579 Commits

Author	SHA1	Message	Date
Miroslav Stampar	e2a60b302f	minor fix	2012-06-17 21:21:45 +00:00
Miroslav Stampar	fe49abd45f	minor fix	2012-06-15 20:49:28 +00:00
Miroslav Stampar	06be7bbb18	few just in case fixes (unarrayizeValue in dumpTable entries) and and some refactoring (unique is now not done for every union case but only if detected that there are duplicates in union test)	2012-06-15 20:41:53 +00:00
Miroslav Stampar	76c873a222	minor fix	2012-06-15 06:22:44 +00:00
Miroslav Stampar	facce2c0df	some more cleanup	2012-06-14 13:50:36 +00:00
Miroslav Stampar	3a90105fbb	minor refactoring	2012-06-14 13:38:53 +00:00
Miroslav Stampar	b85a1fc271	minor fix	2012-06-05 22:55:42 +00:00
Miroslav Stampar	76a4aa19ac	some more fine tunning	2012-05-28 19:50:12 +00:00
Miroslav Stampar	73dba249e8	one more just in case update	2012-05-28 19:34:47 +00:00
Miroslav Stampar	190ae4ca13	no need for conf.timeSec value as inference is always evaluated to False in DNS (large random values used for > ...)	2012-05-28 15:10:17 +00:00
Miroslav Stampar	a70a647aeb	few fixes regarding --dns-domain usage (time-based technique should not be used as a failback because of few things, --time-sec should be put to 0 just in case,...)	2012-05-28 14:51:23 +00:00
Miroslav Stampar	b1d82422a0	changing conf.dnsDomain to conf.dName just because of long text problems in help listing	2012-05-28 14:15:04 +00:00
Miroslav Stampar	4e6fcce9ca	minor update	2012-05-26 07:04:32 +00:00
Miroslav Stampar	ce077137c9	minor language update	2012-05-26 07:01:37 +00:00
Miroslav Stampar	d335ec0c34	turning back on time auto-adjustment mechanism (if turned off) after a threshold run of valid chars	2012-05-26 07:00:26 +00:00
Miroslav Stampar	b0a8238774	minor fixes	2012-05-09 14:58:16 +00:00
Miroslav Stampar	9fa3619262	minor fix	2012-05-09 14:00:07 +00:00
Miroslav Stampar	56a3431be6	minor update for empty tables (skipping other techniques)	2012-05-09 10:34:21 +00:00
Miroslav Stampar	e419177871	minor update	2012-05-08 17:28:19 +00:00
Miroslav Stampar	eccd4da00f	minor fix	2012-05-08 15:03:33 +00:00
Miroslav Stampar	938d9ff23e	doing all the work for the users so they wouldn't strain their little hands	2012-05-08 15:00:23 +00:00
Miroslav Stampar	524dd75ff2	that query variable hasn't been used anywhere (obsolete for some time)	2012-05-08 14:34:40 +00:00
Miroslav Stampar	3532d23933	automatically extending ranges for UNION tests in case where at least one other injection technique is usable (boundaries has been established)	2012-04-23 13:41:36 +00:00
Miroslav Stampar	71b0acc16f	minor fix (checking for full inband should be done with ORIGINAL - more concise)	2012-04-15 16:43:18 +00:00
Miroslav Stampar	5772c52f46	minor refactoring/fix (randQuery is just a part (e.g. abc) of phrase (def🔤ghi) - phrase should be searched for, not just randQuery); both phrases should be inside the content for it to be full-inband injectable (...UNION ALL SELECT phrase UNION ALL SELECT phrase2....)	2012-04-15 16:33:47 +00:00
Miroslav Stampar	ae8c70e895	another cosmetics	2012-04-13 15:11:44 +00:00
Miroslav Stampar	d765cdc3a3	minor cosmetics	2012-04-13 15:10:40 +00:00
Miroslav Stampar	831f79b851	minor generalization	2012-04-12 09:30:19 +00:00
Miroslav Stampar	8c6eb4faa9	adding support for PgSQL DNS data exfiltration	2012-04-07 14:06:11 +00:00
Miroslav Stampar	a5b69eaea4	removing unused imports	2012-04-04 13:18:14 +00:00
Bernardo Damele	52796bb4da	revert	2012-04-04 13:02:50 +00:00
Miroslav Stampar	a4b95ab7dd	works against MySQL/Windows	2012-04-04 12:49:45 +00:00
Bernardo Damele	a1d97e9d7b	Add a space after a comment	2012-04-04 12:48:21 +00:00
Bernardo Damele	025c531d22	leftover	2012-04-04 12:44:25 +00:00
Bernardo Damele	c0946ce2c9	Minor refactoring	2012-04-04 12:42:58 +00:00
Bernardo Damele	d106fb5184	layout adjustments	2012-04-04 12:27:24 +00:00
Miroslav Stampar	556b349be3	minor fix for retrieving non-printable chars in inference and non-multi threading mode	2012-04-03 14:04:07 +00:00
Miroslav Stampar	33bb9c5f19	much cleaner approach in that "flat" representation of retrieved items in union technique	2012-04-03 13:56:11 +00:00
Miroslav Stampar	7fb190f3b1	minor fix	2012-04-03 12:35:19 +00:00
Miroslav Stampar	886aa22efc	minor update	2012-04-03 12:19:37 +00:00
Miroslav Stampar	78f51fd2e5	minor fix	2012-04-03 10:18:03 +00:00
Miroslav Stampar	e05109812f	minor improvements regarding data retrieval through DNS channel	2012-04-03 09:18:30 +00:00
Miroslav Stampar	5f94987b0f	fix for DNS method for MSSQL	2012-04-02 17:28:18 +00:00
Miroslav Stampar	2c28423cb8	minor update	2012-04-02 14:57:15 +00:00
Miroslav Stampar	8a9d09f79b	minor fixes	2012-04-02 14:11:23 +00:00
Miroslav Stampar	1cd3c3f7af	further update of DNS data retrieval mechanism through SQLi	2012-04-02 14:05:30 +00:00
Miroslav Stampar	7fd64df167	minor code cleaning	2012-03-28 13:31:07 +00:00
Miroslav Stampar	1b072f6415	laying foundation for DNS based data retrieval	2012-03-27 18:59:12 +00:00
Miroslav Stampar	8e7d360ea2	cleaner refactoring regarding last commit	2012-03-19 12:03:25 +00:00
Miroslav Stampar	401763b6f8	minor fix (it has to be level 1 array like it was with the previous re.findall mechanism)	2012-03-19 12:00:22 +00:00