8 Commits

Author	SHA1	Message	Date
Bernardo Damele	89c43893d4	Merged back from personal branch to trunk (svn merge -r846:940 ...) ... Changes: * Major enhancement to the Microsoft SQL Server stored procedure heap-based buffer overflow exploit (--os-bof) to automatically bypass DEP memory protection. * Added support for MySQL and PostgreSQL to execute Metasploit shellcode via UDF 'sys_bineval' (in-memory, anti-forensics technique) as an option instead of uploading the standalone payload stager executable. * Added options for MySQL, PostgreSQL and Microsoft SQL Server to read/add/delete Windows registry keys. * Added options for MySQL and PostgreSQL to inject custom user-defined functions. * Added support for --first and --last so the user now has even more granularity in what to enumerate in the query output. * Minor enhancement to save the session by default in 'output/hostname/session' file if -s option is not specified. * Minor improvement to automatically remove sqlmap created temporary files from the DBMS underlying file system. * Minor bugs fixed. * Major code refactoring.	2009-09-25 23:03:45 +00:00
Bernardo Damele	f3e8d6db70	Fixed MySQL comment injection	2009-05-01 16:29:45 +00:00
Bernardo Damele	8c0ac767f4	Updated to sqlmap 0.7 release candidate 1	2009-04-22 11:48:07 +00:00
Bernardo Damele	d54a51a328	Updated the HTML manual for the MySQL UDF and consequently other files. Thanks Roland!	2009-01-22 21:28:56 +00:00
Bernardo Damele	ae0f1985f3	Updated also the patch file	2009-01-21 20:54:14 +00:00
Bernardo Damele	deeccf9b5e	Updated tar.gz package	2009-01-21 00:53:10 +00:00
Bernardo Damele	1c5925ea2b	Minor adjustments	2009-01-21 00:52:23 +00:00
Bernardo Damele	161590e121	Added MySQL UDF to execute commands on the underlying system: ... * sys_eval() to return the standard output * sys_exec() to return the exit status It's a patched version of http://mysqludf.org/lib_mysqludf_sys/index.php	2009-01-17 00:13:16 +00:00