477 Commits

Author	SHA1	Message	Date
Miroslav Stampar	f39170a2c4	minor update	2011-11-22 15:06:51 +00:00
Miroslav Stampar	e94efff187	some more optimization	2011-11-22 09:00:00 +00:00
Miroslav Stampar	2ed3efba12	speed optimization and bug fix (kb.absFilePaths were not stored previously; also, they are now extracted only in heuristic phase)	2011-11-22 08:39:13 +00:00
Miroslav Stampar	1b45c5b56a	bug fix	2011-10-28 15:24:35 +00:00
Miroslav Stampar	e290f2b80b	minor update	2011-10-28 11:11:55 +00:00
Miroslav Stampar	23bf52e496	minor refactoring	2011-10-24 09:55:50 +00:00
Miroslav Stampar	6d64f87190	minor update	2011-10-24 00:46:54 +00:00
Miroslav Stampar	8bd3cfdc8e	minor update	2011-10-24 00:17:38 +00:00
Miroslav Stampar	7c626f1dbe	minor fix	2011-10-23 23:18:39 +00:00
Miroslav Stampar	d77a5f5928	update (generalizing ORDER BY approach)	2011-10-23 23:02:01 +00:00
Miroslav Stampar	1c3f4e9e54	minor update	2011-10-23 08:44:21 +00:00
Miroslav Stampar	25f0ec3597	some minor range to xrange conversion (where safe to do)	2011-10-21 22:34:27 +00:00
Miroslav Stampar	7a3096ce25	some refactoring	2011-10-21 21:12:48 +00:00
Miroslav Stampar	9356f8005c	important bug fix	2011-10-21 21:07:06 +00:00
Miroslav Stampar	0a8e45955c	minor update	2011-10-21 20:44:18 +00:00
Miroslav Stampar	e3a719e7d2	minor update	2011-10-11 22:40:00 +00:00
Miroslav Stampar	7956390631	minor update	2011-10-11 22:27:49 +00:00
Miroslav Stampar	a7a29f33ad	minor update	2011-10-11 21:58:57 +00:00
Miroslav Stampar	7e80274fac	refactoring	2011-09-25 21:10:45 +00:00
Miroslav Stampar	744636a8c1	switching to SQLite resume support (on error and union techniques this moment)	2011-09-25 20:36:32 +00:00
Miroslav Stampar	8fe069b495	minor fix	2011-08-23 21:48:39 +00:00
Miroslav Stampar	cfc1f2b70b	minor update	2011-08-22 22:43:14 +00:00
Miroslav Stampar	f4127a80d7	improvement of UNION based injection detection (with non-NULL kb.uChar values searching of the content inside -1 UNION.. pages is used)	2011-08-22 21:43:46 +00:00
Miroslav Stampar	cb32d46f2a	minor minor update	2011-08-18 06:09:12 +00:00
Miroslav Stampar	9d31322f3d	update regarding special case when conf.uChar appears only in testable pages	2011-08-17 21:40:42 +00:00
Miroslav Stampar	e1dbb4443b	minor update related to the last commit	2011-08-16 07:01:14 +00:00
Miroslav Stampar	7cc5743c5d	minor adjustment of a time based char retrievals (no more infinite increasing of timeSec value for problematic characters)	2011-08-16 06:50:20 +00:00
Bernardo Damele	702ed73a65	Added --code switch to match in boolean-based tests against the HTTP response code	2011-08-12 16:48:11 +00:00
Bernardo Damele	fff4c34e33	Search for --string and --regexp matches also in HTTP response headers	2011-08-12 15:33:37 +00:00
Miroslav Stampar	e849b71027	minor typo	2011-08-03 14:31:42 +00:00
Miroslav Stampar	538b49bcc5	removing word "dramatically". i was too excited at the moment :). it is cool and all but we shouldn't put "highly subjective" attribs in reports	2011-08-03 13:26:38 +00:00
Miroslav Stampar	9423d15fb3	ORDER BY technique used for finding proper UNION col count (dramatical improvement of speed and capabilities) and one minor bug fix	2011-08-03 09:08:16 +00:00
Miroslav Stampar	edab7d01a5	minor fix	2011-08-02 17:31:13 +00:00
Miroslav Stampar	cb0981d858	proper way of handling 0 length results (as in __goInferenceProxy)	2011-08-02 08:39:32 +00:00
Miroslav Stampar	018d7ed646	improvement for limited queries (more stable to have TOP/LIMIT/OFFSET mechanisms as part of a subquery)	2011-07-31 23:40:09 +00:00
Miroslav Stampar	e522263640	fix for a neverending data retrieval in large full inband cases	2011-07-29 10:45:09 +00:00
Bernardo Damele	938716e361	Proper fix for --start and --stop consistency amongst different techniques	2011-07-26 10:06:28 +00:00
Miroslav Stampar	6bbb8139a0	update (smaller memory footprint in postprocessing phase because of safecharencode part)	2011-07-25 20:40:31 +00:00
Miroslav Stampar	5770c08784	minor optimization and refactoring	2011-07-25 20:17:44 +00:00
Miroslav Stampar	2033a28ae7	minor update regarding last commit (cleaner code)	2011-07-24 20:44:17 +00:00
Miroslav Stampar	3a3561fdaa	doing proper big table support for partial union too	2011-07-24 20:36:44 +00:00
Miroslav Stampar	ec1bc0219c	hello big tables, this is sqlmap, sqlmap this is big tables	2011-07-24 09:19:33 +00:00
Miroslav Stampar	a89140e1ce	revisit of Oracle error-based payloads (added replace for '@' as a problematic char for XMLType function)	2011-07-23 06:07:00 +00:00
Bernardo Damele	aedcf8c8d7	Changed homepage address	2011-07-07 20:10:03 +00:00
Bernardo Damele	067354b97f	Revert of last commit and proper fix to detect UNION query SQL injection against Microsoft Access	2011-07-07 13:20:40 +00:00
Bernardo Damele	9e1a6beb7a	Major bug fix in UNION detection, it was a leftover	2011-07-07 00:06:20 +00:00
Miroslav Stampar	b8ffcf9495	few fixes here and there and multi-core processing for dictionary based hash attack	2011-07-04 19:58:41 +00:00
Miroslav Stampar	34d9a91af1	bulk of fixes	2011-07-02 22:48:56 +00:00
Bernardo Damele	9eb683531d	Minor improvement at blind SQL inj technique for DB2	2011-06-27 22:28:12 +00:00
Miroslav Stampar	9e232256f4	reverting that last commit because there is a mess with default dumping (startLimit is set to 0 which is not so friendly with --start and --stop logic)	2011-06-21 18:29:23 +00:00