4193 Commits

Author	SHA1	Message	Date
Bernardo Damele	dfa9076a70	fixed and improved web shell upload in MySQL (it was actually broken since fc57b7565d)	2014-01-13 17:12:37 +00:00
Miroslav Stampar	6863436d4e	Implementation for an Issue #596	2014-01-13 10:05:56 +01:00
Bernardo Damele	d9e00adfae	minor fix	2014-01-10 17:23:16 +00:00
Miroslav Stampar	36f3ab5798	Minor bug fix (for cases when race between thread and main thread is causing server._running to not be set to True)	2014-01-09 15:46:55 +01:00
Miroslav Stampar	cb1f17cb04	Proper patch for an Issue #591	2014-01-02 12:15:56 +01:00
Miroslav Stampar	5437f8bf36	Fix for an Issue #85	2014-01-02 12:09:58 +01:00
Miroslav Stampar	4de83daf03	Minor style update	2014-01-02 11:06:19 +01:00
Miroslav Stampar	e0143e397a	Consistency fix (down below we use direct SQL)	2014-01-02 10:59:53 +01:00
Miroslav Stampar	0b4fcb6845	Fix for an Issue #591	2014-01-02 10:55:40 +01:00
Miroslav Stampar	854a55166c	Fix for an Issue #588	2014-01-02 10:29:10 +01:00
Miroslav Stampar	9b4b070ecf	Minor cosmetics	2014-01-02 10:05:58 +01:00
Miroslav Stampar	192a911b76	Patch for an Issue #28	2013-12-29 16:16:50 +01:00
Miroslav Stampar	41d6c1af82	Patch for an Issue #589	2013-12-28 13:47:40 +01:00
Miroslav Stampar	6c80f2903b	Patch for an Issue #564	2013-12-27 11:02:59 +01:00
Miroslav Stampar	cadbddd607	Adding a boundary proposed in Issue #564	2013-12-27 10:46:18 +01:00
Miroslav Stampar	7718edac9b	Fix for an Issue #570	2013-12-27 09:40:33 +01:00
Miroslav Stampar	02de2aee6d	Patch for an Issue #582	2013-12-26 22:27:04 +01:00
Miroslav Stampar	ab64d385d6	Bug fix (stacked queries as in PgSQL and MsSQL DNS tunneling queries MUST end with the comment - not the recognized underlying technique's suffix)	2013-12-25 22:18:57 +01:00
Miroslav Stampar	2c2667b2be	Minor patch for an Issue #575	2013-12-18 00:56:24 +01:00
Miroslav Stampar	fd6dcd8bf5	Merge pull request #583 from mattoufoutu/api ... RESTful API improvements	2013-12-17 14:10:19 -08:00
Miroslav Stampar	f18abb1e9c	Minor update (proxy can be also a https one (e.g. Burp for HTTPS targets)	2013-12-17 09:30:51 +01:00
Miroslav Stampar	7d8eb148ce	Patch for an Issue #565 (DuckDuckGo doesn't like identity encoding)	2013-12-17 09:30:04 +01:00
Miroslav Stampar	4819e19200	Patch for an Issue #584	2013-12-16 22:00:47 +01:00
Mathieu Deous	4c9456dd72	moar logging!	2013-12-15 16:59:47 +01:00
Mathieu Deous	438ad73016	avoid names shadowing	2013-12-15 09:22:01 +01:00
Mathieu Deous	eda9a3da67	all instance attributes should be defined in constructor	2013-12-15 09:16:38 +01:00
Mathieu Deous	3effaee2a1	avoid using global variables, use a "store" class	2013-12-15 00:19:58 +01:00
Mathieu Deous	c70f2a4e6d	unused imports	2013-12-15 00:00:08 +01:00
Mathieu Deous	aa02019638	return file content in a json message when calling download endpoint	2013-12-14 16:33:17 +01:00
Mathieu Deous	c87ad1bab5	make returned values more coherent	2013-12-14 16:22:30 +01:00
Mathieu Deous	72137e85f9	do not reset options when firing a scan	2013-12-14 15:59:47 +01:00
Mathieu Deous	af7ad31182	fix commit method usage (belongs to connection, not cursor)	2013-12-14 15:58:09 +01:00
Mathieu Deous	c5a3f54b89	remove unused imports	2013-12-14 15:47:26 +01:00
Mathieu Deous	8a946509b9	PEP8	2013-12-14 15:44:10 +01:00
Miroslav Stampar	5b2ded0b18	Fix for an Issue #577	2013-12-13 21:00:26 +01:00
Miroslav Stampar	437278e32d	Fix for an Issue #580	2013-12-13 19:48:05 +01:00
Mathieu Deous	c3dd6e1e32	api's get_option function doesn't lookup the right object	2013-12-08 17:46:02 +01:00
Miroslav Stampar	b0ca34ff27	Bug fix (payload character '=' was not being url-encoded in custom (user) post cases - when posthint was None)	2013-12-04 10:09:54 +01:00
Miroslav Stampar	bf3fbb0ae0	Ignore Google analytics cookies	2013-12-04 09:56:37 +01:00
Miroslav Stampar	dd2ddec79a	Minor fix (better extraction of original value in case of replacement and custom POST injection mark)	2013-12-03 13:37:04 +01:00
Miroslav Stampar	59d667d94c	Minor update	2013-12-01 22:25:12 +01:00
Miroslav Stampar	7054586e8a	Update for an Issue #565 (more work TBD - DuckDuckGo has some kind of IP blocking mechanism)	2013-11-25 20:57:07 +01:00
Miroslav Stampar	cda27ec20b	Patch for an Issue #563	2013-11-24 15:01:51 +01:00
Bernardo Damele	59b6791faa	minor improvement	2013-11-19 00:24:47 +00:00
Bernardo Damele	c37ad88283	minor bug fix	2013-11-13 14:34:19 +00:00
Miroslav Stampar	3c67ba08c5	Minor fix	2013-11-12 14:53:05 +01:00
Miroslav Stampar	354aaeae5b	Removing unused imports	2013-11-12 14:11:07 +01:00
Miroslav Stampar	d84ddf23bd	Replacing os.sep constructs with os.path.join	2013-11-12 14:08:41 +01:00
Miroslav Stampar	2f1607b4d5	Minor fix for dumping non-alphanumeric database names	2013-11-12 13:13:47 +01:00
Miroslav Stampar	0a4512e9ae	Implementation for an Issue #557	2013-11-08 09:23:38 +01:00