642 Commits

Author	SHA1	Message	Date
Miroslav Stampar	c2c4601d6e	Minor restyling	2012-12-20 11:06:52 +01:00
Bernardo Damele	282aeb734f	ORDER BY does not play well with UNION query SQLi (related to issue #313)	2012-12-19 13:21:16 +00:00
Bernardo Damele	259b345f1f	catch ImportError exception if libmagic is not installed	2012-12-19 13:10:54 +00:00
Bernardo Damele	9149d77cc8	removed duplicate code - fixes issue #310	2012-12-19 12:17:56 +00:00
Bernardo Damele	d80744d3d5	preparation for issue #310	2012-12-19 11:40:00 +00:00
Bernardo Damele	dee56b17c3	handle "LIMIT num" as well as "LIMIT num, num" across all techniques - fixes issue #308	2012-12-19 10:50:15 +00:00
Miroslav Stampar	92e338251a	Finally working inference against MySQL/international letters (even chinese)	2012-12-19 10:44:02 +01:00
Bernardo Damele	8e95470415	minor refactoring	2012-12-19 00:46:23 +00:00
Miroslav Stampar	88d8494b5a	Implementation for an Issue #307	2012-12-18 16:03:35 +01:00
Miroslav Stampar	7f47623876	Minor patch	2012-12-18 11:10:06 +01:00
Bernardo Damele	1fdd804e94	replaced instances of dataToStdout with logger	2012-12-17 13:30:21 +00:00
Bernardo Damele	064d443d60	replaced unnecessary dataToStdout() call with appropriate logger.info() call	2012-12-17 11:30:08 +00:00
Miroslav Stampar	562044577b	Implementation for an Issue #292	2012-12-11 12:02:06 +01:00
Miroslav Stampar	996e882e78	Minor update	2012-12-10 17:13:00 +01:00
Miroslav Stampar	974407396e	Doing some more style updating (capitalization of exception classes; using _ is enough for private members - __ is used in Python specific methods)	2012-12-06 14:14:19 +01:00
Miroslav Stampar	ab67344448	Removed unused imports and variables (pyflake-ing)	2012-12-06 11:15:05 +01:00
Miroslav Stampar	775e0df04b	Update for an Issue #278	2012-12-05 10:45:17 +01:00
Miroslav Stampar	7304971544	Patch for ORDER BY test on MsSQL on cases with 'The text, ntext, and image data types cannot be compared or sorted, except when using IS NULL or LIKE operator'	2012-11-29 11:43:49 +01:00
Miroslav Stampar	7c16bfe025	Fix for error-based MsSQL dumping (in some cases failed because of wrong order - e.g. MIN(SUBSTRING( instead of SUBSTRING(MIN )	2012-11-29 10:51:59 +01:00
Miroslav Stampar	621ae587c7	Fix for an Issue #263	2012-11-28 00:03:17 +01:00
Miroslav Stampar	a40d7a5bca	Minor improvement (safer to use column name in COUNT than *, especially when only one column is needed)	2012-11-15 15:06:54 +01:00
Miroslav Stampar	b75c52f93c	Minor display fix (in --hex mode)	2012-10-28 12:30:21 +01:00
Miroslav Stampar	25a5073281	Bug fix for --hex/--technique=B (especially MsSQL)	2012-10-28 12:22:33 +01:00
Miroslav Stampar	c1b8226329	Massive renaming (proper naming is inband = union & error techniques! - query naming stays as they are/in code things like forgeInbandQuery are renamed to forgeUnionQuery)	2012-10-28 00:36:09 +02:00
Miroslav Stampar	99ceea5eae	Fix for an Issue #214	2012-10-23 17:05:45 +02:00
Miroslav Stampar	54d086f409	Minor fix	2012-10-23 10:02:10 +02:00
Miroslav Stampar	029143880a	Displaying hex-decoded resulting output in --hex mode	2012-10-22 14:36:01 +02:00
Miroslav Stampar	e61c4c22c9	Implementation for an Issue #200	2012-10-09 15:19:47 +02:00
Miroslav Stampar	687f3991de	Cleaning/refactoring of bunch of stacked/suffix/comment stuff (e.g.	2012-09-26 11:27:43 +02:00
Miroslav Stampar	560e0fcb25	Minor cleanup	2012-09-25 14:21:57 +02:00
Miroslav Stampar	cea5127ffd	Update for an Issue #6	2012-09-06 15:51:38 +02:00
Miroslav Stampar	01f481c332	Minor refactoring of dictionaries	2012-08-21 11:19:15 +02:00
Miroslav Stampar	47073f4afd	Implementation of an Issue #131	2012-07-30 21:50:46 +02:00
Miroslav Stampar	93d35fe522	Minor update regarding Issue #129	2012-07-30 21:43:32 +02:00
Miroslav Stampar	cc2a916716	Fix for an Issue #126	2012-07-29 17:33:08 +02:00
Miroslav Stampar	f8c9868cb6	Implementation for an Issue #118	2012-07-24 15:34:50 +02:00
Miroslav Stampar	0f64e1e6c1	Minor update for Issue #94 (not fixing it)	2012-07-16 15:43:02 +02:00
Miroslav Stampar	805120ac52	Minor refactoring	2012-07-14 11:01:30 +02:00
Bernardo Damele	162da75a04	modified homepage address	2012-07-12 18:38:03 +01:00
Bernardo Damele	ea9c66108e	cleanup for issue #68	2012-07-12 15:38:43 +01:00
Miroslav Stampar	8e18514e56	Minor refactoring for all that stickyness	2012-07-12 15:58:45 +02:00
Miroslav Stampar	cba2a26b68	Finishing Issue #75 (inference dumping)	2012-07-12 14:46:57 +02:00
Miroslav Stampar	65639cdda6	First update for Issue #75 (error-based dumping)	2012-07-12 14:31:28 +02:00
Bernardo Damele	f704a46341	silly blank line added	2012-07-12 01:38:29 +01:00
Bernardo Damele	a5924739f6	minor code refactoring in preparation of ticket #75	2012-07-12 01:12:30 +01:00
Miroslav Stampar	295a7a8e5e	Another update for Issue #80	2012-07-11 16:14:20 +02:00
Miroslav Stampar	9a4f8d5f45	Fix for Issue #80	2012-07-11 16:01:25 +02:00
Bernardo Damele	d3da3f5c52	refactoring for issue #51	2012-07-10 00:19:32 +01:00
Miroslav Stampar	e948e4d45b	Some more refactoring	2012-07-06 17:18:22 +02:00
Miroslav Stampar	1a8ebbfd43	Minor refactoring	2012-07-06 17:05:47 +02:00