Miroslav Stampar
|
116c1c8b5c
|
Minor refactoring
|
2017-09-20 15:49:18 +02:00 |
|
Miroslav Stampar
|
afc2a42383
|
Revisiting regexes for DBMS errors
|
2017-09-20 15:28:33 +02:00 |
|
Miroslav Stampar
|
6a8ea0557c
|
Minor update
|
2017-09-15 14:23:55 +02:00 |
|
Miroslav Stampar
|
3f40bf1101
|
Fixes #2387
|
2017-07-06 11:44:18 +02:00 |
|
Miroslav Stampar
|
9da8d55128
|
Implements #2557
|
2017-06-07 11:22:06 +02:00 |
|
Miroslav Stampar
|
eb098f6527
|
Fixes #2268
|
2016-11-09 12:27:10 +01:00 |
|
Miroslav Stampar
|
d605b3af3c
|
Revisiting banner xmls (Issue #2239)
|
2016-10-21 13:01:28 +02:00 |
|
Miroslav Stampar
|
ae465bbaf8
|
Minor revert of leftover
|
2016-10-11 01:09:30 +02:00 |
|
Miroslav Stampar
|
1b95dd2d9d
|
Fix for a bug reported privately by user (in some cases data has not been retrieved)
|
2016-10-11 01:07:31 +02:00 |
|
Miroslav Stampar
|
7f416846b7
|
Minor revisit of MsSQL error-based payloads
|
2016-10-06 23:50:32 +02:00 |
|
Miroslav Stampar
|
af1c9c7fb2
|
Related to the last commit
|
2016-10-04 23:48:09 +02:00 |
|
Miroslav Stampar
|
06b54ab134
|
Better choice of used table (INFORMATION_SCHEMA.CHARACTER_SETS can also be found in MsSQL and PgSQL; mysql.db can have permission problems)
|
2016-10-04 23:43:00 +02:00 |
|
Miroslav Stampar
|
fee5c7bd7c
|
Adding two new payloads and minor cosmetics
|
2016-10-04 23:39:18 +02:00 |
|
Miroslav Stampar
|
fb8afc6add
|
Adding a new payload (Oracle boolean based on error response)
|
2016-10-04 22:12:00 +02:00 |
|
Miroslav Stampar
|
3409953538
|
Revisiting default level 1 payloads (MySQL stacked queries are as frequent as double rainbows)
|
2016-09-29 12:59:51 +02:00 |
|
Miroslav Stampar
|
e77126e847
|
Removing obsolete functionality
|
2016-09-28 15:00:26 +02:00 |
|
Miroslav Stampar
|
d36b5c0a4b
|
Adding time-based blind (heavy query) payloads for Informix (Issue #552)
|
2016-09-28 10:30:09 +02:00 |
|
Miroslav Stampar
|
5079c42788
|
Adding Informix parameter replacement payloads (Issue #552)
|
2016-09-27 14:39:17 +02:00 |
|
Miroslav Stampar
|
bc7ab01066
|
Bug fix for generic parameter replacement (CASE)
|
2016-09-27 14:29:18 +02:00 |
|
Miroslav Stampar
|
978f56ad10
|
One more commit for #552 (--passwords)
|
2016-09-26 16:38:03 +02:00 |
|
Miroslav Stampar
|
aa0b97b562
|
Support for Informix --roles/--privileges (Issue #552)
|
2016-09-26 14:20:04 +02:00 |
|
Miroslav Stampar
|
484d9a4825
|
Implementation of --dump for Informix (Issue #552)
|
2016-09-23 17:21:48 +02:00 |
|
Miroslav Stampar
|
1b48ff223d
|
Adding initial support for Informix (Issue #552)
|
2016-09-23 12:33:27 +02:00 |
|
Miroslav Stampar
|
e519484230
|
Patching live-testing
|
2016-09-19 15:51:28 +02:00 |
|
Miroslav Stampar
|
c7f615f707
|
Renaming payload files (consistency with the rest of the project)
|
2016-07-17 00:21:16 +02:00 |
|
Miroslav Stampar
|
47ba7d4705
|
Minor update
|
2016-07-07 10:37:00 +02:00 |
|
Miroslav Stampar
|
292a28131d
|
Minor updates
|
2016-07-06 23:43:10 +02:00 |
|
Miroslav Stampar
|
2e775fbb75
|
(e.g.) ASPx MsSQL Chinese exception messages don't start with 'Exception: string'
|
2016-07-06 14:06:18 +02:00 |
|
Miroslav Stampar
|
e1d7641b8a
|
Good for different generic OleDB-alike connectors
|
2016-07-06 13:48:35 +02:00 |
|
Miroslav Stampar
|
7ad49f4185
|
Less problematic regexes for MsSQL errors
|
2016-07-05 09:32:08 +02:00 |
|
Miroslav Stampar
|
d9315830f9
|
Less problematic regex for MsSQL errors
|
2016-07-05 09:20:04 +02:00 |
|
Miroslav Stampar
|
2e2c62b6a7
|
More error regexes
|
2016-07-04 17:24:17 +02:00 |
|
Miroslav Stampar
|
53289b0234
|
Some more Informix error regexes
|
2016-07-04 10:03:36 +02:00 |
|
Miroslav Stampar
|
dd082ef79d
|
Minor update (new error regex for Informix)
|
2016-07-04 09:49:18 +02:00 |
|
Miroslav Stampar
|
74d0315fef
|
Update related to the last commit
|
2016-07-03 02:14:23 +02:00 |
|
Miroslav Stampar
|
3a9e36c52b
|
Reintroducing stacked queries removed in 79d08906a4 (good for WAF bypass)
|
2016-07-03 02:03:30 +02:00 |
|
Miroslav Stampar
|
65a0f15f69
|
Minor update (error regex for PHP's sqlsrv module)
|
2016-06-28 15:13:37 +02:00 |
|
Miroslav Stampar
|
98b77d32cc
|
Minor update
|
2016-06-27 11:16:41 +02:00 |
|
Miroslav Stampar
|
a4b60dc00f
|
New error regex for MsSQL
|
2016-06-26 00:40:54 +02:00 |
|
Miroslav Stampar
|
e9407cf791
|
Cleaning some garbage boundaries (it doesn't make any sense to use %00 as prefix)
|
2016-06-23 22:57:59 +02:00 |
|
Miroslav Stampar
|
cc313280af
|
Payload that never ever worked (now fixed)
|
2016-06-03 13:16:00 +02:00 |
|
Miroslav Stampar
|
f06ff42c58
|
This never worked. Not sure who incorporated it (WAITFOR DELAY can't go to SELECT/CASE)
|
2016-06-03 10:42:57 +02:00 |
|
Miroslav Stampar
|
4bc1cf4518
|
Vastly better patch for MsSQL payloads
|
2016-06-03 10:29:04 +02:00 |
|
Miroslav Stampar
|
d326965966
|
Reordering MySQL's error-based payloads (BIGINT and EXP have crazy bigger chunk lenghts)
|
2016-06-01 14:12:22 +02:00 |
|
Miroslav Stampar
|
f0b8fbb7fd
|
Implemented support for JSON_KEYS error-based SQLi (and tons of fixes for MySQL 'ORDER BY,GROUP BY' payloads)
|
2016-06-01 13:23:41 +02:00 |
|
Miroslav Stampar
|
7d1bdb35ca
|
Update of parsed versions
|
2016-06-01 10:44:08 +02:00 |
|
Miroslav Stampar
|
acc1277246
|
Minor update
|
2016-05-30 14:13:57 +02:00 |
|
Miroslav Stampar
|
b4ebbae354
|
New payload(s)
|
2016-05-30 11:25:24 +02:00 |
|
Miroslav Stampar
|
79d08906a4
|
Cleaning some redundant payload(s)
|
2016-05-27 23:59:48 +02:00 |
|
Miroslav Stampar
|
b9e5655e3c
|
Proper naming
|
2016-05-22 14:26:36 +02:00 |
|