Bernardo Damele
							
						 
					 | 
					
						
						
						
						
							
						
						
							8a67aea754
							
						
					 | 
					
						
						
							
							One more step to fully working UNION exploitation after merge into detection phase
						
						
						
						
						
					 | 
					
						2011-01-12 01:13:32 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Bernardo Damele
							
						 
					 | 
					
						
						
						
						
							
						
						
							8bdb7ec58c
							
						
					 | 
					
						
						
							
							Ahead with UNION exploitation after UNION test moved to detection phase - a lot to do yet.
						
						
						
						
						
					 | 
					
						2011-01-12 00:47:39 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Bernardo Damele
							
						 
					 | 
					
						
						
						
						
							
						
						
							06230e4d92
							
						
					 | 
					
						
						
							
							Minor code refactoring and cosmetics
						
						
						
						
						
					 | 
					
						2011-01-11 21:46:21 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							0676b38063
							
						
					 | 
					
						
						
							
							revert of one thing for Bernardo and minor update
						
						
						
						
						
					 | 
					
						2011-01-10 10:30:17 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							8e83a26acf
							
						
					 | 
					
						
						
							
							minor fix
						
						
						
						
						
					 | 
					
						2011-01-07 17:53:17 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Bernardo Damele
							
						 
					 | 
					
						
						
						
						
							
						
						
							cc46940159
							
						
					 | 
					
						
						
							
							Minor refactoring
						
						
						
						
						
					 | 
					
						2011-01-07 17:10:32 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							b313a20a3f
							
						
					 | 
					
						
						
							
							some fixes
						
						
						
						
						
					 | 
					
						2011-01-07 16:39:47 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Bernardo Damele
							
						 
					 | 
					
						
						
						
						
							
						
						
							16a06117f7
							
						
					 | 
					
						
						
							
							Mere cosmetics
						
						
						
						
						
					 | 
					
						2011-01-07 16:36:32 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							8a48baf789
							
						
					 | 
					
						
						
							
							update for a "problem" reported by nightman@email.de where he lost all of large dumped table because in the middle of dumping 401 was raised
						
						
						
						
						
					 | 
					
						2011-01-04 13:23:59 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							0eabca9fd4
							
						
					 | 
					
						
						
							
							update for a previous update (putting conf.dataEncoding in getUnicode wherever we know that data won't be 'touched' or 'used' in anyway related to the current web page - if not sure, just leave it as it is)
						
						
						
						
						
					 | 
					
						2011-01-03 22:31:29 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							8e1927fe31
							
						
					 | 
					
						
						
							
							minor fix
						
						
						
						
						
					 | 
					
						2011-01-02 18:12:18 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							5f9b6b2254
							
						
					 | 
					
						
						
							
							code refactoring
						
						
						
						
						
					 | 
					
						2011-01-02 16:51:21 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							b763feafd9
							
						
					 | 
					
						
						
							
							bug fix (TypeError: object of type 'NoneType' has no len())
						
						
						
						
						
					 | 
					
						2011-01-02 12:26:31 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							f0dad2a1e4
							
						
					 | 
					
						
						
							
							minor bug fix (in multiple item search only last item was shown)
						
						
						
						
						
					 | 
					
						2011-01-02 12:23:36 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							7b9d978cf9
							
						
					 | 
					
						
						
							
							minor fix (database and/or table names with - sign inside needs to be escaped by ` character or will lead to a "SQL syntax")
						
						
						
						
						
					 | 
					
						2011-01-02 11:01:20 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							73e8a10527
							
						
					 | 
					
						
						
							
							minor fix
						
						
						
						
						
					 | 
					
						2011-01-02 09:12:20 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							e28b9f26fc
							
						
					 | 
					
						
						
							
							minor fix
						
						
						
						
						
					 | 
					
						2011-01-02 08:01:01 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							26b06bfcfb
							
						
					 | 
					
						
						
							
							update (http://dev.mysql.com/doc/refman/5.0/en/server-system-variables.html)
						
						
						
						
						
					 | 
					
						2011-01-01 19:38:51 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							7ea3d060f6
							
						
					 | 
					
						
						
							
							some fixes/updates here and there
						
						
						
						
						
					 | 
					
						2011-01-01 12:41:51 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							076560f59f
							
						
					 | 
					
						
						
							
							bug fix
						
						
						
						
						
					 | 
					
						2010-12-31 12:58:27 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							5db8ebbfa9
							
						
					 | 
					
						
						
							
							update of mysql comment versions
						
						
						
						
						
					 | 
					
						2010-12-31 12:42:12 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							40e3489099
							
						
					 | 
					
						
						
							
							minor update
						
						
						
						
						
					 | 
					
						2010-12-31 12:27:57 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							ce19b0c431
							
						
					 | 
					
						
						
							
							optimization of comment checking in MySQL
						
						
						
						
						
					 | 
					
						2010-12-31 12:21:02 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							42e7b1b3a7
							
						
					 | 
					
						
						
							
							bug fix
						
						
						
						
						
					 | 
					
						2010-12-30 22:40:37 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							20e3a6d72f
							
						
					 | 
					
						
						
							
							fix/refactor/cosmetics (references: http://www.postgresql.org/docs/6.4/static/release.htm,http://www.postgresql.org/docs/8.2/static/functions-datetime.html#FUNCTIONS-DATETIME-TABLE,http://www.postgresql.org/docs/8.3/static/release-8-3.html)
						
						
						
						
						
					 | 
					
						2010-12-30 21:53:34 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							7f4acaf6f9
							
						
					 | 
					
						
						
							
							now comment injection fingerprint works with all techniques
						
						
						
						
						
					 | 
					
						2010-12-30 21:24:26 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							6f17e84e19
							
						
					 | 
					
						
						
							
							minor fix
						
						
						
						
						
					 | 
					
						2010-12-30 08:29:20 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							a77b186aca
							
						
					 | 
					
						
						
							
							minor fix
						
						
						
						
						
					 | 
					
						2010-12-27 16:55:27 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							5015f04826
							
						
					 | 
					
						
						
							
							minor update
						
						
						
						
						
					 | 
					
						2010-12-27 16:36:05 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							9c1676bdfa
							
						
					 | 
					
						
						
							
							minor cosmetics
						
						
						
						
						
					 | 
					
						2010-12-27 14:44:00 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							9fb0e0fc85
							
						
					 | 
					
						
						
							
							resume of brute forced data is now available
						
						
						
						
						
					 | 
					
						2010-12-27 14:17:20 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							3d23f226ae
							
						
					 | 
					
						
						
							
							minor update
						
						
						
						
						
					 | 
					
						2010-12-27 11:47:50 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							68462466f2
							
						
					 | 
					
						
						
							
							minor fix for a bug reported by shaohua pan (argument of type 'NoneType' is not iterable)
						
						
						
						
						
					 | 
					
						2010-12-27 11:36:36 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							51a492e17d
							
						
					 | 
					
						
						
							
							pretty important commit (now dumped tables are prone to dictionary attack)
						
						
						
						
						
					 | 
					
						2010-12-27 10:56:28 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							c8d5a6b980
							
						
					 | 
					
						
						
							
							update
						
						
						
						
						
					 | 
					
						2010-12-27 00:41:16 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							89c2640d23
							
						
					 | 
					
						
						
							
							basic --search now works with MS Access
						
						
						
						
						
					 | 
					
						2010-12-26 23:50:16 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							c4d6a367e9
							
						
					 | 
					
						
						
							
							this way order given in -C is preserved
						
						
						
						
						
					 | 
					
						2010-12-26 14:11:42 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							c93f2a703d
							
						
					 | 
					
						
						
							
							minor update
						
						
						
						
						
					 | 
					
						2010-12-26 14:02:16 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							e41acb6fc2
							
						
					 | 
					
						
						
							
							further ms access improvements
						
						
						
						
						
					 | 
					
						2010-12-26 02:13:56 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							2c8115eed9
							
						
					 | 
					
						
						
							
							further improvement for ms access table dumping
						
						
						
						
						
					 | 
					
						2010-12-26 01:04:30 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							5249762794
							
						
					 | 
					
						
						
							
							update
						
						
						
						
						
					 | 
					
						2010-12-25 16:46:33 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							fb099615e2
							
						
					 | 
					
						
						
							
							minor update
						
						
						
						
						
					 | 
					
						2010-12-25 11:16:35 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							9853c1ec7f
							
						
					 | 
					
						
						
							
							fix for a bug reported by alessio.dallapiazza@gmail.com (AttributeError: users)
						
						
						
						
						
					 | 
					
						2010-12-25 09:13:57 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							6845d402fa
							
						
					 | 
					
						
						
							
							well, here and there, merry Christmas to all :)
						
						
						
						
						
					 | 
					
						2010-12-24 20:17:53 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							706d8e0b88
							
						
					 | 
					
						
						
							
							development update (basic ms access dumping implemented)
						
						
						
						
						
					 | 
					
						2010-12-24 19:53:11 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							2c23a59ba5
							
						
					 | 
					
						
						
							
							fix for one of those more complex bugs (comparison was returning None while original page and/or page template were already had already DBMS error inside)
						
						
						
						
						
					 | 
					
						2010-12-24 12:13:48 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							7c06dbffc3
							
						
					 | 
					
						
						
							
							bug fix (AttributeError: 'unicode' object has no attribute 'sort')
						
						
						
						
						
					 | 
					
						2010-12-22 18:55:50 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Bernardo Damele
							
						 
					 | 
					
						
						
						
						
							
						
						
							b3da473840
							
						
					 | 
					
						
						
							
							Minor bug fix when --dbs has only one DB name
						
						
						
						
						
					 | 
					
						2010-12-22 14:29:57 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Bernardo Damele
							
						 
					 | 
					
						
						
						
						
							
						
						
							c9ab8ae60e
							
						
					 | 
					
						
						
							
							Bug fix to properly identify if current user is DBA (--is-dba) on MySQL
						
						
						
						
						
					 | 
					
						2010-12-22 14:06:01 +00:00 | 
					
					
						
						
							
							
							
						
					 | 
				
			
				
					
						
							
							
								 
								Miroslav Stampar
							
						 
					 | 
					
						
						
						
						
							
						
						
							c89021f0bb
							
						
					 | 
					
						
						
							
							some fixes
						
						
						
						
						
					 | 
					
						2010-12-22 11:46:18 +00:00 | 
					
					
						
						
							
							
							
						
					 |