Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5443

#5459

#5475

#5478

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5649

#5658

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5849

#5849

#5852

#5859

#5860

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5883

#5890

#5893

#5910

#5913

#5923

#5923

#5930

#5931

#5932

#5940

#5944

#5945

#5945

#5952

#5953

#5957

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

1.9.8

1.9.9

Mono Color

• 283a04e29a On my way to properly parse test's <where> tag in exploitation phase Bernardo Damele 2010-12-01 23:32:58 +0000
• 09b265a1ea Got rid of conf.logic for the moment, haven't decided yet what to do with parenthesis check Bernardo Damele 2010-12-01 23:32:02 +0000
• df4cb1a601 On the way to get full support for injection on ORDER BY and GROUP BY clauses Bernardo Damele 2010-12-01 23:30:38 +0000
• 47f2d22181 Minor bug fix Bernardo Damele 2010-12-01 17:18:31 +0000
• 089c16a1b8 Added tag <epayload> to the payloads.xml's <test> tag to define which payload to use when exploiting the test type. Removed some useless tests. Moved <error> from queries.xml to payloads.xml as it makes more sense. Beeps at sql inj found only if --beep is provided. Minor fix in order to be able to pickle advancedDict() objects. Minor code refactoring. Removed useless folders. Bernardo Damele 2010-12-01 17:09:52 +0000
• c00ea7f5e5 Store and resume also UNION char to session file (--union-char) Bernardo Damele 2010-12-01 10:59:58 +0000
• 025361c970 Higher precedence to union query sql inj than error-based Bernardo Damele 2010-12-01 10:57:17 +0000
• 56d2b2f322 Avoid storing to session file also payload delimiters Bernardo Damele 2010-12-01 10:55:59 +0000
• 2708aad504 Unified start and stop delimiters accross errror-based (detection engine) and union query (--union-test) tests. Bernardo Damele 2010-12-01 10:31:50 +0000
• 8d84dcc5dc More sense Bernardo Damele 2010-12-01 09:17:17 +0000
• c8f943f5e4 Now, if the back-end dbms type has been identified by the detection engine, skips the fingerprint phase. Major code refactoring and commenting to detection engine. Ask user whether or not to proceed to test remaining parameters after an injection point has been identified. Restore beep at SQL injection find. Avoid reuse of same variable in DBMS handler code. Minor adjustment of payloads XML file. Bernardo Damele 2010-11-30 22:40:25 +0000
• fcdebbd55f cosmeticados Miroslav Stampar 2010-11-30 14:48:13 +0000
• 47a7708950 minor improvement of dynamic content detection/removal part Miroslav Stampar 2010-11-30 12:45:42 +0000
• 8b9706656e Got rid of unreliable 'ORDER BY' technique to detect UNION query SQL injection, consequently switch --union-tech has gone now. Minor code refactoring too. Bernardo Damele 2010-11-29 17:18:38 +0000
• e9291932e5 Apply --level also to User-Agent (level >= 4) and Cookie (level >= 3). GET and POST parameters are always tested. Bernardo Damele 2010-11-29 16:33:20 +0000
• e735f2960a minor update Miroslav Stampar 2010-11-29 15:25:45 +0000
• c76d740a25 just a precaution Bernardo Damele 2010-11-29 15:21:56 +0000
• 70e87d959e update of dynamicity engine Miroslav Stampar 2010-11-29 15:14:49 +0000
• ee4e04ebca Minor adjustment Bernardo Damele 2010-11-29 15:09:40 +0000
• 2efb3b78ea Consider also --dbms value during the detection phase Bernardo Damele 2010-11-29 14:48:07 +0000
• be6df7abd9 improvement of dynamicity engine Miroslav Stampar 2010-11-29 14:30:57 +0000
• 76ce9cc888 Minor bug fix for --forms Bernardo Damele 2010-11-29 12:46:18 +0000
• 6525e08d6b Minor adjustment to detect the proper parameter type based upon --prefix and --suffix values Bernardo Damele 2010-11-29 12:13:42 +0000
• c22338ce90 Removed --error-test, --stacked-test and --time-test switches and adapted the code accordingly. This is due to the fact that the new XML based detection engine already supports all of those tests (and more). Bernardo Damele 2010-11-29 11:47:58 +0000
• e8c6c01e27 precaution Bernardo Damele 2010-11-29 09:54:30 +0000
• 9d7087e2ff Proper saving and resuming when more than a parameter are injectable. Minor bug fix to --stacked-test Minor code refactoring. Bernardo Damele 2010-11-29 01:04:42 +0000
• 75f7df75b6 Minor fix Bernardo Damele 2010-11-28 23:33:51 +0000
• 472f4465a6 Prioritize DBMS fingerprint based on DBMS (<dbms>) identified during the detection phase. Minor bug fix to properly handle the case that no injections are found. Nicer display of injection vulnerabilities detected. Minor code refactoring. Bernardo Damele 2010-11-28 21:27:47 +0000
• 7e3b24afe6 Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own. All (hopefully) functionalities should still be working. Added two switches, --level and --risk to specify which injection tests and boundaries to use. The main advantage now is that sqlmap is able to identify initially which injection types are present so for instance if boolean-based blind is not supported, but error-based is, sqlmap will keep going and work! Bernardo Damele 2010-11-28 18:10:54 +0000
• a8b38ba76b removed a trailer blank like (cosmetics) Miroslav Stampar 2010-11-24 14:25:16 +0000
• 6712f4da55 some refactoring and one less request for aspx maintanance during --os-shell Miroslav Stampar 2010-11-24 14:20:43 +0000
• 253eafb643 paranoid cosmetics Bernardo Damele 2010-11-24 12:03:01 +0000
• b2b521fc8a gready regex bastard :) Miroslav Stampar 2010-11-24 12:01:36 +0000
• 9579a97039 now ASPX works too for --os-shell Miroslav Stampar 2010-11-24 11:38:27 +0000
• ca58bdbc66 minor update Miroslav Stampar 2010-11-24 10:54:15 +0000
• c54c9ee5d1 minor update Miroslav Stampar 2010-11-23 22:33:00 +0000
• 57ad59206b cosmetics as it's best Miroslav Stampar 2010-11-23 22:09:10 +0000
• 7a147041c4 cosmetics Miroslav Stampar 2010-11-23 21:44:58 +0000
• f4f0bc9db3 minor fix Miroslav Stampar 2010-11-23 21:17:01 +0000
• f9f076ba97 code refactoring Miroslav Stampar 2010-11-23 21:00:42 +0000
• 7877a931d5 more cosmetics regarding dictionary attack Miroslav Stampar 2010-11-23 20:54:40 +0000
• e3b3e05748 minor update Miroslav Stampar 2010-11-23 19:21:30 +0000
• 0d24a15182 more cosmetics Miroslav Stampar 2010-11-23 19:10:34 +0000
• 836a1c214a los cosmeticados (of hash dictionary attack) Miroslav Stampar 2010-11-23 18:57:00 +0000
• c4414df594 minor update Miroslav Stampar 2010-11-23 15:33:13 +0000
• 78024eafe0 little precaution Miroslav Stampar 2010-11-23 15:31:23 +0000
• 4af000e699 minor language update (in testing phase "used" is more preferable than "provided") Miroslav Stampar 2010-11-23 15:11:15 +0000
• e32be2b4e7 Minor adjustment Bernardo Damele 2010-11-23 15:06:40 +0000
• b41ee8d0d0 minor refactoring Miroslav Stampar 2010-11-23 14:57:36 +0000
• aa5d038f18 more code refactoring Miroslav Stampar 2010-11-23 14:50:47 +0000
• 3cae76627c code refactoring regarding dictionary attack Miroslav Stampar 2010-11-23 13:58:01 +0000
• ba4ea32603 first working version of dictionary attack Miroslav Stampar 2010-11-23 13:24:02 +0000
• c471b815cc fix for a bug reported by BugTrace (IndexError: list index out of range) Miroslav Stampar 2010-11-22 10:58:08 +0000
• bfc9378542 sorry, even more proper naming should be like this (passwd is a standard naming for this kind of function(s)) Miroslav Stampar 2010-11-20 13:22:59 +0000
• db59faedb9 more proper naming Miroslav Stampar 2010-11-20 13:20:28 +0000
• 52c722dab5 renaming of dicts.zip to wordlists.zip (more proper name) Miroslav Stampar 2010-11-20 13:17:13 +0000
• 1f8a9fe033 foundations for dictionary attack support combined with the sqlmap's password/hash retrieval functionality (--password switch) Miroslav Stampar 2010-11-20 13:14:13 +0000
• 71107e4e9e quick fix for google searches Miroslav Stampar 2010-11-19 21:38:20 +0000
• 99a23e23cf Extra check on --union-cols value Bernardo Damele 2010-11-19 16:39:26 +0000
• da7eb329bb removing file Miroslav Stampar 2010-11-19 16:04:07 +0000
• 1fa567e14d new file added (dictionary attack on password hashes - MySQL, MSSQL, Oracle and Posgres - is soon going to be a part of sqlmap) Miroslav Stampar 2010-11-19 15:51:56 +0000
• c23126547e Improved --union-cols to accept a range to test for union SQL injection. By default it is 1-20. Bernardo Damele 2010-11-19 15:48:24 +0000
• ad17e9ed2a Added new switch --union-char to be able to provide the character used in union-test and exploit (default is still NULL, but can be any) Bernardo Damele 2010-11-19 14:56:20 +0000
• c6545f5c9f we had a bug (nooooooooo!!!! :)) Miroslav Stampar 2010-11-19 10:36:47 +0000
• df88280681 minor update of google regex (that * was a junky one) Miroslav Stampar 2010-11-19 10:04:29 +0000
• e8bef28337 updating google parsing regex (for the better, of course) Miroslav Stampar 2010-11-19 10:00:29 +0000
• d97e97d884 minor update :) Miroslav Stampar 2010-11-19 09:02:44 +0000
• 4a9bd3a240 Finally a proper union query SQL injection test engine for --union-test. It does much more requests, but for god sake now it works well! Bernardo Damele 2010-11-18 17:55:43 +0000
• 544327379f Little precaution Bernardo Damele 2010-11-18 14:32:52 +0000
• f6a17cb1a8 Revert wrong fix Bernardo Damele 2010-11-18 10:41:06 +0000
• 17486e472a Proper english (--postfix is now --suffix) and --string/--regexp does not necessarily need to match into the original response body, it might well be in the injected True condition only! Bernardo Damele 2010-11-17 22:00:09 +0000
• ca5125bbe0 minor update related to r2401 Miroslav Stampar 2010-11-17 20:50:31 +0000
• 360aff7a4d sqlite3 library is not part of Gentoo (perhaps others) Python packages or installation bundle Bernardo Damele 2010-11-17 17:20:32 +0000
• a0df36beda when in multi target mode this should be done (another bug was reported by ToR for using "old" data - kb was not properly cleared) Miroslav Stampar 2010-11-17 15:33:07 +0000
• 17f0609263 minor bug fix Miroslav Stampar 2010-11-17 13:29:57 +0000
• 3d25071d06 another minor improvement regarding logging of http traffic Miroslav Stampar 2010-11-17 12:16:48 +0000
• 3e569a1693 minor update Miroslav Stampar 2010-11-17 12:04:33 +0000
• 2802923dbe some improvements regarding --os-shell web server application choice Miroslav Stampar 2010-11-17 11:45:52 +0000
• 5abbea4a9f fix for a bug reported by nightman (unknown charset 'null') Miroslav Stampar 2010-11-17 09:57:32 +0000
• d757e4ae1c bug fix (when user manually sets web root, that same directory should be used as one of potentionaly default dirs) Miroslav Stampar 2010-11-17 09:46:04 +0000
• bec152609a minor cosmetics and bug fix for Windows machines ('\\' is interpreted as \ and inside the script it can screw things up as it's a marker for a special character - thus '\\\\' is interpreted as \\ which represents special character \) Miroslav Stampar 2010-11-17 09:33:05 +0000
• af92c05930 removing 'MD5' referings Miroslav Stampar 2010-11-17 09:15:40 +0000
• 76c3f5768b cosmetics Miroslav Stampar 2010-11-17 09:12:48 +0000
• 2a8e270bef proper handling of carriage return character from Windows target machines Miroslav Stampar 2010-11-16 15:11:03 +0000
• ab33651f96 minor bug fix for displaying text from windows machines (\r was interfering with normal dataToStdout behavior) Miroslav Stampar 2010-11-16 15:02:22 +0000
• 3487429eac minor cosmetics Miroslav Stampar 2010-11-16 14:41:46 +0000
• 3640dbf745 fix for --parse-errors (on IIS HTTP error is raised which need to be processed) Miroslav Stampar 2010-11-16 14:33:30 +0000
• cccb565859 cosmetics Miroslav Stampar 2010-11-16 14:11:32 +0000
• b9d9f18939 added General cmdline group Miroslav Stampar 2010-11-16 14:09:09 +0000
• e7a66371f8 update regarding os shell-ing regarding JSP and ASPX Miroslav Stampar 2010-11-16 13:46:46 +0000
• 6232397129 minor update Miroslav Stampar 2010-11-16 10:52:49 +0000
• 6ef3846400 update regarding error parsing (and reporting) Miroslav Stampar 2010-11-16 10:42:42 +0000
• 71cb982039 Another bug fix to --union-test Bernardo Damele 2010-11-15 21:42:56 +0000
• b3ad63b71e major bug fix (haven't applied dynamic content removal to the original comparison (conf.seqMatcher.a) page) Miroslav Stampar 2010-11-15 14:59:37 +0000
• ff310475c8 some reporting update for --forms Miroslav Stampar 2010-11-15 14:17:51 +0000
• 20d6b9a5c1 minor fix Miroslav Stampar 2010-11-15 12:24:32 +0000
• 39c6c9f386 minor update Miroslav Stampar 2010-11-15 12:19:22 +0000
• 819085155e minor update/fix Miroslav Stampar 2010-11-15 12:07:13 +0000
• c25c017c08 cosmetics regarding --forms Miroslav Stampar 2010-11-15 11:50:33 +0000
• 36c544f440 update (--forms acts now more like -g switch) Miroslav Stampar 2010-11-15 11:34:57 +0000