| 
							
							
								 Miroslav Stampar | f7d9b22510 | because other major DBMSes have at least one level 1 time based payload | 2011-01-18 20:32:49 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 38d0958781 | minor fix (for numeric columns with all 0) | 2011-01-18 11:42:36 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | bdcb10cdab | added MSSQL time based vector | 2011-01-18 02:05:18 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 3822b494ea | Major bug fix to properly deal with EXISTS() when forging query or retrieving the query columns. | 2011-01-17 23:43:37 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | c2a358561f | Proper support for --union-cols | 2011-01-17 22:57:33 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 35fb50a6ee | Major bug fix | 2011-01-17 22:56:04 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 47565f9459 | Minor code refactoring | 2011-01-17 21:13:59 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 041abb56e2 | you can't believe how much man can learn when having good testing points | 2011-01-17 13:59:22 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | d225c5c9aa | was wrong about this one (just now tested on a real site) | 2011-01-17 11:00:09 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | ac0b5e6dbc | proper way to handle this (console output has totally different encoding than the page one) | 2011-01-17 10:27:36 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 34d13be0d3 | minor update regarding default page encoding | 2011-01-17 10:23:37 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 5c857779c1 | important fix for unicode based character inference | 2011-01-17 10:15:19 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 99a3a3b89c | minor fix (break if all found) | 2011-01-17 09:41:25 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 0fcca671bd | information update regarding common password suffixes | 2011-01-17 09:28:25 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | a835f233ac | fix for a bug reported by buawig@gmail.com (AttributeError: 'module' object has no attribute 'set_completer') | 2011-01-17 00:17:31 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 2041361695 | minor cosmetics | 2011-01-16 23:20:52 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e2c821eb81 | minor cosmetics | 2011-01-16 22:35:54 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e881465a9f | minor improvement | 2011-01-16 20:55:07 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | f5e36876e7 | removing --text-only from that "dynamicity" warning selection (other two are more preferable) and minor cosmetics/consistency | 2011-01-16 19:29:06 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | a6516798c0 | proper fix for that previous "stacked" fix (that one screwed other injection types) | 2011-01-16 19:25:10 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 5476a8a27e | russian sites are great for testing :) | 2011-01-16 19:00:19 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 19dcaeaabf | fix for "Payload: id=1 ; SELECT PG_SLEEP(5);--" (blank space was added in case when prefixes weren't stated) | 2011-01-16 18:25:18 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 718eef8753 | minor fix | 2011-01-16 18:11:35 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 30d6791968 | update regarding time based data retrieval | 2011-01-16 17:52:42 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | ec1ab3cd2a | removing timeSec from injection configuration attributes as it highly depends on current connection "variables" | 2011-01-16 12:12:01 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 2001bad7e1 | automatic adjustment of timeSec for delayed queries | 2011-01-16 12:04:32 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 71391874eb | slightly faster and thread safer inference | 2011-01-16 10:52:42 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | fb166e9445 | adding USER_LOCK stacked query support for ORACLE (older versions) | 2011-01-16 10:31:16 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | f31c028232 | Oracle stacked vector based on DBMS_LOCK.SLEEP (https://foro.undersecurity.net/read.php?46,1436) | 2011-01-16 10:07:56 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 0fc4ebdc1b | Major bug fix. Minor code refactoring. | 2011-01-16 01:17:09 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | c0d5daee99 | More refactoring and cleanup | 2011-01-16 00:15:30 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 02b333e30b | Minor improvement | 2011-01-15 23:54:03 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 29ea0950b6 | now False is also affected (along with None and "") | 2011-01-15 23:43:26 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 6e4b65a822 | Minor refactoring | 2011-01-15 23:28:31 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 558f3894f4 | Minor improvement | 2011-01-15 23:20:52 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | d3a28124b1 | More code cleanup | 2011-01-15 23:11:36 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 4a35f598b8 | Minor refactoring | 2011-01-15 22:09:53 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | d2ce647113 | one of my stupidest commits (just in case) | 2011-01-15 18:17:46 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 0f565c941e | bug fix and proper warning message | 2011-01-15 16:59:53 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e105e1ea32 | bug fix (some sites raise 404 during union tests) | 2011-01-15 16:42:33 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 3873d204bb | important update for dictionary attack | 2011-01-15 15:56:11 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | e17ac5fdca | update | 2011-01-15 15:14:22 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 44504746cf | minor update | 2011-01-15 13:43:08 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 5bdb50c224 | code review part 3 | 2011-01-15 13:15:10 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 1fa8f0cba7 | code reviewing part 2 | 2011-01-15 12:53:40 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 6a0e0cde3c | code review of modules in lib/core directory | 2011-01-15 12:13:45 +00:00 |  | 
			
				
					| 
							
							
								 Bernardo Damele | 2d9b151883 | Minor bug fix | 2011-01-15 10:14:05 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | 05b2a338fe | cosmetics | 2011-01-14 16:12:44 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | bff989d348 | minor update | 2011-01-14 15:43:53 +00:00 |  | 
			
				
					| 
							
							
								 Miroslav Stampar | daf5662eab | update | 2011-01-14 15:33:49 +00:00 |  |