233 Commits

Author	SHA1	Message	Date
Miroslav Stampar	1e6c2fea74	update regarding warning for --random-agent during connection timeout in connection test phase	2011-05-03 10:05:42 +00:00
Bernardo Damele	f56d135438	Minor code restyling	2011-04-30 13:20:05 +00:00
Miroslav Stampar	b299912de4	fix for a bug reported by ahmed@isecur1ty.org (UnicodeDecodeError: 'ascii' codec can't decode byte 0x84 in position 396: ordinal not in range(128)) for multipartpost	2011-04-29 16:56:02 +00:00
Miroslav Stampar	6bb4dce3aa	minor refactoring	2011-04-29 15:22:32 +00:00
Bernardo Damele	11ecd16099	cosmetics	2011-04-21 10:08:38 +00:00
Miroslav Stampar	fc90974940	revert of last commit because of the situation in detection phase where payload is made at the starting point (can't change conf.timeSec in that phase)	2011-04-19 14:50:09 +00:00
Miroslav Stampar	7abbd0c029	removing a leftover	2011-04-19 14:29:51 +00:00
Miroslav Stampar	96b5fede5a	automatic increasing of time delay on lagging connections	2011-04-19 14:28:51 +00:00
Miroslav Stampar	7a06af9a92	added "lagging" critical message	2011-04-19 10:37:20 +00:00
Miroslav Stampar	6463cad8c5	minor update for SOAP payloads	2011-04-18 14:29:52 +00:00
Miroslav Stampar	a7366bf710	SOAP refactoring	2011-04-17 21:39:00 +00:00
Miroslav Stampar	0387654166	update of copyright string (until year)	2011-04-15 12:33:18 +00:00
Miroslav Stampar	83feb097ef	greater flexibility for --batch when default is None	2011-04-08 22:29:50 +00:00
Miroslav Stampar	e957c4400c	minor revisit of tampering script(s) functionality (urlencode one is removed as it's currently obsolete regarding the whole process of automatic urlencoding)	2011-04-04 08:04:47 +00:00
Miroslav Stampar	305115a68b	important improvement of data handling (POST data and header values)	2011-04-03 15:02:52 +00:00
Miroslav Stampar	dd01d66f13	proper update regarding last commit	2011-03-29 22:10:08 +00:00
Miroslav Stampar	850328df6c	minor cosmetics	2011-03-29 22:03:48 +00:00
Miroslav Stampar	9f707febf5	minor update	2011-03-29 15:43:17 +00:00
Miroslav Stampar	d28ca5809b	adding support for meta HTML header 'refresh' - popular one amongst login pages (stumbled when tested blind injections on Mutillidae login page)	2011-03-29 14:16:28 +00:00
Miroslav Stampar	ae53ad4c30	making an update for special case of timed out response	2011-03-28 21:05:04 +00:00
Miroslav Stampar	b53c9a2599	minor fix and some refactoring	2011-03-18 00:24:02 +00:00
Bernardo Damele	9526f0c4c2	Minor layout adjustments	2011-03-17 12:35:40 +00:00
Miroslav Stampar	e64f225e65	minor refactoring	2011-03-11 20:16:34 +00:00
Miroslav Stampar	2fd3f0d7b2	minor update (added comment)	2011-03-11 20:07:52 +00:00
Miroslav Stampar	5eae525010	this was bothering me for some time (POST and/or GET payloads needs to be urlencoded throughly)	2011-03-11 19:57:44 +00:00
Miroslav Stampar	5c97f9a496	improvement of url encoding technique (implemented failsafe routine for shortening too long GET queries)	2011-03-09 09:36:56 +00:00
Miroslav Stampar	9856cb71de	redo of the last commit with comments added	2011-02-28 18:58:05 +00:00
Miroslav Stampar	ade31b2cb0	removal of obsolete item	2011-02-28 18:49:25 +00:00
Miroslav Stampar	21041f8b90	further reflective value handling improvement	2011-02-27 17:43:41 +00:00
Miroslav Stampar	63b8156c00	some update (if header key is non-unicode comformant)	2011-02-25 09:43:04 +00:00
Miroslav Stampar	aa88361ab1	incorporation of method for neutralization of reflective values	2011-02-25 09:22:44 +00:00
Miroslav Stampar	3f8eadf4fe	minor refactoring	2011-02-22 13:00:58 +00:00
Miroslav Stampar	dcad5410fe	minor refactoring	2011-02-22 12:54:22 +00:00
Miroslav Stampar	17c39fe231	fix for that non-HTML stuff	2011-02-22 11:32:55 +00:00
Bernardo Damele	60b05ff49f	Reflect new switch name	2011-02-19 21:05:15 +00:00
Miroslav Stampar	535eb9f3eb	implementation of referer feature	2011-02-11 23:07:03 +00:00
Bernardo Damele	156d8cd99b	Directory restyling	2011-02-08 00:15:02 +00:00
Miroslav Stampar	e4933f0c92	refactoring	2011-02-03 23:25:56 +00:00
Miroslav Stampar	402c1b622e	removing urlencode from UA	2011-02-02 15:18:06 +00:00
Bernardo Damele	6761933f75	Just.. cosmetics ;)	2011-01-31 22:51:14 +00:00
Miroslav Stampar	35b6d7278a	minor update	2011-01-31 22:50:54 +00:00
Miroslav Stampar	60a2364f2b	now union technique parses headers too	2011-01-31 12:41:39 +00:00
Miroslav Stampar	fc9c626f9e	minor refactoring (removed URL_ENCODE_PAYLOAD)	2011-01-30 17:03:06 +00:00
Miroslav Stampar	8e74c571bc	centralization of urlencoding should be (only) in connect.py and we are from now on handling non-urlencoded data at other levels	2011-01-27 19:44:24 +00:00
Miroslav Stampar	81722b6881	major bug fix reported by Ahmed Shawky (there was a possibility of double url encoding of parameter values)	2011-01-27 18:36:28 +00:00
Miroslav Stampar	03413bd5e0	minor refactoring before a huge bug fix reported by Ahmed Shawky (we are falsely urlencoding ORIGINAL part of the injection payload)	2011-01-27 16:55:58 +00:00
Miroslav Stampar	430fd5cd63	minor fixes	2011-01-25 16:05:06 +00:00
Miroslav Stampar	cab86871fe	fix for a bug reported by mhackmail@gmail.com (local variable 'code' referenced before assignment)	2011-01-25 11:02:41 +00:00
Miroslav Stampar	4093599f38	added parseTargetUrl to redirect choice	2011-01-24 14:45:35 +00:00
Miroslav Stampar	1fa8f0cba7	code reviewing part 2	2011-01-15 12:53:40 +00:00