Bernardo Damele
|
b3da473840
|
Minor bug fix when --dbs has only one DB name
|
2010-12-22 14:29:57 +00:00 |
|
Bernardo Damele
|
c9ab8ae60e
|
Bug fix to properly identify if current user is DBA (--is-dba) on MySQL
|
2010-12-22 14:06:01 +00:00 |
|
Miroslav Stampar
|
c89021f0bb
|
some fixes
|
2010-12-22 11:46:18 +00:00 |
|
Miroslav Stampar
|
385e208f38
|
code refactoring regarding standard output suppression and some threading issues
|
2010-12-21 14:21:24 +00:00 |
|
Miroslav Stampar
|
6b37ddada4
|
removed some blank trailing spaces (with extra/shutils/blanks.sh)
|
2010-12-21 10:31:56 +00:00 |
|
Miroslav Stampar
|
36862e2efa
|
update
|
2010-12-18 15:57:47 +00:00 |
|
Miroslav Stampar
|
a067e805fa
|
minor update
|
2010-12-17 22:23:01 +00:00 |
|
Miroslav Stampar
|
e98d9c08e1
|
dumping table is now possible on Firebird too
|
2010-12-12 14:38:07 +00:00 |
|
Miroslav Stampar
|
b1babeefe5
|
update regarding dumping of tables with blind on Sqlite
|
2010-12-11 22:00:16 +00:00 |
|
Miroslav Stampar
|
b02bd55edc
|
minor refactoring
|
2010-12-10 13:04:36 +00:00 |
|
Miroslav Stampar
|
5764816891
|
minor cosmetics
|
2010-12-03 22:28:09 +00:00 |
|
Miroslav Stampar
|
2cc167a42e
|
fix for a bug reported by ToR: "AttributeError: 'NoneType' object has no attribute 'isdigit'"
|
2010-12-02 18:57:43 +00:00 |
|
Bernardo Damele
|
c22338ce90
|
Removed --error-test, --stacked-test and --time-test switches and adapted the code accordingly. This is due to the fact that the new XML based detection engine already supports all of those tests (and more).
|
2010-11-29 11:47:58 +00:00 |
|
Miroslav Stampar
|
ba4ea32603
|
first working version of dictionary attack
|
2010-11-23 13:24:02 +00:00 |
|
Bernardo Damele
|
a34c1b287c
|
Bug fix related to properly identify and parse the version from the banner (used for --stacked-test and other matters on MySQL/PgSQL)
|
2010-11-12 11:33:11 +00:00 |
|
Miroslav Stampar
|
42272ca78c
|
minor update
|
2010-11-11 22:26:36 +00:00 |
|
Miroslav Stampar
|
be992b4471
|
update regarding common columns existance check
|
2010-11-11 17:09:31 +00:00 |
|
Miroslav Stampar
|
4be0631161
|
refactoring of brute force techniques
|
2010-11-09 09:42:43 +00:00 |
|
Bernardo Damele
|
dac7436edf
|
Fix inconsistence with -b --error-test
|
2010-11-08 15:36:07 +00:00 |
|
Miroslav Stampar
|
862395ced1
|
further refactoring (all enumerations are now put into enums.py)
|
2010-11-08 09:20:02 +00:00 |
|
Miroslav Stampar
|
c8fe2fa8d8
|
minor fix
|
2010-11-04 22:00:14 +00:00 |
|
Miroslav Stampar
|
d7dbf814a0
|
fix/update for Access
|
2010-11-04 21:47:21 +00:00 |
|
Miroslav Stampar
|
6adee3792a
|
removed all trailing spaces from blank lines
|
2010-11-03 10:08:27 +00:00 |
|
Miroslav Stampar
|
4b56fa4f8f
|
now --tables work for MaxDB
|
2010-11-02 22:11:45 +00:00 |
|
Miroslav Stampar
|
b761523f3f
|
now --users works for MaxDB too
|
2010-11-02 21:52:48 +00:00 |
|
Miroslav Stampar
|
cd0d4135ac
|
implemented --banner for MaxDB and some minor fixes
|
2010-11-02 20:51:55 +00:00 |
|
Miroslav Stampar
|
685a8e7d2c
|
refactoring of hard coded dbms names
|
2010-11-02 11:59:24 +00:00 |
|
Miroslav Stampar
|
9d2c81baa9
|
more update for ms access
|
2010-11-02 11:06:47 +00:00 |
|
Bernardo Damele
|
486a113560
|
Consolidate logger messages for --*-test switches
|
2010-10-31 16:58:38 +00:00 |
|
Bernardo Damele
|
eab331ebd7
|
Minor bug fix
|
2010-10-31 13:46:08 +00:00 |
|
Bernardo Damele
|
65a0a8d285
|
Delegate urlencoding to agent.py only
|
2010-10-31 13:28:05 +00:00 |
|
Bernardo Damele
|
17e8abe841
|
Removed useless call to urlencode()
|
2010-10-31 12:47:22 +00:00 |
|
Miroslav Stampar
|
a921fe0d5d
|
fix for using --banner --stacked-test together
|
2010-10-29 15:31:24 +00:00 |
|
Miroslav Stampar
|
d75578c81f
|
some update regarding common tables
|
2010-10-29 09:00:51 +00:00 |
|
Miroslav Stampar
|
749e25a217
|
Implementation of --passwords for Sybase
|
2010-10-26 21:35:30 +00:00 |
|
Bernardo Damele
|
f5904d0bc0
|
Major bug fix to --union-test
|
2010-10-25 23:39:55 +00:00 |
|
Miroslav Stampar
|
8a9a57c709
|
update for Sybase and major bug fix for --passwords on MSSQL
|
2010-10-25 22:11:38 +00:00 |
|
Miroslav Stampar
|
9b56fbafbe
|
that Sybase is going to be pain in the ass
|
2010-10-25 21:43:13 +00:00 |
|
Bernardo Damele
|
debaf2215f
|
Consistency between cmdline.py, optiondict.py and sqlmap.conf and got rid of --union-use switch
|
2010-10-25 15:54:45 +00:00 |
|
Bernardo Damele
|
215175e3b7
|
Minor code adjustments
|
2010-10-25 14:11:47 +00:00 |
|
Miroslav Stampar
|
32728d14b7
|
fix for --union-use with --error-test
|
2010-10-25 12:25:29 +00:00 |
|
Miroslav Stampar
|
f8850e3f41
|
update (xml fix and refactoring)
|
2010-10-23 07:44:34 +00:00 |
|
Miroslav Stampar
|
a7a53af924
|
update for Sybase
|
2010-10-23 07:37:43 +00:00 |
|
Miroslav Stampar
|
a8e42a4f2b
|
bug fix
|
2010-10-23 06:42:21 +00:00 |
|
Miroslav Stampar
|
dec4d858b3
|
fix for Bug #207
|
2010-10-22 14:01:48 +00:00 |
|
Miroslav Stampar
|
1b2ec826bf
|
misc fixes regarding new query retrieval format
|
2010-10-21 23:17:06 +00:00 |
|
Miroslav Stampar
|
bc79eec702
|
removed queriesfile.py, implemented XMLObject approach (still shell.py and udf.py TODO)
|
2010-10-21 13:13:12 +00:00 |
|
Bernardo Damele
|
e73e06069b
|
Minor code refactoring
|
2010-10-20 22:09:03 +00:00 |
|
Miroslav Stampar
|
1b376c99a6
|
removed temp dictionary and replaced with kb.misc
|
2010-10-19 23:00:19 +00:00 |
|
Miroslav Stampar
|
6a8b1046d4
|
first successfull run of error based sqlmap in history :). tested --banner, --current-user, --current-db on 4 major DBMSes. still hidden from users (turn on flag error in getValue() in inject.py)
|
2010-10-19 12:02:04 +00:00 |
|