Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5443

#5459

#5475

#5478

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5649

#5658

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5849

#5849

#5852

#5859

#5860

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5883

#5890

#5893

#5910

#5913

#5923

#5923

#5930

#5931

#5932

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

Mono Color

• c54c9ee5d1 minor update Miroslav Stampar 2010-11-23 22:33:00 +0000
• 57ad59206b cosmetics as it's best Miroslav Stampar 2010-11-23 22:09:10 +0000
• 7a147041c4 cosmetics Miroslav Stampar 2010-11-23 21:44:58 +0000
• f4f0bc9db3 minor fix Miroslav Stampar 2010-11-23 21:17:01 +0000
• f9f076ba97 code refactoring Miroslav Stampar 2010-11-23 21:00:42 +0000
• 7877a931d5 more cosmetics regarding dictionary attack Miroslav Stampar 2010-11-23 20:54:40 +0000
• e3b3e05748 minor update Miroslav Stampar 2010-11-23 19:21:30 +0000
• 0d24a15182 more cosmetics Miroslav Stampar 2010-11-23 19:10:34 +0000
• 836a1c214a los cosmeticados (of hash dictionary attack) Miroslav Stampar 2010-11-23 18:57:00 +0000
• c4414df594 minor update Miroslav Stampar 2010-11-23 15:33:13 +0000
• 78024eafe0 little precaution Miroslav Stampar 2010-11-23 15:31:23 +0000
• 4af000e699 minor language update (in testing phase "used" is more preferable than "provided") Miroslav Stampar 2010-11-23 15:11:15 +0000
• e32be2b4e7 Minor adjustment Bernardo Damele 2010-11-23 15:06:40 +0000
• b41ee8d0d0 minor refactoring Miroslav Stampar 2010-11-23 14:57:36 +0000
• aa5d038f18 more code refactoring Miroslav Stampar 2010-11-23 14:50:47 +0000
• 3cae76627c code refactoring regarding dictionary attack Miroslav Stampar 2010-11-23 13:58:01 +0000
• ba4ea32603 first working version of dictionary attack Miroslav Stampar 2010-11-23 13:24:02 +0000
• c471b815cc fix for a bug reported by BugTrace (IndexError: list index out of range) Miroslav Stampar 2010-11-22 10:58:08 +0000
• bfc9378542 sorry, even more proper naming should be like this (passwd is a standard naming for this kind of function(s)) Miroslav Stampar 2010-11-20 13:22:59 +0000
• db59faedb9 more proper naming Miroslav Stampar 2010-11-20 13:20:28 +0000
• 52c722dab5 renaming of dicts.zip to wordlists.zip (more proper name) Miroslav Stampar 2010-11-20 13:17:13 +0000
• 1f8a9fe033 foundations for dictionary attack support combined with the sqlmap's password/hash retrieval functionality (--password switch) Miroslav Stampar 2010-11-20 13:14:13 +0000
• 71107e4e9e quick fix for google searches Miroslav Stampar 2010-11-19 21:38:20 +0000
• 99a23e23cf Extra check on --union-cols value Bernardo Damele 2010-11-19 16:39:26 +0000
• da7eb329bb removing file Miroslav Stampar 2010-11-19 16:04:07 +0000
• 1fa567e14d new file added (dictionary attack on password hashes - MySQL, MSSQL, Oracle and Posgres - is soon going to be a part of sqlmap) Miroslav Stampar 2010-11-19 15:51:56 +0000
• c23126547e Improved --union-cols to accept a range to test for union SQL injection. By default it is 1-20. Bernardo Damele 2010-11-19 15:48:24 +0000
• ad17e9ed2a Added new switch --union-char to be able to provide the character used in union-test and exploit (default is still NULL, but can be any) Bernardo Damele 2010-11-19 14:56:20 +0000
• c6545f5c9f we had a bug (nooooooooo!!!! :)) Miroslav Stampar 2010-11-19 10:36:47 +0000
• df88280681 minor update of google regex (that * was a junky one) Miroslav Stampar 2010-11-19 10:04:29 +0000
• e8bef28337 updating google parsing regex (for the better, of course) Miroslav Stampar 2010-11-19 10:00:29 +0000
• d97e97d884 minor update :) Miroslav Stampar 2010-11-19 09:02:44 +0000
• 4a9bd3a240 Finally a proper union query SQL injection test engine for --union-test. It does much more requests, but for god sake now it works well! Bernardo Damele 2010-11-18 17:55:43 +0000
• 544327379f Little precaution Bernardo Damele 2010-11-18 14:32:52 +0000
• f6a17cb1a8 Revert wrong fix Bernardo Damele 2010-11-18 10:41:06 +0000
• 17486e472a Proper english (--postfix is now --suffix) and --string/--regexp does not necessarily need to match into the original response body, it might well be in the injected True condition only! Bernardo Damele 2010-11-17 22:00:09 +0000
• ca5125bbe0 minor update related to r2401 Miroslav Stampar 2010-11-17 20:50:31 +0000
• 360aff7a4d sqlite3 library is not part of Gentoo (perhaps others) Python packages or installation bundle Bernardo Damele 2010-11-17 17:20:32 +0000
• a0df36beda when in multi target mode this should be done (another bug was reported by ToR for using "old" data - kb was not properly cleared) Miroslav Stampar 2010-11-17 15:33:07 +0000
• 17f0609263 minor bug fix Miroslav Stampar 2010-11-17 13:29:57 +0000
• 3d25071d06 another minor improvement regarding logging of http traffic Miroslav Stampar 2010-11-17 12:16:48 +0000
• 3e569a1693 minor update Miroslav Stampar 2010-11-17 12:04:33 +0000
• 2802923dbe some improvements regarding --os-shell web server application choice Miroslav Stampar 2010-11-17 11:45:52 +0000
• 5abbea4a9f fix for a bug reported by nightman (unknown charset 'null') Miroslav Stampar 2010-11-17 09:57:32 +0000
• d757e4ae1c bug fix (when user manually sets web root, that same directory should be used as one of potentionaly default dirs) Miroslav Stampar 2010-11-17 09:46:04 +0000
• bec152609a minor cosmetics and bug fix for Windows machines ('\\' is interpreted as \ and inside the script it can screw things up as it's a marker for a special character - thus '\\\\' is interpreted as \\ which represents special character \) Miroslav Stampar 2010-11-17 09:33:05 +0000
• af92c05930 removing 'MD5' referings Miroslav Stampar 2010-11-17 09:15:40 +0000
• 76c3f5768b cosmetics Miroslav Stampar 2010-11-17 09:12:48 +0000
• 2a8e270bef proper handling of carriage return character from Windows target machines Miroslav Stampar 2010-11-16 15:11:03 +0000
• ab33651f96 minor bug fix for displaying text from windows machines (\r was interfering with normal dataToStdout behavior) Miroslav Stampar 2010-11-16 15:02:22 +0000
• 3487429eac minor cosmetics Miroslav Stampar 2010-11-16 14:41:46 +0000
• 3640dbf745 fix for --parse-errors (on IIS HTTP error is raised which need to be processed) Miroslav Stampar 2010-11-16 14:33:30 +0000
• cccb565859 cosmetics Miroslav Stampar 2010-11-16 14:11:32 +0000
• b9d9f18939 added General cmdline group Miroslav Stampar 2010-11-16 14:09:09 +0000
• e7a66371f8 update regarding os shell-ing regarding JSP and ASPX Miroslav Stampar 2010-11-16 13:46:46 +0000
• 6232397129 minor update Miroslav Stampar 2010-11-16 10:52:49 +0000
• 6ef3846400 update regarding error parsing (and reporting) Miroslav Stampar 2010-11-16 10:42:42 +0000
• 71cb982039 Another bug fix to --union-test Bernardo Damele 2010-11-15 21:42:56 +0000
• b3ad63b71e major bug fix (haven't applied dynamic content removal to the original comparison (conf.seqMatcher.a) page) Miroslav Stampar 2010-11-15 14:59:37 +0000
• ff310475c8 some reporting update for --forms Miroslav Stampar 2010-11-15 14:17:51 +0000
• 20d6b9a5c1 minor fix Miroslav Stampar 2010-11-15 12:24:32 +0000
• 39c6c9f386 minor update Miroslav Stampar 2010-11-15 12:19:22 +0000
• 819085155e minor update/fix Miroslav Stampar 2010-11-15 12:07:13 +0000
• c25c017c08 cosmetics regarding --forms Miroslav Stampar 2010-11-15 11:50:33 +0000
• 36c544f440 update (--forms acts now more like -g switch) Miroslav Stampar 2010-11-15 11:34:57 +0000
• 42d09d604e minor fix Miroslav Stampar 2010-11-15 09:48:58 +0000
• a9152c6723 Updated doc Bernardo Damele 2010-11-14 22:36:54 +0000
• 5f46a549ba Cosmetics for --forms Bernardo Damele 2010-11-14 21:59:35 +0000
• 0bfc1b411a Another bug fix for --union-test Bernardo Damele 2010-11-14 15:39:57 +0000
• a0fb96816f fix for a bug reported by ToR (value += actVer) Miroslav Stampar 2010-11-14 08:31:29 +0000
• 5e41cd07a3 Updated doc Bernardo Damele 2010-11-13 23:31:18 +0000
• 7da079fa32 More verbose comment for direct connection Bernardo Damele 2010-11-13 23:30:38 +0000
• 8d07272c82 Added --union-cols switch to specify the max number of columns to test for UNION query sql injection. Now stores/resumes also the exact UNION payload to session file. Bernardo Damele 2010-11-13 23:24:41 +0000
• df5dc10111 Major enhancement to --union-test check Bernardo Damele 2010-11-13 22:47:37 +0000
• 84849316b3 improvement of heuristic check (now original value is included too) Miroslav Stampar 2010-11-12 23:06:01 +0000
• 06a872fc99 update/fix for an issue reported by nightman (IncompleteRead: IncompleteRead(1284 bytes read)) Miroslav Stampar 2010-11-12 22:57:33 +0000
• 27735b14df update (--string and --regex should be done regardless of wasLastRequestError) Miroslav Stampar 2010-11-12 22:44:15 +0000
• 0d66f101da fix for a bug reported by Bugtrace (--string "pengcheng_cui" and "Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource" on False pages) Miroslav Stampar 2010-11-12 22:29:33 +0000
• a777d59870 Minor bug fix Bernardo Damele 2010-11-12 15:17:12 +0000
• 0a83a830d9 Properly handle both HTTPS and HTTP requests through proxy Bernardo Damele 2010-11-12 14:21:46 +0000
• e1ef27f592 work-around to be able to pass in the -r request file the Host header, the ending string ":443" and so sqlmap will go over https Bernardo Damele 2010-11-12 12:25:02 +0000
• 9f53048ff4 Put a space always between the user's provided prefix and sqlmap payload Bernardo Damele 2010-11-12 11:48:26 +0000
• 697b32554c fix for a bug "ordinal not in range(128)" reported by bugtrace Miroslav Stampar 2010-11-12 11:48:25 +0000
• f83dd2251b Properly save error-based enumerated data in session file, able to be resumed like with other techniques Bernardo Damele 2010-11-12 11:40:37 +0000
• a34c1b287c Bug fix related to properly identify and parse the version from the banner (used for --stacked-test and other matters on MySQL/PgSQL) Bernardo Damele 2010-11-12 11:33:11 +0000
• 8cec75656c Bug fix to properly save the match ratio only if numeric (to avoid also tracebacks when match is based on --string or --regexp) Bernardo Damele 2010-11-12 10:31:42 +0000
• a14e4d9668 Referer does not have to be static, it's already a switch (--referer) so that user can specify it manually. Bernardo Damele 2010-11-12 10:16:39 +0000
• 64b5de44a0 Converted to new XML object format Bernardo Damele 2010-11-12 10:11:13 +0000
• 66c82d72e4 Typo fix Bernardo Damele 2010-11-12 10:02:02 +0000
• 306e96331d Updated doc Bernardo Damele 2010-11-12 10:00:49 +0000
• 42272ca78c minor update Miroslav Stampar 2010-11-11 22:26:36 +0000
• 8aefd0bbf7 improvement of --common-tables and --common-columns Miroslav Stampar 2010-11-11 20:37:25 +0000
• 2d872f850a quick fix Miroslav Stampar 2010-11-11 19:54:54 +0000
• be992b4471 update regarding common columns existance check Miroslav Stampar 2010-11-11 17:09:31 +0000
• 3b996c3ed8 adding JSP stager Miroslav Stampar 2010-11-11 16:42:01 +0000
• 2d361cb359 some minor updates of stager.asp and backdoor.asp, and completely rewritten stager.aspx Miroslav Stampar 2010-11-11 10:33:29 +0000
• 24238ccd0b re-renaming of brute force switches. this way is better. Miroslav Stampar 2010-11-11 07:57:44 +0000
• ca06db8f28 now, this is the real deal Miroslav Stampar 2010-11-11 00:20:47 +0000
• 5034868b36 cleaning up of common tables and new common columns Miroslav Stampar 2010-11-10 23:31:23 +0000
• 96d88877ba bug fix (reported by ToR) Miroslav Stampar 2010-11-10 19:44:51 +0000