3939 Commits

Author	SHA1	Message	Date
Bernardo Damele	061aef57ba	missing import	2013-01-22 11:25:01 +00:00
Miroslav Stampar	59b02539ca	More general approach regarding that last commit	2013-01-22 11:34:34 +01:00
Miroslav Stampar	01f1488f07	Minor patch (annoying trailing spaces for some DBMSes --technique=B --sql-query)	2013-01-22 11:29:51 +01:00
Bernardo Damele	e558040810	minor fix to previous commit	2013-01-21 17:10:56 +00:00
Bernardo Damele	d43b04c582	better detection if vulnerable of not for regression test	2013-01-21 17:09:35 +00:00
Miroslav Stampar	b35a0810ef	Fix for an Issue #364	2013-01-21 17:01:52 +01:00
Miroslav Stampar	1e3f68c7ff	Rewriting some query crafting parts (especially those .find(' FROM '))	2013-01-21 16:15:38 +01:00
Miroslav Stampar	832d95984c	IFNULL-like mechanism now works on SQLite 2 too	2013-01-21 15:04:27 +01:00
Miroslav Stampar	75bf8528d1	Minor just in case update	2013-01-21 14:50:43 +01:00
Miroslav Stampar	c55a002f95	Language fix	2013-01-21 13:19:08 +01:00
Miroslav Stampar	80255433b0	Trivial style update	2013-01-21 13:18:34 +01:00
Miroslav Stampar	0e86175342	Adding new common function for further refactoring	2013-01-21 11:50:47 +01:00
Miroslav Stampar	3200134b3b	Fix for a regression test #30 test case fail (Firebird inline)	2013-01-21 10:12:54 +01:00
Miroslav Stampar	069c6acabd	Another update for an Issue #362	2013-01-20 22:47:26 +01:00
Miroslav Stampar	b4a55a809e	Refactoring DBMS string escaping functions	2013-01-20 13:45:58 +01:00
Bernardo Damele	3373e30808	minor fix for a bug introduced with commit 1ad9e26a21	2013-01-20 02:40:40 +00:00
Bernardo Damele	115be9d7b5	minor fixes	2013-01-20 01:26:46 +00:00
Miroslav Stampar	0a4f5d2e51	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-19 19:08:18 +01:00
Miroslav Stampar	e9641e30db	This last commit was in haste :)	2013-01-19 19:07:38 +01:00
Miroslav Stampar	6a87dd9225	Minor update (just for consistency with the rest of code)	2013-01-19 19:07:06 +01:00
Miroslav Stampar	979e108c87	Minor update (just for consistency with the rest of code)	2013-01-19 19:06:51 +01:00
Bernardo Damele	f89b25fdb6	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-19 18:04:38 +00:00
Bernardo Damele	adf97e630f	add possibility to provide a list of web server document root possible directories for web shell upload in --os-cmd and --os-shell for MySQL	2013-01-19 18:04:33 +00:00
Miroslav Stampar	9ce2395405	Minor refactoring	2013-01-19 18:40:44 +01:00
Miroslav Stampar	3f4c010370	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-19 18:28:52 +01:00
Miroslav Stampar	efe26ac3f8	In case that content-length header was not in a desired case ('Content-length') POST request file would fail badly (repeating original content-length header value)	2013-01-19 18:28:37 +01:00
Bernardo Damele	6a62292a3f	layout adjustment	2013-01-19 17:11:16 +00:00
Miroslav Stampar	bb6b89fe93	Patch for an Issue #360	2013-01-19 18:06:36 +01:00
Bernardo Damele	dcf2dcd03d	all we need to debug failed test cases while regression test run..	2013-01-19 17:04:57 +00:00
Bernardo Damele	f22fd396ef	write the test case name before it is run so if the test case crashes badly, we can trace back what test case it was at a later stage	2013-01-19 16:41:19 +00:00
Bernardo Damele	1923ef691e	just in case, add also the test case name inside the temp folder for debug purposes	2013-01-19 16:06:46 +00:00
Bernardo Damele	c95119559e	minor bug fix	2013-01-19 00:41:51 +00:00
Bernardo Damele	0e78fbef56	correctly format SQLi payload for inline query technique	2013-01-19 00:28:03 +00:00
Bernardo Damele	6be7eee8d6	more fixes	2013-01-18 23:35:16 +00:00
Bernardo Damele	56eaa073ce	fixed test cases for Firebird - #312	2013-01-18 23:32:39 +00:00
Bernardo Damele	1f4c6a8371	avoid blank line if password hashes have not been fetched	2013-01-18 22:10:36 +00:00
Bernardo Damele	1ad9e26a21	bug fix for ORDER BY users provided statements (issue #354)	2013-01-18 21:40:50 +00:00
Miroslav Stampar	ac7709204a	Better fix for that page/headers/comparison --string candidate problem	2013-01-18 17:00:11 +01:00
Miroslav Stampar	8141d17985	Revert of previous commit (more care has to be done regarding headers dynamicity)	2013-01-18 16:49:35 +01:00
Miroslav Stampar	33094a118c	Fix for an Issue where '--string' is being automatically picked not looking properly in headers too	2013-01-18 16:35:09 +01:00
Miroslav Stampar	601eb1e49a	Unescaping is renamed to escaping	2013-01-18 15:40:37 +01:00
Bernardo Damele	a43202f3c0	updated copyright	2013-01-18 14:07:51 +00:00
Bernardo Damele	1bb061f68c	improvements to --live-test	2013-01-18 13:02:35 +00:00
Bernardo Damele	738ccb643d	minor output adjustment	2013-01-18 11:41:09 +00:00
Miroslav Stampar	33ea811c6c	Removing some unused stuff (mainly imports)	2013-01-18 11:50:02 +01:00
Miroslav Stampar	aa467cb54c	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-18 11:31:25 +01:00
Miroslav Stampar	17d36684b5	Removing obsolete proxy handling code (Python < 2.6)	2013-01-18 11:30:52 +01:00
Miroslav Stampar	4d5bae7131	Removing some obsolete functions	2013-01-18 11:18:56 +01:00
Miroslav Stampar	bcc907ce09	Minor update	2013-01-18 11:00:21 +01:00
Miroslav Stampar	d1008b45b5	Minor removal of unused function	2013-01-18 10:46:06 +01:00
Miroslav Stampar	caae773b2d	Minor removal of redundant code	2013-01-18 10:44:57 +01:00
Bernardo Damele	d66f7e22b1	more fixes to test cases	2013-01-18 09:32:05 +00:00
Miroslav Stampar	e941e60b20	Minor just in place update for an Issue #348	2013-01-17 22:44:55 +01:00
Bernardo Damele	1d6e642d41	fixed url	2013-01-17 21:29:00 +00:00
Bernardo Damele	38eb4eb33e	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-17 21:03:11 +00:00
Bernardo Damele	b6e44ae64e	fix for #349 (compatible with all others DBMSes too)	2013-01-17 21:03:03 +00:00
Miroslav Stampar	a8e3fd58c5	Implementation for an Issue #348	2013-01-17 21:49:58 +01:00
Miroslav Stampar	8480ceddcb	Minor style update	2013-01-17 19:55:56 +01:00
Miroslav Stampar	507f185b69	Revert of patch for an Issue #347	2013-01-17 18:38:37 +01:00
Miroslav Stampar	9dd69042de	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-17 15:31:55 +01:00
Miroslav Stampar	f7eda07d92	Patch for an Issue #347	2013-01-17 15:30:14 +01:00
Bernardo Damele	5e059ab6db	added check for DB2 lib	2013-01-17 14:20:34 +00:00
Miroslav Stampar	a38b3e397c	Patch for an Issue #286	2013-01-17 14:17:39 +01:00
Miroslav Stampar	65273295e3	Implementing a check for an Issue #25	2013-01-17 13:56:04 +01:00
Miroslav Stampar	9428d1819e	Fix for an Issue #346	2013-01-17 12:03:02 +01:00
Miroslav Stampar	3ab4a5e36d	Fix for an Issue #345	2013-01-17 11:50:12 +01:00
Miroslav Stampar	51a77d1fe2	Minor update for an Issue #8	2013-01-17 11:37:45 +01:00
Miroslav Stampar	14b7e655a9	Minor refactoring	2013-01-16 16:33:04 +01:00
Miroslav Stampar	053b7d12b4	Minor language update	2013-01-16 16:07:12 +01:00
Miroslav Stampar	fb7243c237	Cleaning a mess where multi-threaded HTTP requests (in log) had sometimes same UIDs	2013-01-16 16:04:00 +01:00
Miroslav Stampar	c0a6e1c3a7	Finishing first usable prototype for an Issue #8	2013-01-16 14:54:37 +01:00
Miroslav Stampar	ff5ec48abd	Minor update for an Issue #8	2013-01-16 14:16:22 +01:00
Bernardo Damele	3464a70ac2	bug fix: without this generic concatenation of strings in concatQuery(), detection of UNION query SQLi only (--technique U) when the page did not disclose any DBMS error message and it was not MySQL (for which there are UNION SQLi specific payloads) was not detected	2013-01-16 01:53:33 +00:00
Bernardo Damele	542f6de72e	typo fix	2013-01-16 01:31:03 +00:00
Bernardo Damele	e16ad38d3e	more work on #342	2013-01-15 18:15:07 +00:00
Bernardo Damele	329047fc12	restored fix for #210 to keep --hex work with --technique B	2013-01-15 17:51:40 +00:00
Bernardo Damele	2a751e075d	more work on #342	2013-01-15 17:14:44 +00:00
Bernardo Damele	ec076f5f8a	write console output to temporary folder in any case the test case fails, even if no traceback is raised	2013-01-15 15:51:03 +00:00
Bernardo Damele	4eaa0d17aa	Fix in forging query to calculate query output length - closes issue #342	2013-01-15 15:50:20 +00:00
Miroslav Stampar	7a1d484115	Implementation for an Issue #340	2013-01-15 16:05:33 +01:00
Bernardo Damele	3f84cefc77	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-15 14:59:22 +00:00
Bernardo Damele	c51358953a	add more Oracle system dbs	2013-01-15 14:51:29 +00:00
Miroslav Stampar	04aa39f0c6	Minor update	2013-01-15 13:51:19 +01:00
Miroslav Stampar	5ee653dd89	Merging commit 57bcbb458eade2850a6d7623ecddbe49c69cf334 from @morisson	2013-01-15 10:14:02 +01:00
Miroslav Stampar	2cac7e860e	Minor refactoring	2013-01-14 16:27:50 +01:00
Miroslav Stampar	31302eb707	Minor update	2013-01-14 16:26:07 +01:00
Miroslav Stampar	2a86c1cadc	Another cosmetics	2013-01-14 16:24:55 +01:00
Miroslav Stampar	1e1f560d0c	Minor cosmetics	2013-01-14 16:24:28 +01:00
Miroslav Stampar	0c2474cc22	Minor update	2013-01-14 16:21:40 +01:00
Miroslav Stampar	a5a309212a	Fix for an Issue #339	2013-01-14 16:18:03 +01:00
Bernardo Damele	3e2c3851f3	Make --live-test Metasploit integration cases work, added more test cases for PostgreSQL and code refactoring (issue #312)	2013-01-14 13:42:50 +00:00
Bernardo Damele	515c1c6205	removed leftover	2013-01-14 10:26:22 +00:00
Bernardo Damele	83000de9e1	improved handling and storing of exceptions with --live-test (#312)	2013-01-14 10:23:40 +00:00
Bernardo Damele	8125fe90a7	code refactoring	2013-01-14 10:22:38 +00:00
Bernardo Damele	036b612bcb	bug fix to be able to write unicode chars to debug file	2013-01-14 01:11:42 +00:00
Miroslav Stampar	fc560f2b75	Minor revert and proper fix	2013-01-14 00:47:29 +01:00
Bernardo Damele	b74cfbf336	minor enhancements for debug purposes (issue #312)	2013-01-13 23:15:56 +00:00
Bernardo Damele	fdd6075859	temporary patch to fix UNION query enumeration	2013-01-13 23:08:23 +00:00
Miroslav Stampar	92ea8841f8	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-13 16:23:09 +01:00
Miroslav Stampar	03dd958d96	Implementation for an Issue #48	2013-01-13 16:22:43 +01:00
Miroslav Stampar	81848c723d	Minor cleanup (we officially support Python >= 2.6)	2013-01-11 16:01:48 +01:00
Bernardo Damele	675e4a026b	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-11 13:31:49 +00:00
Bernardo Damele	41834e7a5b	working on #8 - still not usable though	2013-01-11 13:31:44 +00:00
Miroslav Stampar	bc4d8d3e02	Implementation for an Issue #332	2013-01-11 11:17:41 +01:00
Miroslav Stampar	5571d09354	Minor revert	2013-01-11 11:13:55 +01:00
Miroslav Stampar	4b79269608	Minor bug fix	2013-01-11 11:10:18 +01:00
Miroslav Stampar	ec4e49d771	Minor refactoring	2013-01-10 16:09:28 +01:00
Miroslav Stampar	1363f26367	Minor refactoring	2013-01-10 15:59:02 +01:00
Miroslav Stampar	834be1eddc	Restyling redundant 'except Exception' form	2013-01-10 15:54:28 +01:00
Miroslav Stampar	acfeeb4f51	Restyling old form of urlparse	2013-01-10 15:41:07 +01:00
Miroslav Stampar	8686c20fa5	Removing one obsolete instantiation line	2013-01-10 15:27:35 +01:00
Miroslav Stampar	934d41dac2	Minor style update (PEP8)	2013-01-10 15:02:28 +01:00
Miroslav Stampar	ca3d35a878	Some PEP8 related style cleaning	2013-01-10 13:18:44 +01:00
Miroslav Stampar	6cfa9cb0b3	Removing unused imports	2013-01-10 12:15:12 +01:00
Miroslav Stampar	05705857a9	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-10 12:09:48 +01:00
Miroslav Stampar	ca1c0c2a1d	Minor style update	2013-01-10 11:54:07 +01:00
Bernardo Damele	ca337159f5	added reminder TODO	2013-01-10 01:11:22 +00:00
Bernardo Damele	8093f3950d	properly distinguish stdout from stderr with a separate pipe (tracebacks go to stderr) - issue #297	2013-01-10 00:52:44 +00:00
Bernardo Damele	10f1099944	remove logging handler that shows logging messages to stdout - issue #297	2013-01-10 00:51:56 +00:00
Bernardo Damele	ccc3c3d1a3	minor fix to distinguish stdout from stderr	2013-01-10 00:51:05 +00:00
Bernardo Damele	ef40779ad3	upgraded to use custom subprocessng for non-blocking send and read functions for spawned processes. Added new method to display range of log messages, just in case and improved parsing/unpickling of read log messages	2013-01-10 00:01:28 +00:00
Bernardo Damele	2126a5ba12	minor index fix	2013-01-10 00:00:00 +00:00
Bernardo Damele	9766f6025e	logging is now handled in a separate file descriptor :) - issue #297	2013-01-09 22:09:50 +00:00
Bernardo Damele	794700eb37	preparing to handle logging calls by a separate file descriptor when sqlmap is executed by the REST API - issue #297	2013-01-09 22:08:50 +00:00
Bernardo Damele	d120dc18d1	cleanup	2013-01-09 22:06:27 +00:00
Bernardo Damele	58a60562ac	avoid exiting with a traceback for missing dependency, handle properly at some point	2013-01-09 16:05:55 +00:00
Bernardo Damele	7f4ce4afbb	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-09 16:04:29 +00:00
Bernardo Damele	510ceb6e19	first attempt to have --os-pwn and other takeover switches work across Windows and Linux - issue #28	2013-01-09 16:04:23 +00:00
Miroslav Stampar	bf5544903b	Minor style update	2013-01-09 16:10:26 +01:00
Miroslav Stampar	9bdcb1176d	Update for an Issue #169	2013-01-09 15:58:13 +01:00
Miroslav Stampar	25f01a419f	Minor style update (for the sake of consistency over the code and our PEP8 adaptation)	2013-01-09 15:38:41 +01:00
Miroslav Stampar	bdd2592848	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-09 15:22:30 +01:00
Miroslav Stampar	3d4f381ab5	Patch for an Issue #169	2013-01-09 15:22:21 +01:00
Bernardo Damele	c44a829b9b	pass a pickled options object to sqlmap engine when called from API	2013-01-09 12:34:45 +00:00
Bernardo Damele	8457cff278	added variable to store the live test traceback if any	2013-01-09 12:33:18 +00:00
Bernardo Damele	f11747732e	added missing command line options	2013-01-09 12:30:13 +00:00
Miroslav Stampar	55a552ddc4	Update for an Issue #24	2013-01-08 10:55:25 +01:00
Miroslav Stampar	ad85c4c964	Minor refactoring for an Issue #295	2013-01-08 10:23:02 +01:00
Bernardo Damele	c155c6df84	minor bug fix for user's provided LIMIT'd statement when technique is full UNION SQLi	2013-01-07 23:31:11 +00:00
Miroslav Stampar	3abe87ac89	Minor fix with status update (Issue #305)	2013-01-07 18:53:08 +01:00
Miroslav Stampar	a8f02916a9	Minor fix (Issue #305)	2013-01-07 18:39:35 +01:00
Miroslav Stampar	e219fad8bf	Added a short comment	2013-01-07 18:19:48 +01:00
Bernardo Damele	1e35b3c8c9	proper link	2013-01-07 16:59:59 +00:00
Miroslav Stampar	96e5d5d178	Some more updates for an Issue #295	2013-01-07 16:55:41 +01:00
Miroslav Stampar	74552bea87	Cleaning some garbage (hard coded paths with linux native slashes)	2013-01-07 16:51:00 +01:00
Miroslav Stampar	425df067eb	Fix for an --os-pwn with ICMPsh (it was crashing because methods interleaved with Metasploit ones)	2013-01-07 16:44:22 +01:00
Miroslav Stampar	ac407ae4a1	Implementation for an Issue #295	2013-01-07 15:55:40 +01:00
Miroslav Stampar	76839ff9d6	Fix for an Issue #305	2013-01-07 12:52:55 +01:00
Bernardo Damele	1e1892c962	prep for subprocess..	2013-01-07 11:10:33 +00:00
Bernardo Damele	7fa75792dd	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2013-01-07 11:10:08 +00:00
Bernardo Damele	a30d7014b9	removed unused var	2013-01-07 11:05:33 +00:00
Miroslav Stampar	87e923613f	Minor adjustment (URI (marked with custom injection char) has precedence over GET/POST)	2013-01-05 21:16:47 +01:00
Miroslav Stampar	dc21f3ce67	Minor just in case filtering of union results	2013-01-04 17:09:07 +01:00
Miroslav Stampar	5b77b20e2e	Removing trailing whitespaces (PEP8)	2013-01-03 23:57:07 +01:00
Miroslav Stampar	82b468211d	Minor update	2013-01-03 23:38:29 +01:00
Miroslav Stampar	f340ce8b4b	Minor style update	2013-01-03 23:35:29 +01:00
Miroslav Stampar	1712603dce	Replacing deprecated has_key() with operator in (PEP8)	2013-01-03 23:28:07 +01:00
Miroslav Stampar	e4a3c015e5	Replacing old and deprecated raise Exception style (PEP8)	2013-01-03 23:20:55 +01:00
Bernardo Damele	3a11d36c66	minor bug fix	2013-01-02 21:49:15 +00:00
Miroslav Stampar	cb15fcc8af	Fix for an Issue #329	2013-01-02 22:17:06 +01:00
Miroslav Stampar	304e52cb4d	Minor language update	2013-01-02 22:11:59 +01:00
Miroslav Stampar	09f1cdd8e1	Minor style update	2013-01-02 21:52:50 +01:00
Miroslav Stampar	0795760255	Minor fix	2012-12-30 11:22:23 +01:00
Miroslav Stampar	75edb84a71	Minor update	2012-12-30 11:10:32 +01:00
Miroslav Stampar	58ad2f1c5d	Revert of last commit and proper fix	2012-12-29 10:35:05 +01:00
Miroslav Stampar	0e18fa9c5f	Minor fix	2012-12-28 23:43:47 +01:00
Miroslav Stampar	648d91d790	Distinguishing invalid unicode from safe encoded characters (for proper potential decoding)	2012-12-27 22:43:39 +01:00
Miroslav Stampar	3d01890147	Patch for an Issue #56 (full target url is now being written to a output .CSV file in multi target mode)	2012-12-27 21:15:44 +01:00
Miroslav Stampar	cb91729913	Fix for an Issue #324 (crawling when HTML is not well-formed)	2012-12-27 20:55:37 +01:00
Miroslav Stampar	127b880577	Minor update	2012-12-27 15:14:40 +01:00
Miroslav Stampar	6ae4590edc	Removing problematic per-MySQL LIMIT prefix	2012-12-26 19:48:01 +01:00
Miroslav Stampar	a77b7f00d9	Fix for an Issue #323	2012-12-23 19:34:35 +01:00
Bernardo Damele	832567ecf6	import order	2012-12-21 23:34:37 +00:00
Miroslav Stampar	77625e5af7	Minor revert	2012-12-21 19:31:05 +01:00
Miroslav Stampar	00e55828e4	Minor style update	2012-12-21 15:06:03 +01:00
Miroslav Stampar	8b3e17ed4d	Minor update (better approach for those old NOT IN cases in MsSQL - instead of standard pivot dump table)	2012-12-21 14:52:47 +01:00
Miroslav Stampar	6c1ec9b54f	Fix for an Issue #318	2012-12-21 11:10:05 +01:00
Miroslav Stampar	35728fa443	Fix (and some hidden bug fixes/improvements) regarding an Issue #317	2012-12-21 10:51:35 +01:00
Miroslav Stampar	352e516400	Bottle is a 3rd party tool (not going to extra folder)	2012-12-21 10:18:30 +01:00
Miroslav Stampar	b94a5d42d4	Removing a leftover	2012-12-21 09:49:09 +01:00
Miroslav Stampar	0a122ccce4	Related to an Issue #319	2012-12-21 09:47:58 +01:00
Miroslav Stampar	0d5d84edc7	Minor cleanup	2012-12-20 21:03:41 +01:00
Miroslav Stampar	712cf4e4db	Fix for an Issue #316	2012-12-20 20:55:59 +01:00
Miroslav Stampar	1073ebc697	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2012-12-20 20:51:41 +01:00
Bernardo Damele	89d8c58fd1	poor attempt at forking a child process for sqlmap engine execution, output is not handled yet	2012-12-20 17:56:53 +00:00
Bernardo Damele	912323c12d	minor bug fix (#297)	2012-12-20 17:05:44 +00:00
Bernardo Damele	7adaffa71b	fixed options initiation	2012-12-20 16:53:43 +00:00
Miroslav Stampar	1c4d438aff	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2012-12-20 16:37:03 +01:00
Bernardo Damele	b0635bddcc	adjustments	2012-12-20 15:29:23 +00:00
Miroslav Stampar	8efe056671	Minor refactoring	2012-12-20 15:51:03 +01:00
Bernardo Damele	e9ab33e9dd	standalone REST API, code cleanup (#297)	2012-12-20 14:35:02 +00:00
Bernardo Damele	5632279bf7	removed deprecated feature (#287)	2012-12-20 13:21:07 +00:00
Miroslav Stampar	63d9b7a1f8	No character shall be left forgotten (no more ? in case that character was not properly being decoded by used charset)	2012-12-20 12:23:37 +01:00
Miroslav Stampar	c2c4601d6e	Minor restyling	2012-12-20 11:06:52 +01:00
Bernardo Damele	076b4063e6	these edits got overwritten from last commits	2012-12-20 09:42:44 +00:00
Miroslav Stampar	3cbe60b586	Proper fix	2012-12-20 10:37:20 +01:00
Miroslav Stampar	0d1ea7f05a	Merge branch 'master' of github.com:sqlmapproject/sqlmap ... Conflicts: lib/core/testing.py	2012-12-20 10:37:11 +01:00
Miroslav Stampar	da93e77eb2	Proper fix	2012-12-20 10:34:51 +01:00
Bernardo Damele	ac77724970	attempt to handle standard input from --live-test	2012-12-20 09:30:48 +00:00
Bernardo Damele	2b6ee06de0	minor bug fix to correctly parse unicode chars	2012-12-20 09:30:13 +00:00
Miroslav Stampar	69310e47ce	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2012-12-20 09:54:39 +01:00
Miroslav Stampar	06d8213ffd	minor fix (reading of unicode xml files)	2012-12-20 09:53:08 +01:00
Bernardo Damele	86872956d5	minor bug fix (for PostgreSQL)	2012-12-19 22:55:31 +00:00
Bernardo Damele	77843f44fb	minor bug fix (issue #314)	2012-12-19 22:49:02 +00:00
Bernardo Damele	357da43cea	slight improvement of live test engine and added misc test cases to xml	2012-12-19 17:28:41 +00:00
Bernardo Damele	85fcd27e2d	added support for random global variables	2012-12-19 15:58:06 +00:00
Bernardo Damele	12d34587cc	minor restyling	2012-12-19 14:34:34 +00:00
Bernardo Damele	326ff404fc	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2012-12-19 14:25:35 +00:00
Bernardo Damele	12eed58485	pointless restyling	2012-12-19 14:25:29 +00:00
Miroslav Stampar	37346fe8a3	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2012-12-19 15:23:57 +01:00
Miroslav Stampar	7ee98c7bff	Just for one girl out there waiting for this patch ;)	2012-12-19 15:23:38 +01:00
Bernardo Damele	3be90c97aa	forgot these	2012-12-19 14:12:45 +00:00
Bernardo Damele	cefb03c835	fixed bug related to issue #223	2012-12-19 14:12:09 +00:00
Bernardo Damele	27a12ae85b	restyling	2012-12-19 13:47:17 +00:00
Bernardo Damele	4b3b4eb374	commented out partial work	2012-12-19 13:47:04 +00:00
Bernardo Damele	3655d1f12a	revert change of name for now	2012-12-19 13:45:52 +00:00
Bernardo Damele	874e2176c6	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2012-12-19 13:43:00 +00:00
Bernardo Damele	4f0f729982	be more specific in standard output message as to whether or not the read file is same as remote file	2012-12-19 13:42:56 +00:00
Miroslav Stampar	23153e8088	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2012-12-19 14:29:08 +01:00
Miroslav Stampar	244901eda0	During --flush-session log file should be cleaned too (especially because of --live-tests)	2012-12-19 14:28:54 +01:00
Bernardo Damele	282aeb734f	ORDER BY does not play well with UNION query SQLi (related to issue #313)	2012-12-19 13:21:16 +00:00
Bernardo Damele	259b345f1f	catch ImportError exception if libmagic is not installed	2012-12-19 13:10:54 +00:00
Bernardo Damele	128597ee7e	--run-case is now case insensitive	2012-12-19 12:45:46 +00:00
Bernardo Damele	b91c829103	minor bug fix (issue #310)	2012-12-19 12:42:31 +00:00
Bernardo Damele	2bc2c0431c	fixed test cases	2012-12-19 12:33:37 +00:00
Bernardo Damele	9149d77cc8	removed duplicate code - fixes issue #310	2012-12-19 12:17:56 +00:00
Bernardo Damele	d80744d3d5	preparation for issue #310	2012-12-19 11:40:00 +00:00
Bernardo Damele	f5450e9f0e	layout adjustment	2012-12-19 11:39:38 +00:00
Bernardo Damele	dee56b17c3	handle "LIMIT num" as well as "LIMIT num, num" across all techniques - fixes issue #308	2012-12-19 10:50:15 +00:00
Miroslav Stampar	155c1eddae	Debug message with declared page charset	2012-12-19 11:16:42 +01:00
Miroslav Stampar	d29dddf5b2	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2012-12-19 10:51:25 +01:00
Miroslav Stampar	92e338251a	Finally working inference against MySQL/international letters (even chinese)	2012-12-19 10:44:02 +01:00
Bernardo Damele	65ed2304fd	comment update	2012-12-19 09:38:03 +00:00
Bernardo Damele	0037d52098	typo fix	2012-12-19 01:11:18 +00:00
Miroslav Stampar	c9b8b51c9c	Update lib/core/common.py ... Revert of last commit and try 2	2012-12-19 01:48:53 +01:00
Bernardo Damele	8e95470415	minor refactoring	2012-12-19 00:46:23 +00:00
Bernardo Damele	318fcee49c	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2012-12-19 00:30:26 +00:00
Bernardo Damele	3c7007097a	minor refactoring	2012-12-19 00:30:22 +00:00
Miroslav Stampar	50b846b5af	Update lib/core/common.py ... Fixing wrong assumption in case of MySQL inference international character retrieval	2012-12-19 01:26:12 +01:00
Miroslav Stampar	9e2f0131b9	Update lib/core/agent.py	2012-12-18 20:25:00 +01:00
Bernardo Damele	326ed33f31	added support for comma separated list of files for --file-read - fixes issue #223	2012-12-18 17:55:21 +00:00
Bernardo Damele	58656bbeb5	minor bug fix, union query has to be limited 0, 0	2012-12-18 16:36:30 +00:00
Bernardo Damele	61a838bb35	added more test cases	2012-12-18 15:59:48 +00:00
Miroslav Stampar	88d8494b5a	Implementation for an Issue #307	2012-12-18 16:03:35 +01:00
Miroslav Stampar	7f47623876	Minor patch	2012-12-18 11:10:06 +01:00
Miroslav Stampar	2b64c10710	Patch for an Issue #304	2012-12-18 09:36:26 +01:00
Miroslav Stampar	4ea0c9e922	Another implementation for an Issue #302	2012-12-17 15:08:54 +01:00
Bernardo Damele	3c1b696bd6	removed more print statements	2012-12-17 13:35:32 +00:00
Bernardo Damele	1fdd804e94	replaced instances of dataToStdout with logger	2012-12-17 13:30:21 +00:00
Bernardo Damele	9f47eb0a59	cleaner	2012-12-17 13:29:37 +00:00
Bernardo Damele	0500712a03	removed unuseful prints	2012-12-17 13:29:19 +00:00
Bernardo Damele	ac44cf3ec0	minor fix: add also back-end DBMS and web app fingerprint output to log file	2012-12-17 13:02:09 +00:00
Bernardo Damele	bbd2adb5fb	improvements to --live-test and added --stop-fail switch	2012-12-17 11:41:43 +00:00
Bernardo Damele	064d443d60	replaced unnecessary dataToStdout() call with appropriate logger.info() call	2012-12-17 11:30:08 +00:00
Bernardo Damele	2926c815bf	improved test switch --live-test and minor refactoring	2012-12-17 11:29:33 +00:00
Bernardo Damele	f40c52cc17	comment adjustment	2012-12-17 11:28:03 +00:00
Bernardo Damele	2442a58884	minor leftover of deprecated XMLRPC service	2012-12-17 11:26:31 +00:00
Miroslav Stampar	60baf5071e	Patch for an Issue #302	2012-12-17 00:40:01 +01:00
Bernardo Damele	d4a061d0c3	code cleanup - #297	2012-12-15 00:29:35 +00:00
Bernardo Damele	0c3da5c7eb	code refactoring and first time logger is handled by a separate file descriptor (issue #297)	2012-12-15 00:12:22 +00:00
Bernardo Damele	2f6a31605c	code refactoring (#279)	2012-12-14 22:00:42 +00:00
Bernardo Damele	8dee8355c2	on our way to make it thread safe.. it is a long way actually (issue #297)	2012-12-14 18:13:21 +00:00
Bernardo Damele	21ecffb750	added more comments, improved cleanup method	2012-12-14 17:21:19 +00:00
Bernardo Damele	1421e6a9d4	implemented cleanup and status admin methods	2012-12-14 16:18:45 +00:00
Bernardo Damele	4fa2f400ec	minor fix	2012-12-14 15:55:30 +00:00
Bernardo Damele	4c4cb856ff	minor bug fix to the /scan/<taskid>output method, forced each taskid to have its own temporary folder for output - issue #297	2012-12-14 15:52:35 +00:00
Bernardo Damele	27906f388f	added first methods to interact with sqlmap core, it is now possible to launch a scan from the API, hurray! (issue #297)	2012-12-14 14:51:01 +00:00
Bernardo Damele	f52d81c834	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2012-12-14 13:40:36 +00:00
Bernardo Damele	0b71c85d95	refactoring, code cleanup, more security-related headers and first /scan method implementation (issue #297)	2012-12-14 13:40:25 +00:00
Bernardo Damele	a2a71bb37b	cleanup from XML-RPC related stuff	2012-12-14 13:37:36 +00:00
Miroslav Stampar	a3acf72e52	Fix for argparse issue	2012-12-14 14:35:11 +01:00
Miroslav Stampar	235631808f	Merge branch 'master' of github.com:sqlmapproject/sqlmap	2012-12-14 14:25:02 +01:00
Bernardo Damele	3d9779ffd4	further improvements to RESTful API: enforce security headers across all HTTP responses properly and make consistent responses across methods (#297)	2012-12-14 12:15:04 +00:00
Bernardo Damele	7b43837238	cleaner solution for imports as standalone client/server (issue #297)	2012-12-14 12:04:44 +00:00
Bernardo Damele	90d5696b25	enhanced RESTful API to support JSON requests and improved standalone client/server skeleton (issue #297)	2012-12-14 12:01:13 +00:00
Bernardo Damele	156a291e2d	typo fix	2012-12-14 11:55:54 +00:00
Miroslav Stampar	c41618416c	Removing trailing blanks	2012-12-14 12:00:45 +01:00
Bernardo Damele	2e97405ffa	bundle bottle library in sqlmap (it is MIT license) - issue #297	2012-12-14 03:00:30 +00:00
Bernardo Damele	0ec420cc70	leftovers	2012-12-14 02:54:16 +00:00
Bernardo Damele	a1b83cd56f	added first implementation of REST-JSON API library - issue #297	2012-12-14 02:52:31 +00:00
Bernardo Damele	6e31e87de1	added initial support (hidden from -hh and not yet usable) for REST-JSON API	2012-12-14 02:49:25 +00:00
Miroslav Stampar	c040323821	Minor update	2012-12-13 14:55:20 +01:00
Miroslav Stampar	df0f08bc6a	Cleaning some (web upload based) garbage	2012-12-13 13:19:47 +01:00
Miroslav Stampar	5150172178	Minor update	2012-12-13 10:03:21 +01:00
Miroslav Stampar	b78b56d782	Update for an Issue #287 regarding read_output returning values	2012-12-12 17:17:36 +01:00
Miroslav Stampar	fc4be0a77c	Minor fix	2012-12-12 16:45:29 +01:00
Miroslav Stampar	e381158058	Hmmm... Let me guess. Update for an Issue #287	2012-12-12 16:31:20 +01:00
Miroslav Stampar	921000bd87	Another update for an Issue #287	2012-12-12 14:22:24 +01:00
Miroslav Stampar	c3f20a136f	Minor update for an Issue #287	2012-12-12 14:03:03 +01:00
Miroslav Stampar	32b39c72e4	Minor update	2012-12-12 12:07:56 +01:00
Miroslav Stampar	af52e8e8c2	Minor update for an Issue #287	2012-12-12 12:01:18 +01:00
Miroslav Stampar	a6448e8768	Update for an Issue #287	2012-12-12 11:54:59 +01:00
Miroslav Stampar	ef33729381	Writing only unique hashes to an output file (for eventual cracking with 3rd party tools)	2012-12-12 09:59:24 +01:00
Miroslav Stampar	b9f6fc5f4e	First commit (and working one) for an Issue #287 (XML-RPC server)	2012-12-11 16:02:06 +01:00
Miroslav Stampar	b5884c7eda	Minor language update	2012-12-11 15:24:02 +01:00
Miroslav Stampar	760519dbe9	Removing redundant piece of code	2012-12-11 15:21:27 +01:00
Miroslav Stampar	a54c261496	Minor update for Issues #292 & #293 (only single alert per target)	2012-12-11 14:44:43 +01:00
Miroslav Stampar	5c2451d83c	Implementation for an Issue #293	2012-12-11 12:48:58 +01:00
Miroslav Stampar	562044577b	Implementation for an Issue #292	2012-12-11 12:02:06 +01:00
Miroslav Stampar	6433be8b3d	Style update	2012-12-10 17:20:04 +01:00
Miroslav Stampar	996e882e78	Minor update	2012-12-10 17:13:00 +01:00
Miroslav Stampar	013dc8bc98	Another minor update for an Issue #267	2012-12-10 13:07:36 +01:00
Miroslav Stampar	8bd0080bf4	Minor update for an Issue #267	2012-12-10 13:05:41 +01:00
Miroslav Stampar	96df0ba061	Implemented support for plain , chars too (Issue #267)	2012-12-10 12:58:17 +01:00
Miroslav Stampar	d0ea4c65c5	Minor styl eupdate for an Issue #267	2012-12-10 12:54:01 +01:00
Miroslav Stampar	5677db02b7	Minor update	2012-12-10 12:40:28 +01:00
Miroslav Stampar	5606a860ce	Oracle supports inline comments too (Issue #267)	2012-12-10 12:00:15 +01:00
Miroslav Stampar	a024884ca7	Support for a HTTP parameter pollution (Issue #267)	2012-12-10 11:55:31 +01:00
Miroslav Stampar	42f4c2bac9	Minor fix when --dbms is enforced	2012-12-10 11:42:10 +01:00
Miroslav Stampar	1f7644a691	Minor fix when user doesn't want custom injection char marker to be processed	2012-12-08 21:23:30 +01:00
Miroslav Stampar	0cbdaaecfa	Revert of 99e9412f74 (because of an Issue #289)	2012-12-08 08:53:25 +01:00
Miroslav Stampar	73968a448c	Minor update	2012-12-07 15:29:54 +01:00
Miroslav Stampar	e129a30e6b	Removing redundant code in redirect handler (related to an Issue #288)	2012-12-07 12:40:19 +01:00
Miroslav Stampar	fccad15cfa	Minor update for an Issue #288	2012-12-07 12:14:33 +01:00
Miroslav Stampar	75e6d77fbc	Minor refactoring	2012-12-07 11:54:34 +01:00
Miroslav Stampar	fbaeecdaf9	Patch for an Issue #288	2012-12-07 11:52:21 +01:00
Miroslav Stampar	c0fc12beb2	Minor update for an Issue #288	2012-12-07 11:23:18 +01:00
Miroslav Stampar	1028afce37	Removal of leftovers	2012-12-06 14:15:44 +01:00
Miroslav Stampar	974407396e	Doing some more style updating (capitalization of exception classes; using _ is enough for private members - __ is used in Python specific methods)	2012-12-06 14:14:19 +01:00
Miroslav Stampar	003d21e962	Minor style update (capitalization of leftover class names)	2012-12-06 13:46:24 +01:00
Miroslav Stampar	baccbd6f48	Implementation for an Issue #283	2012-12-06 11:57:57 +01:00
Miroslav Stampar	ab67344448	Removed unused imports and variables (pyflake-ing)	2012-12-06 11:15:05 +01:00
Miroslav Stampar	b6650add46	Introducing 'new style classes' (idea from Pull request #284)	2012-12-06 10:42:53 +01:00
Miroslav Stampar	0f191f624c	Taking some goodies from Pull request #284	2012-12-06 10:21:53 +01:00
Miroslav Stampar	6b39e661a7	Fix for an issue #279	2012-12-05 12:15:14 +01:00
Miroslav Stampar	775e0df04b	Update for an Issue #278	2012-12-05 10:45:17 +01:00
Miroslav Stampar	949fcb77cf	Minor style update	2012-12-05 10:22:16 +01:00
Miroslav Stampar	d4b5133df7	Update for an Issue #272	2012-12-04 17:04:32 +01:00
Miroslav Stampar	a14697e8cf	Implementation for an Issue #272	2012-12-04 16:47:34 +01:00
Miroslav Stampar	6b007ab188	Minor patch for an Issue #274 (just in case to avoid this kind of problems)	2012-12-04 16:14:14 +01:00
Miroslav Stampar	e2aa695655	Minor update	2012-12-03 17:20:18 +01:00
Miroslav Stampar	42a8234c6f	Update for an Issue #12	2012-12-03 14:27:01 +01:00
Miroslav Stampar	79fca8e9d5	Fix for an Issue #268	2012-12-03 12:13:59 +01:00
Miroslav Stampar	8410fc5a9d	Minor update	2012-12-02 08:00:55 +01:00
redshark1802	1675386093	fixed typo that created an invalid configuration file with the option '--save'	2012-11-30 23:00:03 +01:00
Miroslav Stampar	0664e72bea	Minor fix for an Issue #230	2012-11-30 12:13:34 +01:00
Miroslav Stampar	5b61e9ce12	Minor update for an Issue #254	2012-11-30 11:43:50 +01:00
Miroslav Stampar	7e2db762d6	Minor update	2012-11-29 15:45:04 +01:00
Miroslav Stampar	8f10023523	Fix for an Issue #266	2012-11-29 15:44:14 +01:00
Miroslav Stampar	3b961c2550	Update for an Issue #254	2012-11-29 15:36:38 +01:00
Miroslav Stampar	605d73cc3d	Minor refactoring	2012-11-29 12:21:12 +01:00
Miroslav Stampar	7304971544	Patch for ORDER BY test on MsSQL on cases with 'The text, ntext, and image data types cannot be compared or sorted, except when using IS NULL or LIKE operator'	2012-11-29 11:43:49 +01:00
Miroslav Stampar	7c16bfe025	Fix for error-based MsSQL dumping (in some cases failed because of wrong order - e.g. MIN(SUBSTRING( instead of SUBSTRING(MIN )	2012-11-29 10:51:59 +01:00
Miroslav Stampar	a7e1e856d4	Fix for an Issue #260	2012-11-28 17:00:26 +01:00
Miroslav Stampar	35d1146fd1	Minor update for an (Issue #254)	2012-11-28 12:53:11 +01:00
Miroslav Stampar	753d0f18bf	First CSS style added for a HTML table dump format (Issue #254)	2012-11-28 12:46:43 +01:00
Miroslav Stampar	b6ea337937	First style-less prototype for an HTML dump output (Issue #254)	2012-11-28 12:28:42 +01:00
Miroslav Stampar	e2d8b53e97	Minor update for an Issue #264	2012-11-28 11:45:33 +01:00
Miroslav Stampar	cff0c59630	Implementation for an Issue #264	2012-11-28 11:41:39 +01:00
Miroslav Stampar	5bf5b95588	More refactoring for an Issue #254	2012-11-28 11:16:00 +01:00