Bernardo Damele
2835ad667e
Minor exception adjustment
2010-06-10 21:11:14 +00:00
Miroslav Stampar
0e1bbf6375
patching and patching and patching
2010-06-10 17:05:13 +00:00
Miroslav Stampar
d56cc09fb7
fix
2010-06-10 16:23:39 +00:00
Miroslav Stampar
77691b8e16
fix for that keepalive (not only IIS issue)
2010-06-10 16:05:32 +00:00
Bernardo Damele
887adfcf10
Minor adjustments to extra/ libraries
2010-06-09 21:43:22 +00:00
Miroslav Stampar
654d707d5d
fixed header
2010-06-07 09:05:09 +00:00
Miroslav Stampar
38e5e342f8
added prettyprint module with fixed toprettyxml() method
2010-06-07 09:03:03 +00:00
Miroslav Stampar
4d6d5c8447
multi-threading patch
2010-06-01 18:40:34 +00:00
Miroslav Stampar
eb94edc48c
added keepalive module
2010-06-01 12:21:10 +00:00
Bernardo Damele
03fb84e29f
Minor enhancement to internal --profile function
2010-05-21 15:06:05 +00:00
Miroslav Stampar
5fba470a91
added gprof2dot.py 3rd party script to extras
2010-05-21 10:12:56 +00:00
Bernardo Damele
652daa616e
Minor bug fix and layout adjustments
2010-04-06 21:57:15 +00:00
Bernardo Damele
0d559d14df
Initial support for SQLite (90% approx).
...
Initial support for Firebird (30% approx).
Initial support for Access (10% approx).
Shared libraries code/installation scripts ported to 64bit, directory structure adapted.
Minor code adjustments.
2010-03-18 17:20:54 +00:00
Bernardo Damele
31a2fad530
Extended copyright to 2010
2010-03-04 10:47:31 +00:00
Bernardo Damele
476e389d38
Extended copyright to 2010
2010-03-04 10:41:33 +00:00
Bernardo Damele
156fdd96ef
Updated copyright
2010-03-03 15:26:27 +00:00
Bernardo Damele
8076984f69
Adapted Visual Studio files to compile under VS2005 and recompiled UDFs' DLLs for Windows under VS2005 to make DLLs smaller (no need for UPX anymore)
2010-03-01 00:00:40 +00:00
Miroslav Stampar
dee15ed0b0
smaller code size generation
2010-02-25 20:18:08 +00:00
Miroslav Stampar
9ba01c94d3
size optimization (<8k)
2010-02-25 20:03:29 +00:00
Bernardo Damele
8f47b1a524
Added README file
2010-02-25 14:17:32 +00:00
Miroslav Stampar
8f26f30740
revert changes
2010-02-22 14:35:08 +00:00
Miroslav Stampar
ad0def7604
fix (pretty sure :)
2010-02-22 14:13:32 +00:00
Miroslav Stampar
7e5a980f1b
__asm keyword is not supported by Win64 (we'll need to find a solution for this). This keyword _M_IX86 is only defined on Win32.
2010-02-22 14:02:13 +00:00
Bernardo Damele
ccec743ba1
Minor adjustments to README files
2010-02-21 19:12:41 +00:00
Bernardo Damele
e05785fef6
Recompiled MySQL/Linux shared object, optimized for size (-Os)
2010-02-21 18:01:54 +00:00
Miroslav Stampar
60366f7168
new program for running command prompt commands
2010-02-21 08:52:54 +00:00
Bernardo Damele
af1d9f129c
Recompiled and tested PostgreSQL shared object (Linux) optimized for size (gcc flag -Os).
2010-02-20 19:10:55 +00:00
Bernardo Damele
b28aeef8ff
Aligned PostgreSQL shared object source code for Linux
2010-02-19 17:11:17 +00:00
Miroslav Stampar
3fea964538
fix, finally....
2010-02-19 16:44:37 +00:00
Miroslav Stampar
6db0905137
some fixes regarding caveats part of article at http://www.postgresql.org/docs/6.3/static/c3102.htm
2010-02-14 19:37:20 +00:00
Miroslav Stampar
1d55923c9d
some fixes regarding caveats part of article at http://www.postgresql.org/docs/6.3/static/c3102.htm
2010-02-14 19:36:02 +00:00
Bernardo Damele
8131f9c77c
Added and fixed README files
2010-02-12 00:20:53 +00:00
Bernardo Damele
a20bbc3974
Removed carriage return (\r) from UDFs shared library source code
2010-01-28 01:16:01 +00:00
Miroslav Stampar
a0eabb6719
Id property set
2010-01-27 14:28:34 +00:00
Miroslav Stampar
8a8dc73980
more fixes
2010-01-27 14:27:11 +00:00
Miroslav Stampar
6966c235a4
removed junk file
2010-01-27 13:57:19 +00:00
Miroslav Stampar
93b7994c0c
added new cloaking functionality for shell scripts
2010-01-27 13:56:26 +00:00
Bernardo Damele
49146e573a
Added sys_fileread() for PostgreSQL --read-file binary
2010-01-19 13:37:04 +00:00
Bernardo Damele
1febdcac9b
Added support for takeover functionalities on PgSQL 8.4 running on Linux too.
...
Recompilation of MySQL shared object with MySQL 5.1 development libraries on Debian 5.3.
Tweaked the UDF compilation/installation files for both MySQL and PgSQL.
2010-01-14 10:50:03 +00:00
Bernardo Damele
d4d26b59eb
Merged UDF Linux and Windows development environments
2010-01-14 01:51:20 +00:00
Bernardo Damele
1100b37feb
Minor adjustments to UDF source code and file system structure
2010-01-14 00:46:48 +00:00
Bernardo Damele
2915b5d7e9
Partial cleanup of UDF source code path
2010-01-13 23:18:17 +00:00
Bernardo Damele
ce022a3b6e
sqlmap 0.8-rc3: Merge from Miroslav Stampar's branch fixing a bug when verbosity > 2, another major bug with urlencoding/urldecoding of POST data and Cookies, adding --drop-set-cookie option, implementing support to automatically decode gzip and deflate HTTP responses, support for Google dork page result (--gpage) and a minor code cleanup.
2010-01-02 02:02:12 +00:00
Bernardo Damele
89c43893d4
Merged back from personal branch to trunk (svn merge -r846:940 ...)
...
Changes:
* Major enhancement to the Microsoft SQL Server stored procedure
heap-based buffer overflow exploit (--os-bof) to automatically bypass
DEP memory protection.
* Added support for MySQL and PostgreSQL to execute Metasploit shellcode
via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an
option instead of uploading the standalone payload stager executable.
* Added options for MySQL, PostgreSQL and Microsoft SQL Server to
read/add/delete Windows registry keys.
* Added options for MySQL and PostgreSQL to inject custom user-defined
functions.
* Added support for --first and --last so the user now has even more
granularity in what to enumerate in the query output.
* Minor enhancement to save the session by default in
'output/hostname/session' file if -s option is not specified.
* Minor improvement to automatically remove sqlmap created temporary
files from the DBMS underlying file system.
* Minor bugs fixed.
* Major code refactoring.
2009-09-25 23:03:45 +00:00
Bernardo Damele
f3e8d6db70
Fixed MySQL comment injection
2009-05-01 16:29:45 +00:00
Bernardo Damele
8c0ac767f4
Updated to sqlmap 0.7 release candidate 1
2009-04-22 11:48:07 +00:00
Bernardo Damele
d54a51a328
Updated the HTML manual for the MySQL UDF and consequently other files. Thanks Roland!
2009-01-22 21:28:56 +00:00
Bernardo Damele
69204afe1f
Updated copyright
2009-01-22 00:41:57 +00:00
Bernardo Damele
9631dc115e
Added PostgreSQL UDF to execute commands on the underlying system:
...
* sys_eval() to return the standard output
* sys_exec() to return the exit status
Inspired by lib_mysqludf_sys 0.0.3 (https://svn.sqlmap.org/sqlmap/trunk/sqlmap/extra/mysqludfsys/ )
2009-01-22 00:35:17 +00:00
Bernardo Damele
ae0f1985f3
Updated also the patch file
2009-01-21 20:54:14 +00:00
