OR ones)
|
2011-06-03 15:29:22 +00:00 |
|
Miroslav Stampar
|
f27181c628
|
minor improvement for blind based injections with reflected values
|
2011-06-03 14:41:36 +00:00 |
|
Miroslav Stampar
|
e9eafc2e94
|
minor update
|
2011-06-03 14:13:22 +00:00 |
|
Miroslav Stampar
|
64a862ed58
|
minor usability update
|
2011-06-03 14:04:02 +00:00 |
|
Miroslav Stampar
|
faf7814869
|
fix for a fuzz "bug" reported by daniele.rivetti@yahoo.com
|
2011-06-03 11:01:26 +00:00 |
|
Miroslav Stampar
|
08d6bb4f23
|
minor fix
|
2011-06-02 22:13:31 +00:00 |
|
Miroslav Stampar
|
8aa5625cd0
|
proper fix related to the last commit
|
2011-06-01 23:00:18 +00:00 |
|
Miroslav Stampar
|
fd57aae779
|
bug fix (until this moment we had UNION unfunctional for MSSQL)
|
2011-06-01 22:47:54 +00:00 |
|
Miroslav Stampar
|
fc96764f80
|
minor bug fix ("trimmed" error message was shown for empty cases too because u'' or None == None)
|
2011-06-01 22:06:06 +00:00 |
|
Miroslav Stampar
|
091c174bc4
|
better language
|
2011-06-01 08:30:06 +00:00 |
|
Miroslav Stampar
|
63145236b9
|
minor fix
|
2011-05-31 21:53:29 +00:00 |
|
Miroslav Stampar
|
42100e0e5b
|
big bug fix
|
2011-05-30 23:15:29 +00:00 |
|
Miroslav Stampar
|
9600556dae
|
better language
|
2011-05-30 23:04:49 +00:00 |
|
Miroslav Stampar
|
b7088440c2
|
better sentence
|
2011-05-30 22:47:17 +00:00 |
|
Miroslav Stampar
|
3c12799ff0
|
minor improvement
|
2011-05-30 20:34:34 +00:00 |
|
Miroslav Stampar
|
89559d1b0a
|
better regex and now after we have that automatic switch off for reflective removal mechanism it's not so important to change it
|
2011-05-30 20:18:30 +00:00 |
|
Miroslav Stampar
|
b79dae6e95
|
minor update
|
2011-05-30 14:49:03 +00:00 |
|
Miroslav Stampar
|
20988e58ed
|
warp 5 mr spock :)
|
2011-05-30 09:46:32 +00:00 |
|
Miroslav Stampar
|
001cbff2a9
|
speed up of 2 times for partial union technique
|
2011-05-30 09:07:48 +00:00 |
|
Miroslav Stampar
|
97820949f5
|
minor update
|
2011-05-30 08:33:01 +00:00 |
|
Miroslav Stampar
|
d5ede6afb4
|
fix for a dirty reading issue reported by skysbsb@gmail.com (IndexError: list index out of range)
|
2011-05-30 06:38:44 +00:00 |
|
Miroslav Stampar
|
23d7820de7
|
minor update
|
2011-05-29 23:56:41 +00:00 |
|
Miroslav Stampar
|
6fd8602f01
|
minor update
|
2011-05-29 23:33:34 +00:00 |
|
Miroslav Stampar
|
86455ceb9c
|
implementation of multithreading for UNION and ERROR techniques
|
2011-05-29 23:17:50 +00:00 |
|
Miroslav Stampar
|
d51efa679d
|
typo update
|
2011-05-29 06:26:28 +00:00 |
|
Miroslav Stampar
|
f848cc779e
|
adding legal disclaimer as latest situation (these days news headlines) seems out of control
|
2011-05-28 18:54:14 +00:00 |
|
Miroslav Stampar
|
a5a70f0895
|
minor update
|
2011-05-28 18:21:03 +00:00 |
|
Miroslav Stampar
|
ecbeecdccf
|
minor refactoring
|
2011-05-28 18:11:56 +00:00 |
|
Miroslav Stampar
|
eb9b84d1da
|
type correction
|
2011-05-28 17:53:05 +00:00 |
|
Miroslav Stampar
|
03ef53f00a
|
update regarding mysql function resolution and versionedkeywords
|
2011-05-28 17:34:43 +00:00 |
|
Miroslav Stampar
|
95dea1fbf9
|
sharp tuning UNION tests even more
|
2011-05-28 08:06:19 +00:00 |
|
Miroslav Stampar
|
c11ea35d53
|
adding some user input for "refreshing" cases (like redirect ones)
|
2011-05-27 22:42:23 +00:00 |
|
Miroslav Stampar
|
cf69809c3c
|
minor update
|
2011-05-27 16:26:00 +00:00 |
|
Miroslav Stampar
|
8227298057
|
user friendliness uber 9000
|
2011-05-27 08:30:52 +00:00 |
|
Miroslav Stampar
|
a8b58afdb2
|
minor update
|
2011-05-27 08:21:02 +00:00 |
|
Miroslav Stampar
|
48f52d7697
|
minor beautification
|
2011-05-27 08:16:14 +00:00 |
|
Miroslav Stampar
|
61b960f65f
|
minor update related to the last one
|
2011-05-26 22:05:10 +00:00 |
|
Miroslav Stampar
|
45caadbd4a
|
important update - finally found what was causing headache for UNION payloads in noticeable number of cases
|
2011-05-26 21:54:19 +00:00 |
|
Miroslav Stampar
|
97bd5355dd
|
minor update
|
2011-05-26 21:18:55 +00:00 |
|
Miroslav Stampar
|
5d56e89cf5
|
minor update
|
2011-05-26 21:08:46 +00:00 |
|
Miroslav Stampar
|
06108b6da6
|
minor update related to the last commit
|
2011-05-26 20:58:24 +00:00 |
|
Miroslav Stampar
|
4f46a5ab63
|
minor usability enhancement regarding warning for --text-only switch
|
2011-05-26 20:48:18 +00:00 |
|
Miroslav Stampar
|
ff030e4d24
|
minor cleanup of the leftover
|
2011-05-26 17:37:24 +00:00 |
|
Miroslav Stampar
|
bf2b58ba82
|
minor update
|
2011-05-26 15:23:28 +00:00 |
|
Miroslav Stampar
|
b6fe5b12a4
|
adding --schema to the wizard/Basic as it looks like a cool thingy to put there
|
2011-05-26 14:30:05 +00:00 |
|
Miroslav Stampar
|
4f2c999146
|
fix for a bug reported by mail@8dh.de (UnicodeDecodeError: requestMsg += "\n%s" % requestHeaders)
|
2011-05-26 13:47:20 +00:00 |
|
Miroslav Stampar
|
f3ed61af5f
|
bug fix when using inference and kb.pageEncoding is None (like in binary cases)
|
2011-05-25 21:12:12 +00:00 |
|
Miroslav Stampar
|
5369657cd5
|
fix for cases with retrieved binary files (preventing difflib nagging around comparison)
|
2011-05-25 20:54:30 +00:00 |
|
Miroslav Stampar
|
a1fd2898a0
|
added friendly tip message for url encoding GET and POST payloads
|
2011-05-25 11:10:52 +00:00 |
|
Miroslav Stampar
|
0e480a9921
|
adding SYS to the ORACLE_SYSTEM_DBS
|
2011-05-25 10:55:47 +00:00 |
|
Miroslav Stampar
|
2f456bee75
|
minor beautification
|
2011-05-25 08:14:39 +00:00 |
|
Miroslav Stampar
|
8b7a3c5a6b
|
making it easier for totally dummy users
|
2011-05-24 17:24:01 +00:00 |
|
Miroslav Stampar
|
bec2c04671
|
helping dummy users
|
2011-05-24 17:15:25 +00:00 |
|
Miroslav Stampar
|
a3466ff79c
|
serving everything for the users
|
2011-05-24 16:34:08 +00:00 |
|
Miroslav Stampar
|
69eb173eca
|
minor just in case patch
|
2011-05-24 15:07:37 +00:00 |
|
Miroslav Stampar
|
0072c3af8e
|
fix for a bug reported by aboynes@gmail.com (for elt in self.a)
|
2011-05-24 15:03:21 +00:00 |
|
Miroslav Stampar
|
f774d8fea0
|
proper Tor settings (reverted r3915 and implemented it the right way)
|
2011-05-24 11:06:58 +00:00 |
|
Miroslav Stampar
|
915c206e3d
|
minor fix for socks proxy issues
|
2011-05-24 09:47:10 +00:00 |
|
Miroslav Stampar
|
ad25bcc2be
|
better way for dealing with relative paths
|
2011-05-24 05:26:51 +00:00 |
|
Miroslav Stampar
|
a536bf210f
|
improved redirection mechanism
|
2011-05-23 23:20:03 +00:00 |
|
Miroslav Stampar
|
128a012121
|
this was causing that --suffix trouble
|
2011-05-23 19:59:07 +00:00 |
|
Miroslav Stampar
|
bfe8e51b7c
|
minor fix for retrieving stuff like "SELECT * FROM testdb..users"
|
2011-05-23 19:45:40 +00:00 |
|
Miroslav Stampar
|
2b12b18357
|
incorporating metasploit patch from oliver.kuckertz@mologie.de
|
2011-05-23 15:27:10 +00:00 |
|
Miroslav Stampar
|
4542d4535f
|
minor beautification
|
2011-05-23 14:28:05 +00:00 |
|
Miroslav Stampar
|
31b48ec11c
|
removing space left
|
2011-05-23 14:18:33 +00:00 |
|
Miroslav Stampar
|
0ed03d474f
|
now supporting "blank tables" - schema of the table will be preserved, even if it's empty - especially nice feature for --replicate
|
2011-05-23 11:09:44 +00:00 |
|
Miroslav Stampar
|
868fbe370b
|
minor beautification
|
2011-05-23 10:39:58 +00:00 |
|
Miroslav Stampar
|
fb23beef6f
|
most elegant way i could think of to deal with "collation incompatibilities" issue on some MySQL/UNION cases (affected about 5% of all targets tested)
|
2011-05-22 19:14:36 +00:00 |
|
Miroslav Stampar
|
4fdb6ac9b9
|
adding useful info
|
2011-05-22 15:30:19 +00:00 |
|
Miroslav Stampar
|
48c20a62ac
|
minor nag fix
|
2011-05-22 15:08:55 +00:00 |
|
Miroslav Stampar
|
40971aca94
|
fixing nasty bug caused by retrying counter
|
2011-05-22 10:59:56 +00:00 |
|
Miroslav Stampar
|
712e238f33
|
another minor fix
|
2011-05-22 10:29:25 +00:00 |
|
Miroslav Stampar
|
2795aeff34
|
minor fix
|
2011-05-22 10:27:45 +00:00 |
|
Miroslav Stampar
|
806e898694
|
no more CRITICAL drop outs in test mode - lots of reports were related to this
|
2011-05-22 10:21:49 +00:00 |
|
Miroslav Stampar
|
9b2623514a
|
one bug fix for Host header (value should be without port number); one improvement for --tables - when no tables ask user if he wants to brute force them; one tweak - adding kb.ignoreTimeout for --tables
|
2011-05-22 09:48:46 +00:00 |
|
Miroslav Stampar
|
2ea613b170
|
type correction and adding global flag kb.ignoreTimeout which could be useful
|
2011-05-22 08:24:13 +00:00 |
|
Miroslav Stampar
|
27f0e73cc9
|
refactoring of 'target' flag in connect.py
|
2011-05-22 07:46:09 +00:00 |
|
Miroslav Stampar
|
a58aaf2e1a
|
better format for results file (easier for sorting when lots of files)
|
2011-05-22 07:02:36 +00:00 |
|
Miroslav Stampar
|
25fff8c135
|
changes in handling --tor (using SOCKS instead of HTTP for handling Tor - more standard way; doesn't require proxy bundle; fixes problems with default proxy ports on Win/Linux)
|
2011-05-21 11:46:57 +00:00 |
|
Miroslav Stampar
|
9e5856caf8
|
improvement for recognition of scalar vs multiple-row commands
|
2011-05-19 16:45:05 +00:00 |
|
Miroslav Stampar
|
db72428765
|
minor update
|
2011-05-19 15:57:29 +00:00 |
|
Miroslav Stampar
|
f40c6b2ce7
|
added --cookie for maskSensitiveData too
|
2011-05-19 15:42:59 +00:00 |
|
Miroslav Stampar
|
9832fc42d4
|
minor improvement for --tamper (now standard tamper scripts can be used like --tamper=randomcase)
|
2011-05-18 21:47:40 +00:00 |
|
Miroslav Stampar
|
3048e9f710
|
minor refactoring
|
2011-05-17 23:03:31 +00:00 |
|
Miroslav Stampar
|
cc07e5dc97
|
added --charset option to force charset encoding of the retrieved data (e.g. when the backend collation is different than the current web page charset) as requested by devon.mitchell1988@yahoo.com
|
2011-05-17 22:55:22 +00:00 |
|
Miroslav Stampar
|
dfe81cc66f
|
minor yielding
|
2011-05-16 20:14:10 +00:00 |
|
Miroslav Stampar
|
a5ad4621c9
|
minor refactoring
|
2011-05-16 20:09:12 +00:00 |
|
Miroslav Stampar
|
ba1df457ab
|
fix for a charset euc_tw reported by devon.mitchell1988@yahoo.com
|
2011-05-16 19:26:58 +00:00 |
|
Miroslav Stampar
|
6ba9dea640
|
just in case for trimmed output
|
2011-05-16 06:17:37 +00:00 |
|
Miroslav Stampar
|
d2221e4604
|
fix for a minor "retrieved" cosmetic issue in partial union technique reported by Devon Mitchell (retrieved: "information_schema","COLUMNS</title><...)
|
2011-05-16 00:23:50 +00:00 |
|
Miroslav Stampar
|
faa74cd2bc
|
introducing results file for multiple target mode
|
2011-05-15 22:21:38 +00:00 |
|
Miroslav Stampar
|
90e84c9a6d
|
removing xmlcharrefreplace error handler as it seems that it wasn't such a good idea at the end
|
2011-05-15 21:43:38 +00:00 |
|
Miroslav Stampar
|
c3bb5a03e1
|
minor improvement
|
2011-05-14 20:09:37 +00:00 |
|
Miroslav Stampar
|
3484a4426b
|
fix for a bug reported by itxx@qq.com (TypeError: encode() takes no keyword arguments)
|
2011-05-14 19:57:28 +00:00 |
|
Miroslav Stampar
|
053c245114
|
few minor fixes
|
2011-05-13 09:56:12 +00:00 |
|
Miroslav Stampar
|
a7d7be5ce0
|
bug fix ('Host' header was being set to the conf.hostname for all getPages causing problems in some cases when retrieved page was not coming from that same Host)
|
2011-05-13 01:01:53 +00:00 |
|
Miroslav Stampar
|
f11d5c91e3
|
minor update so that only one DNS request per scan is being done (before this commit there were two)
|
2011-05-12 14:32:39 +00:00 |
|
Miroslav Stampar
|
70688fb8b5
|
minor enhancement for dumping 'None' values (proper way should be empty string because None is too pythonic)
|
2011-05-12 12:00:17 +00:00 |
|
Miroslav Stampar
|
c64eb38a8b
|
same thing as for the last commit, but for error technique this time
|
2011-05-12 11:52:18 +00:00 |
|
Miroslav Stampar
|
84a7e5ffb9
|
"unfix" for r3172 which was causing "AttributeError: 'list' object has no attribute 'isdigit'" because of change of appereance
|
2011-05-12 11:36:02 +00:00 |
|
Miroslav Stampar
|
0b2da2f9f5
|
minor beautification for --tor switch
|
2011-05-12 05:46:17 +00:00 |
|
Miroslav Stampar
|
e05a9c0554
|
i was probably very tired or very stupid to do this
|
2011-05-11 13:13:46 +00:00 |
|
Miroslav Stampar
|
2ab9e30f7a
|
bug fix
|
2011-05-11 12:54:33 +00:00 |
|
Miroslav Stampar
|
53065ee1fb
|
adding ordered set for kb.targetUrls (now the order of appereance in multiple targets mode will be respected)
|
2011-05-11 08:55:48 +00:00 |
|
Miroslav Stampar
|
5ee07b90b9
|
added -m switch for bulk loading multiple targets
|
2011-05-11 08:46:40 +00:00 |
|
Miroslav Stampar
|
120b0d756e
|
unfix
|
2011-05-10 21:33:06 +00:00 |
|
Miroslav Stampar
|
6b66fce72c
|
minor fix
|
2011-05-10 20:52:43 +00:00 |
|
Miroslav Stampar
|
192c685bc8
|
changing conf attribute to a more proper name
|
2011-05-10 20:48:34 +00:00 |
|
Miroslav Stampar
|
deae534ee7
|
minor refactoring
|
2011-05-10 20:44:36 +00:00 |
|
Bernardo Damele
|
97bc816aeb
|
layout
|
2011-05-10 16:24:09 +00:00 |
|
Bernardo Damele
|
3a8309c4b0
|
Major bug fix to detect UNION query technique and various improvements to parsing and using of --union-char and --union-cols switches
|
2011-05-10 15:34:54 +00:00 |
|
Miroslav Stampar
|
707edc7b1a
|
fix for a bug (previously --dbms="mysql 4" was ignored and abruptly terminated while the mechanism was here all along)
|
2011-05-10 13:28:07 +00:00 |
|
Miroslav Stampar
|
1dea609019
|
fix for a bug reported by David (UnicodeDecodeError: url = url + '?' + query)
|
2011-05-10 12:51:37 +00:00 |
|
Miroslav Stampar
|
a64407d9db
|
minor bug fix for multithreading and lots of connection retries
|
2011-05-10 12:40:01 +00:00 |
|
Miroslav Stampar
|
22a1870c2c
|
adding some constraining to number of used threads on brute force switches together with a warning in case of connection exception(s) with --threads>1
|
2011-05-10 12:32:07 +00:00 |
|
Miroslav Stampar
|
ec4d9178f8
|
minor update related to the previous commit
|
2011-05-08 06:28:58 +00:00 |
|
Miroslav Stampar
|
4d6e7c738c
|
minor update
|
2011-05-08 06:17:43 +00:00 |
|
Bernardo Damele
|
9955483052
|
Major improvement for --dump.
Minor improvement for --dump-all.
Minor bug fix for infinite loop
|
2011-05-08 02:08:18 +00:00 |
|
Bernardo Damele
|
8179fd63c0
|
Minor fix
|
2011-05-07 23:48:03 +00:00 |
|
Bernardo Damele
|
6653907700
|
forgot in last commit
|
2011-05-07 21:13:56 +00:00 |
|
Bernardo Damele
|
1151af52bb
|
More fix for save/resume of --technique
|
2011-05-07 21:08:14 +00:00 |
|
Bernardo Damele
|
aae140080e
|
SVN roll back, DB2 patch will be recommitted after testing:
$ svn merge https://svn.sqlmap.org/sqlmap/trunk/sqlmap@HEAD https://svn.sqlmap.org/sqlmap/trunk/sqlmap@3847 .
|
2011-05-06 10:27:43 +00:00 |
|
Miroslav Stampar
|
42bca80968
|
removing blank lines and adding newline at the end of files
|
2011-05-06 09:35:53 +00:00 |
|
Miroslav Stampar
|
6e392b6054
|
applying contributed patch for DB2
|
2011-05-06 09:30:39 +00:00 |
|
Bernardo Damele
|
2d8408c885
|
More fix for --technique resume
|
2011-05-05 16:38:46 +00:00 |
|
Bernardo Damele
|
e96a533a04
|
Bug fix to resume of --technique
|
2011-05-05 15:18:33 +00:00 |
|
Miroslav Stampar
|
b324b99f6e
|
minor update of warning message
|
2011-05-04 10:41:08 +00:00 |
|
Miroslav Stampar
|
83fac3f6d9
|
fix for proper MSSQL error chunking in some cases (not screwing output length toward lower values at chunk phase)
|
2011-05-03 21:12:51 +00:00 |
|
Miroslav Stampar
|
e6f010734e
|
minor fix for cases when the retrieved output is safe encoded (like for --os-shell)
|
2011-05-03 16:14:03 +00:00 |
|
Miroslav Stampar
|
4d4e3802e4
|
decoding of chars for --os-shell
|
2011-05-03 15:31:12 +00:00 |
|
Bernardo Damele
|
c58dc4a6d8
|
isDbmsWithin() must stay like this, no getIdentifiedDbms() in there
|
2011-05-03 14:13:45 +00:00 |
|
Miroslav Stampar
|
742b0ef76e
|
major improvement of ERROR data retrieval on MSSQL
|
2011-05-03 13:25:20 +00:00 |
|
Miroslav Stampar
|
2a7838928e
|
minor fancier --replicate update
|
2011-05-03 11:48:04 +00:00 |
|
Miroslav Stampar
|
b202d73b46
|
bug fix for MSSQL identificators which were starting with d, b, o and . Thing is that .lstrip strips all occurances of the given chars :) (spotted ancidentally)
|
2011-05-03 11:09:30 +00:00 |
|
Miroslav Stampar
|
1840b0e43b
|
fix for a bug reported by k1971@live.co.uk (OperationalError: unknown database dbo)
|
2011-05-03 10:22:38 +00:00 |
|
Miroslav Stampar
|
1e6c2fea74
|
update regarding warning for --random-agent during connection timeout in connection test phase
|
2011-05-03 10:05:42 +00:00 |
|
Bernardo Damele
|
6cff3e97f4
|
cosmetics
|
2011-05-02 21:48:08 +00:00 |
|
Miroslav Stampar
|
06498796b9
|
minor cosmetics
|
2011-05-02 20:51:53 +00:00 |
|
Miroslav Stampar
|
5e9620198c
|
fix for a privately reported bug ("AttributeError: item is disabled")
|
2011-05-02 18:18:04 +00:00 |
|
Miroslav Stampar
|
93dee30895
|
better fix for the previous commit
|
2011-05-02 13:34:55 +00:00 |
|
Miroslav Stampar
|
20ad1c1f2f
|
minor update to not confuse users when using -o
|
2011-05-02 13:24:35 +00:00 |
|
Miroslav Stampar
|
f8c3086d15
|
minor minor update
|
2011-05-02 12:37:54 +00:00 |
|
Miroslav Stampar
|
098f53d57a
|
patch for a problem reported by m.martin2311@yahoo.com (unknown charset 'is0-8859-1')
|
2011-05-02 12:34:35 +00:00 |
|
Bernardo Damele
|
ac2550535c
|
Proper fix for --technique=U bug
|
2011-05-01 23:42:41 +00:00 |
|
Miroslav Stampar
|
900ee0ff93
|
fix for a major bug reported by k1971@live.co.uk (1..9 99..)
|
2011-05-01 15:47:00 +00:00 |
|
Miroslav Stampar
|
494503b334
|
proper way to deal with generic cases
|
2011-05-01 08:04:08 +00:00 |
|
Miroslav Stampar
|
fcd69ba9c7
|
fix for a --technique=U
|
2011-05-01 07:37:22 +00:00 |
|
Miroslav Stampar
|
41fc9f9d54
|
fix for an issue reported by andrew.gecse@upcmail.hu (unknown web page charset 'hungarian-iso-8859-2')
|
2011-04-30 22:41:54 +00:00 |
|
Bernardo Damele
|
955dbc85e7
|
Minor variable rename
|
2011-04-30 15:29:59 +00:00 |
|
Bernardo Damele
|
b3a0424269
|
More Backend class method usage refactoring
|
2011-04-30 15:24:15 +00:00 |
|
Bernardo Damele
|
00f14bec5f
|
layout adjustment
|
2011-04-30 15:22:33 +00:00 |
|
Bernardo Damele
|
9a4ae7d9e2
|
More code refactoring of Backend class methods used
|
2011-04-30 14:54:29 +00:00 |
|
Bernardo Damele
|
f56d135438
|
Minor code restyling
|
2011-04-30 13:20:05 +00:00 |
|