Miroslav Stampar
|
3ef01f0e31
|
Minor update
|
2016-09-28 14:48:33 +02:00 |
|
Miroslav Stampar
|
d36b5c0a4b
|
Adding time-based blind (heavy query) payloads for Informix (Issue #552)
|
2016-09-28 10:30:09 +02:00 |
|
Miroslav Stampar
|
e5a758bdf4
|
Fixes #2192
|
2016-09-28 09:55:14 +02:00 |
|
Miroslav Stampar
|
617509869d
|
Minor patch for Informix --parse-errors
|
2016-09-27 14:58:10 +02:00 |
|
Miroslav Stampar
|
5079c42788
|
Adding Informix parameter replacement payloads (Issue #552)
|
2016-09-27 14:39:17 +02:00 |
|
Miroslav Stampar
|
bc7ab01066
|
Bug fix for generic parameter replacement (CASE)
|
2016-09-27 14:29:18 +02:00 |
|
Miroslav Stampar
|
212c1ec1f2
|
Couple of fixes and some testing stuff
|
2016-09-27 14:03:59 +02:00 |
|
Miroslav Stampar
|
381deb68ff
|
Implementation for an Issue #2137
|
2016-09-27 13:26:11 +02:00 |
|
Miroslav Stampar
|
ba0facb5eb
|
Removal of unused imports
|
2016-09-27 11:23:31 +02:00 |
|
Miroslav Stampar
|
7151df16f6
|
Adding extra validation step in case of boolean-based blind (e.g. if unexpected 500 occurs)
|
2016-09-27 11:21:12 +02:00 |
|
Miroslav Stampar
|
8994bf2dba
|
Further dealing with time-based SQLi (Issue #1973)
|
2016-09-27 10:32:22 +02:00 |
|
Miroslav Stampar
|
09617c8243
|
Introducing extra validation property in case of time-based SQLi (HTTP code) - Issue #1973
|
2016-09-27 10:20:36 +02:00 |
|
Miroslav Stampar
|
556b4d289e
|
Minor cosmetic patch (removing multiple same content '...appears...' messages)
|
2016-09-26 17:02:40 +02:00 |
|
Miroslav Stampar
|
978f56ad10
|
One more commit for #552 (--passwords)
|
2016-09-26 16:38:03 +02:00 |
|
Miroslav Stampar
|
aa0b97b562
|
Support for Informix --roles/--privileges (Issue #552)
|
2016-09-26 14:20:04 +02:00 |
|
Miroslav Stampar
|
df645d7d3d
|
Update for column types (Issue #552)
|
2016-09-23 18:03:31 +02:00 |
|
Miroslav Stampar
|
035137ef4e
|
Bug fix in detection engine (abstract URI header sometimes caused problems - e.g. when automatic --string used)
|
2016-09-23 17:38:14 +02:00 |
|
Miroslav Stampar
|
484d9a4825
|
Implementation of --dump for Informix (Issue #552)
|
2016-09-23 17:21:48 +02:00 |
|
Miroslav Stampar
|
65c305cff0
|
Fixes #2174
|
2016-09-23 15:41:12 +02:00 |
|
Miroslav Stampar
|
9a5fc5ccf4
|
New auxiliary (extra) file (for administration purposes)
|
2016-09-23 13:57:18 +02:00 |
|
Miroslav Stampar
|
51a1973224
|
Stripping PostgreSQL .so files for size issues (Issue #2173)
|
2016-09-23 13:52:57 +02:00 |
|
Miroslav Stampar
|
2f2a63334a
|
Minor cleanup
|
2016-09-23 13:39:27 +02:00 |
|
Miroslav Stampar
|
23afeb4c7a
|
Fixes #2176
|
2016-09-23 13:37:44 +02:00 |
|
Miroslav Stampar
|
b387fb219d
|
Fixes #2175
|
2016-09-23 12:45:06 +02:00 |
|
Miroslav Stampar
|
1b48ff223d
|
Adding initial support for Informix (Issue #552)
|
2016-09-23 12:33:27 +02:00 |
|
Miroslav Stampar
|
640e605412
|
More CTF friendly (common column and table name flag :)
|
2016-09-23 12:31:28 +02:00 |
|
Miroslav Stampar
|
e10bb42597
|
Minor tweak
|
2016-09-22 10:22:48 +02:00 |
|
Miroslav Stampar
|
9902018cab
|
Implementation for an Issue #2172
|
2016-09-21 15:45:55 +02:00 |
|
Miroslav Stampar
|
56a918c408
|
Minor refactoring
|
2016-09-20 10:03:00 +02:00 |
|
Miroslav Stampar
|
bcd62ecc5b
|
Minor optimization (avoiding unnecessary deepcopies)
|
2016-09-20 09:56:08 +02:00 |
|
Miroslav Stampar
|
e519484230
|
Patching live-testing
|
2016-09-19 15:51:28 +02:00 |
|
Miroslav Stampar
|
a2c8f1deb1
|
Update PgSQL fingerprinting payloads
|
2016-09-19 14:23:51 +02:00 |
|
Miroslav Stampar
|
12dc53f687
|
Minor update
|
2016-09-19 13:54:06 +02:00 |
|
Miroslav Stampar
|
b3b5bd267d
|
Adding new tamper script (on request from @MilanGabor)
|
2016-09-15 17:59:01 +02:00 |
|
Miroslav Stampar
|
921a53e314
|
Patch for counter in --smoke-test
|
2016-09-09 14:59:22 +02:00 |
|
Miroslav Stampar
|
32dd4a938c
|
Minor patch of message
|
2016-09-09 11:37:16 +02:00 |
|
Miroslav Stampar
|
9930f1b55b
|
Speed optimization(s)
|
2016-09-09 11:06:38 +02:00 |
|
Miroslav Stampar
|
8581d9e2ca
|
Minor improvement of SELECT_FROM_TABLE_REGEX
|
2016-09-09 09:45:48 +02:00 |
|
Miroslav Stampar
|
1a613ed9a8
|
Minor update
|
2016-09-08 14:08:14 +02:00 |
|
Miroslav Stampar
|
78e398d9c4
|
Fixes #2136
|
2016-09-06 15:03:17 +02:00 |
|
Miroslav Stampar
|
e3c3c2c185
|
Fixes #2148
|
2016-09-06 14:25:29 +02:00 |
|
Miroslav Stampar
|
4e36bbaff9
|
Update related to the last commit
|
2016-09-04 03:09:28 +02:00 |
|
Miroslav Stampar
|
603e9739ae
|
Fixes #2146
|
2016-09-04 01:33:52 +02:00 |
|
Miroslav Stampar
|
6b91b7b7fa
|
Minor cosmetics
|
2016-09-02 16:10:11 +02:00 |
|
Miroslav Stampar
|
2e62fda57d
|
Minor update
|
2016-09-02 15:55:33 +02:00 |
|
Miroslav Stampar
|
5ad27264a2
|
Patches #2143
|
2016-09-02 15:52:07 +02:00 |
|
Miroslav Stampar
|
c4d8cab50c
|
Version string bug fix
|
2016-09-02 14:25:56 +02:00 |
|
Miroslav Stampar
|
577e346774
|
Fixes #2144
|
2016-09-02 14:20:17 +02:00 |
|
Miroslav Stampar
|
375abd50ee
|
Minor update for #2134
|
2016-08-30 12:36:32 +02:00 |
|
Miroslav Stampar
|
4a815ab56f
|
Patch for an Issue #1250
|
2016-08-27 23:54:09 +02:00 |
|
Miroslav Stampar
|
6564adc984
|
Minor patch for buffered write into checksum.md5
|
2016-08-27 23:34:12 +02:00 |
|
Miroslav Stampar
|
ad5b8017f5
|
Minor refactoring
|
2016-08-26 12:28:35 +02:00 |
|
Miroslav Stampar
|
72e5a79288
|
Fixes #2106
|
2016-08-19 11:07:42 +02:00 |
|
Miroslav Stampar
|
63f4b3462f
|
Fixes #2105
|
2016-08-15 18:35:04 +02:00 |
|
Miroslav Stampar
|
a45a90df94
|
Adding new WAF script (Yunsuo)
|
2016-08-12 14:32:03 +02:00 |
|
Miroslav Stampar
|
ec1ac81e0a
|
Minor refactoring
|
2016-08-08 16:08:16 +02:00 |
|
Miroslav Stampar
|
6ba46bf7cf
|
Update for #2086 (lowercasing only the command)
|
2016-08-08 15:55:39 +02:00 |
|
Miroslav Stampar
|
b92fc840fe
|
Adding pypi script to the repository
|
2016-08-02 13:21:05 +02:00 |
|
Miroslav Stampar
|
ef79bbf7d2
|
Minor patch
|
2016-08-02 12:38:57 +02:00 |
|
Miroslav Stampar
|
fba1199cd2
|
Minor consistency update
|
2016-08-02 12:05:39 +02:00 |
|
Miroslav Stampar
|
4022a68523
|
Removing last debug commit
|
2016-08-02 12:01:49 +02:00 |
|
Miroslav Stampar
|
67bc3ed359
|
Trying out the last commit
|
2016-08-02 12:01:02 +02:00 |
|
Miroslav Stampar
|
a0ddd99087
|
Minor update for automatic PyPI packaging
|
2016-08-02 12:00:21 +02:00 |
|
Miroslav Stampar
|
2a7ef58c9f
|
Minor refactoring
|
2016-08-02 11:55:11 +02:00 |
|
Miroslav Stampar
|
35010006a1
|
Some cosmetic changes
|
2016-08-02 11:50:42 +02:00 |
|
Miroslav Stampar
|
acfe788c95
|
Preparing for #1250
|
2016-08-02 00:17:59 +02:00 |
|
Miroslav Stampar
|
5ccb73a1ee
|
Minor patch for Python3 check
|
2016-07-29 15:30:59 +02:00 |
|
Miroslav Stampar
|
6ac5b6b759
|
Minor refactoring
|
2016-07-28 17:04:15 +02:00 |
|
Miroslav Stampar
|
d82f20abc4
|
Fixes #2068
|
2016-07-28 17:02:27 +02:00 |
|
Miroslav Stampar
|
10eafa35fd
|
Adding CloudFlare CAPTCHA warning
|
2016-07-23 23:02:15 +02:00 |
|
Miroslav Stampar
|
9105f259cd
|
Fixes #2060 (ParseError has been added in Python 2.7)
|
2016-07-23 15:27:25 +02:00 |
|
Miroslav Stampar
|
7cca56edfa
|
Fixes #2052
|
2016-07-21 09:38:52 +02:00 |
|
Miroslav Stampar
|
e21d751834
|
Fixes #2049
|
2016-07-20 20:04:44 +02:00 |
|
Miroslav Stampar
|
ebb73b71fa
|
Fixes #2045
|
2016-07-20 16:49:27 +02:00 |
|
Miroslav Stampar
|
1ca633ae64
|
Fixes #2031
|
2016-07-17 23:30:40 +02:00 |
|
Miroslav Stampar
|
3e22cbfed7
|
Minor update
|
2016-07-17 00:34:14 +02:00 |
|
Miroslav Stampar
|
c7f615f707
|
Renaming payload files (consistency with the rest of the project)
|
2016-07-17 00:21:16 +02:00 |
|
Miroslav Stampar
|
b83ee92cd1
|
Minor modification
|
2016-07-17 00:09:09 +02:00 |
|
Miroslav Stampar
|
571d669a09
|
Minor modification
|
2016-07-17 00:07:58 +02:00 |
|
Miroslav Stampar
|
e485531b71
|
Adding integrity checks in case of unhandled exceptions
|
2016-07-17 00:04:30 +02:00 |
|
Miroslav Stampar
|
7427b554e3
|
Adding support for integrity checks
|
2016-07-16 23:25:13 +02:00 |
|
Miroslav Stampar
|
1a818ceccd
|
Adding error message regarding #2030
|
2016-07-16 22:47:16 +02:00 |
|
Miroslav Stampar
|
7fea8d608e
|
Fixes #2028
|
2016-07-16 22:42:15 +02:00 |
|
Miroslav Stampar
|
1e6191e3b1
|
Fixes #2026
|
2016-07-16 15:51:09 +02:00 |
|
Miroslav Stampar
|
c10b2825d7
|
Patch for --os-shell against Windows/MySQL where resulting \r caused trouble
|
2016-07-15 11:56:51 +02:00 |
|
Miroslav Stampar
|
c200b2cb19
|
Another fix (related to the last commit)
|
2016-07-15 11:45:59 +02:00 |
|
Miroslav Stampar
|
071f4c8a2b
|
Bug fix (reported privately) - better parsing of file paths (especially for Windows cases)
|
2016-07-15 11:13:47 +02:00 |
|
Miroslav Stampar
|
5097a2c79e
|
Less timeout error messages (because of server dropping of non-active connections)
|
2016-07-15 00:33:33 +02:00 |
|
Miroslav Stampar
|
bce9db1af5
|
Adding support for --columns too (Issue #2025)
|
2016-07-15 00:10:41 +02:00 |
|
Miroslav Stampar
|
ca67456dbe
|
Removing a debugging leftover (Issue #2025)
|
2016-07-14 23:39:44 +02:00 |
|
Miroslav Stampar
|
6df4d73b09
|
Implementation for an Issue #2025
|
2016-07-14 23:18:28 +02:00 |
|
Miroslav Stampar
|
2aaa486f7a
|
Minor code style update
|
2016-07-13 14:09:33 +02:00 |
|
Miroslav Stampar
|
47ba7d4705
|
Minor update
|
2016-07-07 10:37:00 +02:00 |
|
Miroslav Stampar
|
2e42afea6f
|
Update of sucury WAF script
|
2016-07-06 23:43:21 +02:00 |
|
Miroslav Stampar
|
292a28131d
|
Minor updates
|
2016-07-06 23:43:10 +02:00 |
|
Miroslav Stampar
|
2e775fbb75
|
(e.g.) ASPx MsSQL Chinese exception messages don't start with 'Exception: string'
|
2016-07-06 14:06:18 +02:00 |
|
Miroslav Stampar
|
e1d7641b8a
|
Good for different generic OleDB-alike connectors
|
2016-07-06 13:48:35 +02:00 |
|
Miroslav Stampar
|
6b0951d1ee
|
Switching default Tor type to SOCKS5 (various bundles are discontinued)
|
2016-07-06 13:30:46 +02:00 |
|
Miroslav Stampar
|
db1fc621b5
|
Update for SonicWALL WAF script; lesser false positives with ModSecurity WAF script
|
2016-07-06 13:19:51 +02:00 |
|
Miroslav Stampar
|
9351756c36
|
Minor update of format exception strings
|
2016-07-05 16:02:34 +02:00 |
|
Miroslav Stampar
|
63b645c64c
|
Removing a debugging leftover
|
2016-07-05 09:32:30 +02:00 |
|
Miroslav Stampar
|
7ad49f4185
|
Less problematic regexes for MsSQL errors
|
2016-07-05 09:32:08 +02:00 |
|
Miroslav Stampar
|
d9315830f9
|
Less problematic regex for MsSQL errors
|
2016-07-05 09:20:04 +02:00 |
|
Miroslav Stampar
|
2e2c62b6a7
|
More error regexes
|
2016-07-04 17:24:17 +02:00 |
|
Miroslav Stampar
|
53289b0234
|
Some more Informix error regexes
|
2016-07-04 10:03:36 +02:00 |
|
Miroslav Stampar
|
dd082ef79d
|
Minor update (new error regex for Informix)
|
2016-07-04 09:49:18 +02:00 |
|
Miroslav Stampar
|
2c968f9a35
|
Closes #2007
|
2016-07-04 09:12:30 +02:00 |
|
Miroslav Stampar
|
74d0315fef
|
Update related to the last commit
|
2016-07-03 02:14:23 +02:00 |
|
Miroslav Stampar
|
ae98159130
|
Automatic monthly tagging
|
2016-07-03 02:03:30 +02:00 |
|
Miroslav Stampar
|
3a9e36c52b
|
Reintroducing stacked queries removed in 79d08906a4 (good for WAF bypass)
|
2016-07-03 02:03:30 +02:00 |
|
Miroslav Stampar
|
cb43c03712
|
Definite patch for MemoryError(s) (fixes #1991)
|
2016-06-30 14:57:56 +02:00 |
|
Miroslav Stampar
|
65a0f15f69
|
Minor update (error regex for PHP's sqlsrv module)
|
2016-06-28 15:13:37 +02:00 |
|
Miroslav Stampar
|
98b77d32cc
|
Minor update
|
2016-06-27 11:16:41 +02:00 |
|
Miroslav Stampar
|
86a3569ccb
|
New WAF script (SonicWALL)
|
2016-06-26 16:42:05 +02:00 |
|
Miroslav Stampar
|
17fca351d3
|
Minor update
|
2016-06-26 16:26:13 +02:00 |
|
Miroslav Stampar
|
2614e7bec1
|
Minor update
|
2016-06-26 16:23:39 +02:00 |
|
Miroslav Stampar
|
832c6e806f
|
Revert of last commit
|
2016-06-26 15:59:35 +02:00 |
|
Miroslav Stampar
|
7b334b0808
|
'Conversion failed' happens in regular SQLi on MsSQL
|
2016-06-26 15:57:11 +02:00 |
|
Miroslav Stampar
|
aa9151785e
|
Minor update
|
2016-06-26 15:37:30 +02:00 |
|
Miroslav Stampar
|
6bdef1b7da
|
Minor update
|
2016-06-26 01:46:49 +02:00 |
|
Miroslav Stampar
|
8b4367d354
|
Revert of last commit
|
2016-06-26 01:42:21 +02:00 |
|
Miroslav Stampar
|
0a9d69a7d0
|
Minor patch
|
2016-06-26 01:10:47 +02:00 |
|
Miroslav Stampar
|
a4b60dc00f
|
New error regex for MsSQL
|
2016-06-26 00:40:54 +02:00 |
|
Miroslav Stampar
|
f91ae32284
|
Minor update (to not confuse S3 vs Cloudfront)
|
2016-06-24 13:39:13 +02:00 |
|
Miroslav Stampar
|
53fc9d6720
|
Fixes #1990
|
2016-06-24 13:31:19 +02:00 |
|
Miroslav Stampar
|
0b31568306
|
Minor update
|
2016-06-24 13:28:08 +02:00 |
|
Miroslav Stampar
|
e9407cf791
|
Cleaning some garbage boundaries (it doesn't make any sense to use %00 as prefix)
|
2016-06-23 22:57:59 +02:00 |
|
Miroslav Stampar
|
0175acd028
|
Bug fix (in some cases lack of warning message for SQLi appearing)
|
2016-06-23 17:52:37 +02:00 |
|
Miroslav Stampar
|
733a32de32
|
Minor patch
|
2016-06-23 12:09:51 +02:00 |
|
Miroslav Stampar
|
1b863ecf93
|
Far better detection of SecureIIS (WAF)
|
2016-06-23 12:03:05 +02:00 |
|
Miroslav Stampar
|
ec06037335
|
Update of bigip waf script
|
2016-06-23 11:41:49 +02:00 |
|
Miroslav Stampar
|
0cdb62a1b5
|
Adding new waf script (armor)
|
2016-06-23 11:15:31 +02:00 |
|
Miroslav Stampar
|
99454198b8
|
Minor refactoring
|
2016-06-20 10:01:57 +02:00 |
|
Miroslav Stampar
|
dd6287ace8
|
Fixes #1972
|
2016-06-20 09:59:50 +02:00 |
|
Miroslav Stampar
|
786460e3b4
|
Minor just in case patch
|
2016-06-19 17:44:47 +02:00 |
|
Miroslav Stampar
|
419cf979f1
|
Showing again the 'shutting down at ...' message
|
2016-06-19 17:17:01 +02:00 |
|
Miroslav Stampar
|
30be875304
|
Patch for an Issue #1968
|
2016-06-18 01:21:57 +02:00 |
|
Miroslav Stampar
|
7d011bc811
|
Fixes #1964
|
2016-06-17 17:07:44 +02:00 |
|
Miroslav Stampar
|
b2c4a3b247
|
Fixes #1960
|
2016-06-17 16:54:23 +02:00 |
|
Miroslav Stampar
|
9d9592a69b
|
Fixes #1963
|
2016-06-17 16:51:23 +02:00 |
|
Miroslav Stampar
|
cb42294a7e
|
Minor message update
|
2016-06-15 07:57:10 +02:00 |
|
Miroslav Stampar
|
146762c109
|
Minor update
|
2016-06-15 07:54:47 +02:00 |
|
Miroslav Stampar
|
494b9d1586
|
Fixes #1943
|
2016-06-13 15:30:38 +02:00 |
|
Miroslav Stampar
|
2e95fdb52d
|
Fixes #1947
|
2016-06-13 14:50:44 +02:00 |
|
Miroslav Stampar
|
46736cac7b
|
Fixes #1931
|
2016-06-10 18:41:41 +02:00 |
|
Miroslav Stampar
|
041213f22d
|
Fixes #1935
|
2016-06-10 18:18:48 +02:00 |
|
Miroslav Stampar
|
8ca45c5678
|
Fixes #1936
|
2016-06-10 18:02:24 +02:00 |
|
Miroslav Stampar
|
c6eec8db97
|
Fixes #1938
|
2016-06-10 17:52:22 +02:00 |
|
Miroslav Stampar
|
98fdc493f4
|
Proper patch for #1923 (Fixes #1940, #1941)
|
2016-06-10 17:42:11 +02:00 |
|
Miroslav Stampar
|
91372bff87
|
Fixes #1932
|
2016-06-08 08:20:54 +02:00 |
|