Miroslav Stampar
|
7877a931d5
|
more cosmetics regarding dictionary attack
|
2010-11-23 20:54:40 +00:00 |
|
Miroslav Stampar
|
e3b3e05748
|
minor update
|
2010-11-23 19:21:30 +00:00 |
|
Miroslav Stampar
|
0d24a15182
|
more cosmetics
|
2010-11-23 19:10:34 +00:00 |
|
Miroslav Stampar
|
836a1c214a
|
los cosmeticados (of hash dictionary attack)
|
2010-11-23 18:57:00 +00:00 |
|
Miroslav Stampar
|
b41ee8d0d0
|
minor refactoring
|
2010-11-23 14:57:36 +00:00 |
|
Miroslav Stampar
|
aa5d038f18
|
more code refactoring
|
2010-11-23 14:50:47 +00:00 |
|
Miroslav Stampar
|
3cae76627c
|
code refactoring regarding dictionary attack
|
2010-11-23 13:58:01 +00:00 |
|
Miroslav Stampar
|
ba4ea32603
|
first working version of dictionary attack
|
2010-11-23 13:24:02 +00:00 |
|
Miroslav Stampar
|
bfc9378542
|
sorry, even more proper naming should be like this (passwd is a standard naming for this kind of function(s))
|
2010-11-20 13:22:59 +00:00 |
|
Miroslav Stampar
|
db59faedb9
|
more proper naming
|
2010-11-20 13:20:28 +00:00 |
|
Miroslav Stampar
|
1f8a9fe033
|
foundations for dictionary attack support combined with the sqlmap's password/hash retrieval functionality (--password switch)
|
2010-11-20 13:14:13 +00:00 |
|
Miroslav Stampar
|
71107e4e9e
|
quick fix for google searches
|
2010-11-19 21:38:20 +00:00 |
|
Miroslav Stampar
|
df88280681
|
minor update of google regex (that * was a junky one)
|
2010-11-19 10:04:29 +00:00 |
|
Miroslav Stampar
|
e8bef28337
|
updating google parsing regex (for the better, of course)
|
2010-11-19 10:00:29 +00:00 |
|
Bernardo Damele
|
17486e472a
|
Proper english (--postfix is now --suffix) and --string/--regexp does not necessarily need to match into the original response body, it might well be in the injected True condition only!
|
2010-11-17 22:00:09 +00:00 |
|
Miroslav Stampar
|
862395ced1
|
further refactoring (all enumerations are now put into enums.py)
|
2010-11-08 09:20:02 +00:00 |
|
Bernardo Damele
|
b6da946883
|
Added one new verbose level, -v 3 now shows the full injected payload.
Fixed also -d verbose output.
|
2010-11-07 22:34:29 +00:00 |
|
Miroslav Stampar
|
d3e7e89e60
|
major improvement with display of payloads (all payloads are displayed now) and removal of "pesky" spaces
|
2010-11-07 21:18:09 +00:00 |
|
Miroslav Stampar
|
6adee3792a
|
removed all trailing spaces from blank lines
|
2010-11-03 10:08:27 +00:00 |
|
Miroslav Stampar
|
70f6eab715
|
minor update
|
2010-11-02 12:08:28 +00:00 |
|
Bernardo Damele
|
46be570463
|
Proper HTTP version display
|
2010-10-31 15:41:28 +00:00 |
|
Miroslav Stampar
|
f7d42af046
|
some fixes regarding --check-payload
|
2010-10-29 11:00:23 +00:00 |
|
Miroslav Stampar
|
228ac0cde5
|
refactoring regarding --check-payload
|
2010-10-25 18:38:54 +00:00 |
|
Miroslav Stampar
|
378653a1ec
|
added IDS payload testing
|
2010-10-25 15:37:43 +00:00 |
|
Miroslav Stampar
|
bc79eec702
|
removed queriesfile.py, implemented XMLObject approach (still shell.py and udf.py TODO)
|
2010-10-21 13:13:12 +00:00 |
|
Miroslav Stampar
|
be443c6947
|
refactoring regarding __START__,...
|
2010-10-21 09:51:07 +00:00 |
|
Miroslav Stampar
|
4f7f20b94f
|
sorry, cosmetics
|
2010-10-14 23:18:29 +00:00 |
|
Miroslav Stampar
|
2bbe0c9ba6
|
bug fix for Ctrl+C
|
2010-10-14 15:23:42 +00:00 |
|
Miroslav Stampar
|
8b48833136
|
large commit with copyright header modifications
|
2010-10-14 14:41:14 +00:00 |
|
Miroslav Stampar
|
43a3ac2c3a
|
some bug fixes
|
2010-10-13 20:54:18 +00:00 |
|
Miroslav Stampar
|
18d27cabc5
|
more changes
|
2010-10-07 15:34:17 +00:00 |
|
Miroslav Stampar
|
440ff639bb
|
more refactoring
|
2010-10-07 14:05:34 +00:00 |
|
Miroslav Stampar
|
e80a66acc5
|
minor update
|
2010-10-07 12:21:59 +00:00 |
|
Miroslav Stampar
|
1bf8939e2f
|
further updates
|
2010-10-06 22:43:04 +00:00 |
|
Miroslav Stampar
|
0ad8090ad8
|
fix for a google bug reported by Brandon E.
|
2010-10-01 08:03:39 +00:00 |
|
Miroslav Stampar
|
c6bf0e43af
|
minor update
|
2010-09-27 13:41:18 +00:00 |
|
Miroslav Stampar
|
c39d819dd2
|
fix for a resume bug reported by Augusto Urbieta
|
2010-07-20 08:13:02 +00:00 |
|
Bernardo Damele
|
9bce22683b
|
Minor bug fix and adjustment to deal with Keep-Alive also against Google (-g)
|
2010-06-11 10:08:19 +00:00 |
|
Miroslav Stampar
|
12a5ec9f3d
|
more unicode refactoring
|
2010-06-02 12:45:40 +00:00 |
|
Bernardo Damele
|
89c721a451
|
More replacements from open() to codecs.open(). conf.dataEncoding has to be used only for non-binary files.
|
2010-05-29 10:10:28 +00:00 |
|
Miroslav Stampar
|
a3db3c03c1
|
str() -> unicode()
|
2010-05-28 13:05:02 +00:00 |
|
Miroslav Stampar
|
20d05cc404
|
way to handle re.I (ignore case) while using getCompiledRegex
|
2010-05-21 15:03:40 +00:00 |
|
Miroslav Stampar
|
5d5ebd49b6
|
introducing regex caching mechanism
|
2010-05-21 14:42:59 +00:00 |
|
Miroslav Stampar
|
e938331d8e
|
better regex used avoiding garbage google images
|
2010-05-15 22:02:28 +00:00 |
|
Miroslav Stampar
|
d20b99ed65
|
fix (google is changing that class r to class "r")
|
2010-05-15 21:51:31 +00:00 |
|
Miroslav Stampar
|
b8a5a54395
|
minor update
|
2010-05-15 20:44:08 +00:00 |
|
Miroslav Stampar
|
ca3e12ae73
|
added calculateDeltaSeconds method for dealing with non-deterministic time behaviour in some cases (e.g. WAITFOR DELAY in case of MSSQL)
|
2010-05-13 11:05:35 +00:00 |
|
Bernardo Damele
|
457d32c73e
|
Proper displaying of debug messages (-v >= 2)
|
2010-05-11 13:58:53 +00:00 |
|
Miroslav Stampar
|
6752e66164
|
added charsetType=2 (integer) to queryOutputLength
|
2010-05-11 12:23:38 +00:00 |
|
Bernardo Damele
|
758a858785
|
Minor adjustments
|
2010-04-06 20:40:14 +00:00 |
|