stamparm
|
f7d15cb465
|
Official naming is HSQLDB (and/or HyperSQL)
|
2013-07-01 11:57:47 +02:00 |
|
Miroslav Stampar
|
aeb83ba651
|
Merge pull request #475 from Meatballs1/hsql_clean
HSQL Payloads and Query Support
|
2013-07-01 02:38:04 -07:00 |
|
Miroslav Stampar
|
a1842f44f5
|
Fix for an Issue #477
|
2013-06-29 20:55:48 +02:00 |
|
stamparm
|
991cafc4e4
|
Minor refactoring
|
2013-06-26 13:53:42 +02:00 |
|
stamparm
|
c83cca4cd4
|
Minor patch
|
2013-06-26 13:49:34 +02:00 |
|
stamparm
|
fd5b665f7d
|
Removing arithmetic operations from false positive checking to minimize affect of character filtering ('>' and '=' have to stay because those are minimal requirements)
|
2013-06-26 10:55:34 +02:00 |
|
Meatballs
|
eb2012c599
|
Fix escaper
|
2013-06-24 23:50:33 +01:00 |
|
Meatballs
|
4595b2c287
|
decodeHexValue
|
2013-06-24 23:45:39 +01:00 |
|
Meatballs
|
5b6c01d739
|
Escaper
|
2013-06-24 23:41:45 +01:00 |
|
Meatballs
|
604694c0e5
|
Cleanup queries.xml
|
2013-06-24 23:22:52 +01:00 |
|
Meatballs
|
09e1dc814d
|
Fix concat
|
2013-06-24 23:20:34 +01:00 |
|
Meatballs
|
ed40a76c9d
|
Fix dummy table
|
2013-06-24 23:18:47 +01:00 |
|
Meatballs
|
a393b17513
|
modify fingerprint value
|
2013-06-24 15:12:37 +01:00 |
|
Meatballs
|
55a37183d4
|
Cleanup payloads file
|
2013-06-24 15:04:52 +01:00 |
|
Meatballs
|
550693032b
|
Remote whitespace in databases.py
|
2013-06-24 15:03:08 +01:00 |
|
Meatballs
|
9212b05eeb
|
Add call to execute statements
|
2013-06-24 15:01:44 +01:00 |
|
Meatballs
|
b886e47b6d
|
Add unimplemented files
|
2013-06-24 14:53:41 +01:00 |
|
Meatballs
|
62000c6406
|
Remaining files
|
2013-06-24 14:42:58 +01:00 |
|
Meatballs
|
7b6cc3d183
|
Add hsql settings
|
2013-06-24 14:38:44 +01:00 |
|
Meatballs
|
20a5d9a16e
|
Include HSQL dummy table
|
2013-06-24 14:37:42 +01:00 |
|
Meatballs
|
355d3f86be
|
hsql payloads and queries xml
|
2013-06-24 14:34:54 +01:00 |
|
Meatballs
|
d739d5062d
|
hsql plugin folder
|
2013-06-24 14:34:25 +01:00 |
|
Miroslav Stampar
|
0355e29b7c
|
Minor fix (NoneType has no attribute split)
|
2013-06-24 14:49:53 +02:00 |
|
Miroslav Stampar
|
95ed6b7203
|
Minor patch (Issue #470)
|
2013-06-24 14:37:45 +02:00 |
|
Miroslav Stampar
|
4336a8fa7c
|
Fix for overnight (previously removed : from prefix/suffix was important for XMLType payload)
|
2013-06-24 14:18:42 +02:00 |
|
Miroslav Stampar
|
fca6772df6
|
Implementation for an Issue #468
|
2013-06-22 00:13:46 +02:00 |
|
Bernardo Damele
|
a72096a345
|
slightly more appropriate definition of output variable
|
2013-06-19 20:25:01 +01:00 |
|
Bernardo Damele
|
cae108d9fc
|
careful at merging pull requests with TABs (#466)
|
2013-06-19 19:49:53 +01:00 |
|
stamparm
|
a53823f9b7
|
Minor refactoring
|
2013-06-19 10:59:26 +02:00 |
|
stamparm
|
690645f6c7
|
Cosmetic fix
|
2013-06-19 10:50:00 +02:00 |
|
stamparm
|
20b8186fcc
|
Fix for an Issue #467
|
2013-06-19 10:41:58 +02:00 |
|
stamparm
|
a7787e83b8
|
Minor fix for case-insensitive union duplicates
|
2013-06-18 12:52:36 +02:00 |
|
Miroslav Stampar
|
aff7092736
|
Merge pull request #466 from Meatballs1/xp_cmdshell_output
Unable to retrieve XP_Cmdshell Output
|
2013-06-18 00:47:08 -07:00 |
|
stamparm
|
9a6f5a95f5
|
Minor patch for SQLAlchemy/MSSQL
|
2013-06-18 09:36:09 +02:00 |
|
Miroslav Stampar
|
92dfb0f817
|
Minor patch
|
2013-06-16 12:35:20 +02:00 |
|
Miroslav Stampar
|
c2dce66a46
|
Fix for an user reported bug (tbl can be None)
|
2013-06-16 12:35:05 +02:00 |
|
Meatballs
|
c5087399c1
|
Fix exception if init technique not available
|
2013-06-16 10:47:27 +01:00 |
|
Meatballs
|
2c98507f1e
|
Add better error msg
|
2013-06-16 10:27:08 +01:00 |
|
Meatballs
|
caa326774c
|
Fallback to blind
|
2013-06-16 10:22:20 +01:00 |
|
Miroslav Stampar
|
63d0e9bb12
|
Adding support for MsSQL >=2012 hash format (based on commit 70107f74f0be5357654f170a3f321e3e55e81881)
|
2013-06-13 21:50:35 +02:00 |
|
Miroslav Stampar
|
540493a69f
|
Fix for empty strings (previously '' was just removed)
|
2013-06-11 12:56:20 +02:00 |
|
Miroslav Stampar
|
f185e5cdd5
|
Fix for an Issue #463
|
2013-06-10 22:26:34 +02:00 |
|
Miroslav Stampar
|
cdb434805a
|
Using alpha character as a boundary in union/error techniques (instead of ':') to support wider range of (output filtering) cases
|
2013-06-10 22:14:45 +02:00 |
|
Miroslav Stampar
|
6f49b96a2d
|
Fix for an Issue #462
|
2013-06-10 12:20:58 +02:00 |
|
Miroslav Stampar
|
3583f45ee7
|
Fix for an Issue #461
|
2013-06-10 11:44:56 +02:00 |
|
Miroslav Stampar
|
ad07add549
|
Fixing MySQL/stacked payloads (also removing stacked conditional-error version as it's syntatically incorrect)
|
2013-06-05 14:32:06 +02:00 |
|
Miroslav Stampar
|
39612b5d87
|
Fix for an Issue #457
|
2013-06-04 23:46:39 +02:00 |
|
Miroslav Stampar
|
c1592e8508
|
Code refactoring (moving import ctypes to be used only when needed)
|
2013-06-04 22:23:44 +02:00 |
|
Miroslav Stampar
|
3e0f747fad
|
Minor fix
|
2013-06-04 00:05:25 +02:00 |
|
Miroslav Stampar
|
213d0ecfb9
|
Minor fix
|
2013-06-03 23:32:57 +02:00 |
|