Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

revert-5260-master

revert-5598-master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5443

#5459

#5475

#5478

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5625

#5649

#5658

#5665

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5845

#5849

#5849

#5852

#5852

#5859

#5860

#5860

#5864

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5881

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.2

1.9.3

Mono Color

• 24d3e24db0 more updates regarding --os-shell feature Miroslav Stampar 2010-02-25 12:16:49 +0000
• b558712a47 more feature updates Miroslav Stampar 2010-02-25 11:40:49 +0000
• 15d1fcbb7f now runcmd exe has random name too Miroslav Stampar 2010-02-25 10:47:12 +0000
• bad2acdcb9 some minor command output adjustment Miroslav Stampar 2010-02-25 10:39:15 +0000
• 2cafd5697b new changes regarding --os-shell Miroslav Stampar 2010-02-25 10:33:41 +0000
• 858cb25975 update Miroslav Stampar 2010-02-24 23:40:56 +0000
• 0795e1164d Removed ignore of deprecation warning, dealt with it in convert.py Bernardo Damele 2010-02-23 09:37:10 +0000
• 4bea0e343a Avoiding md5/sha1 deprecated warning in Python >=2.6 Miroslav Stampar 2010-02-23 08:54:33 +0000
• 8f26f30740 revert changes Miroslav Stampar 2010-02-22 14:35:08 +0000
• ad0def7604 fix (pretty sure :) Miroslav Stampar 2010-02-22 14:13:32 +0000
• 7e5a980f1b __asm keyword is not supported by Win64 (we'll need to find a solution for this). This keyword _M_IX86 is only defined on Win32. Miroslav Stampar 2010-02-22 14:02:13 +0000
• ccec743ba1 Minor adjustments to README files Bernardo Damele 2010-02-21 19:12:41 +0000
• e05785fef6 Recompiled MySQL/Linux shared object, optimized for size (-Os) Bernardo Damele 2010-02-21 18:01:54 +0000
• 16edd18a03 modifications Miroslav Stampar 2010-02-21 09:18:44 +0000
• 60366f7168 new program for running command prompt commands Miroslav Stampar 2010-02-21 08:52:54 +0000
• 9c014c0fd0 minor change Miroslav Stampar 2010-02-20 23:11:05 +0000
• 2a07af2294 removed pdb tracing Miroslav Stampar 2010-02-20 22:36:17 +0000
• 0debc95ad4 some fixes Miroslav Stampar 2010-02-20 22:31:54 +0000
• 3c34066d19 Added newly compiled PostgreSQL UDFs for Windows Bernardo Damele 2010-02-20 20:59:13 +0000
• af1d9f129c Recompiled and tested PostgreSQL shared object (Linux) optimized for size (gcc flag -Os). Bernardo Damele 2010-02-20 19:10:55 +0000
• d1e3596382 Minor UPX adjustment Bernardo Damele 2010-02-20 19:02:55 +0000
• 6267e74bfb Added newly compiled PostgreSQL UDFs for Linux Bernardo Damele 2010-02-19 23:29:27 +0000
• b28aeef8ff Aligned PostgreSQL shared object source code for Linux Bernardo Damele 2010-02-19 17:11:17 +0000
• 3fea964538 fix, finally.... Miroslav Stampar 2010-02-19 16:44:37 +0000
• 16599cf2cf typo fix Bernardo Damele 2010-02-16 22:54:22 +0000
• 0ed5ba5559 minor update Miroslav Stampar 2010-02-16 13:24:09 +0000
• c4951fd631 some updates regarding --os-shell option Miroslav Stampar 2010-02-16 13:20:34 +0000
• b5deab1e43 added some basic error handling for it to be more user friendly Miroslav Stampar 2010-02-15 12:46:03 +0000
• 6db0905137 some fixes regarding caveats part of article at http://www.postgresql.org/docs/6.3/static/c3102.htm Miroslav Stampar 2010-02-14 19:37:20 +0000
• 1d55923c9d some fixes regarding caveats part of article at http://www.postgresql.org/docs/6.3/static/c3102.htm Miroslav Stampar 2010-02-14 19:36:02 +0000
• 8131f9c77c Added and fixed README files Bernardo Damele 2010-02-12 00:20:53 +0000
• 7e0c411c0e Updated THANKS file Bernardo Damele 2010-02-11 23:46:50 +0000
• dc06b40ddc Minor exception message fix Bernardo Damele 2010-02-11 23:07:33 +0000
• 89dc99188d --read-file on PostgreSQL now relies on the new sys_fileread() UDF so that also binary files can be read. Fixed a minor bug in custom UDF injection feature --udf-inject. Major code refactoring. Bernardo Damele 2010-02-11 22:57:50 +0000
• f728208ff7 Minor cosmetic fix Bernardo Damele 2010-02-10 15:51:52 +0000
• cef248a5ea update for that invalid target url Otavio Augusto reported Miroslav Stampar 2010-02-10 12:06:23 +0000
• 203cfd114f changed raised exception type Miroslav Stampar 2010-02-10 09:39:36 +0000
• 8e8f6f842c fix for that md5 error reported by Dani (lgrecol@gmail.com) Miroslav Stampar 2010-02-10 09:27:34 +0000
• 00a23ace9a some changes regarding web takeover Miroslav Stampar 2010-02-09 14:27:41 +0000
• 542b01993e minor fix regarding exception handling of multi-part post handler Miroslav Stampar 2010-02-09 14:02:47 +0000
• a6674edf8a regular expressions revisited Miroslav Stampar 2010-02-09 13:01:08 +0000
• 6a5a5d55f2 fix for that --stacked-test error reported by dsu@dsu.com.ua Miroslav Stampar 2010-02-09 11:27:42 +0000
• 212cd828d6 new and working asp uploader Miroslav Stampar 2010-02-08 17:07:09 +0000
• bc0eb880df fix for that -- bug Miroslav Stampar 2010-02-08 11:44:32 +0000
• 4e6af8d6c9 some syntax corrections Miroslav Stampar 2010-02-08 09:10:32 +0000
• 5c92fad5dc Avoid to check for existence of not needed UDFs and minor code adjustment for cleanup() method Bernardo Damele 2010-02-05 23:14:16 +0000
• b08a4efb4b Minor layout adjustments Bernardo Damele 2010-02-04 17:45:56 +0000
• 22995787d1 Updated THANKS file Bernardo Damele 2010-02-04 15:24:13 +0000
• d291464cd4 code refactoring regarding path normalization Miroslav Stampar 2010-02-04 14:50:54 +0000
• dbd52c52e4 minor fix Miroslav Stampar 2010-02-04 14:39:24 +0000
• ec63fc4036 code refactoring - added functions posixToNtSlashes and ntToPosixSlashes Miroslav Stampar 2010-02-04 14:37:00 +0000
• a1e80e77a1 fix for HTTP_POST_FILES issue ( added if (phpversion() < '4.1.0')...else... ) Miroslav Stampar 2010-02-04 13:08:48 +0000
• 87239476af more fixes :) Miroslav Stampar 2010-02-04 10:10:41 +0000
• e4699f389d some bug fixes regarding --os-shell usage against windows servers Miroslav Stampar 2010-02-04 09:49:31 +0000
• ea045eaa2f fixed serious issue with adding file paths into kb.absFilePaths (dirname was wrongly added, and afterwards getDirs used dirname of dirname) also, fixed some issues with Windows paths Miroslav Stampar 2010-02-03 16:40:12 +0000
• 7c88e32f9d bug fix for 404 program termination during shell upload attempt Miroslav Stampar 2010-02-03 16:16:34 +0000
• 565433097e used normalizePath instead of os.path.normalize Miroslav Stampar 2010-02-03 16:10:09 +0000
• 494e014a4a minor update Miroslav Stampar 2010-02-03 16:04:44 +0000
• 8b0d31a6b7 fix for cases where both posix and nt path versions of windows paths are in parsed web page Miroslav Stampar 2010-02-03 15:34:20 +0000
• 894b9f0f80 minor minor update Miroslav Stampar 2010-02-03 15:15:30 +0000
• 25f1a9c7d0 upgrade of web directory parsing for things like C:/xampp/htdocs/sqlmap/mysql/get_int.php (XAMPP uses this) Miroslav Stampar 2010-02-03 15:06:41 +0000
• 87c8bdbc29 removed pdb tracing Miroslav Stampar 2010-02-03 14:52:29 +0000
• c74b920f54 bug fix Miroslav Stampar 2010-02-03 14:49:28 +0000
• 950dba5139 Minor bug fix for --start and --stop Bernardo Damele 2010-02-02 14:17:39 +0000
• 9ed0744510 Added some error messages to detect back-end DBMS Bernardo Damele 2010-01-30 22:24:20 +0000
• 267cf5dd1a Updated documentation Bernardo Damele 2010-01-30 00:08:10 +0000
• 7faefcca88 Minor logging messages adjustments Bernardo Damele 2010-01-29 23:19:52 +0000
• 979c919dc7 Minor logging message adjustment Bernardo Damele 2010-01-29 22:58:12 +0000
• e8b0fd90c8 Minor bug fix Bernardo Damele 2010-01-29 19:32:02 +0000
• 767c67e37a --priv-esc now relieas on more powerful and complete getsystem Meterpreter command that also implements kitrap0d as 4th technique Bernardo Damele 2010-01-29 14:57:33 +0000
• c20b196518 not sure that svn added binary flag automatically to this file (done it manually) Miroslav Stampar 2010-01-29 10:18:17 +0000
• 061794650f minor fix Miroslav Stampar 2010-01-29 10:15:05 +0000
• 92817159dc cloaked upx for windows (used mkstemp because of execution and file access rights problem) Miroslav Stampar 2010-01-29 10:12:09 +0000
• 200518724c By default do not use Churrasco, but still let the user choose it. The default technique to privilege escalate the OS user to SYSTEM when --priv-esc is provided now it 'run kitrap0d'. Bernardo Damele 2010-01-29 02:27:50 +0000
• 7b8316728c Major bug fix in takeover functionalities on Microsoft SQL Server Bernardo Damele 2010-01-29 00:09:05 +0000
• c6cae7da41 Updated changelog Bernardo Damele 2010-01-28 23:10:54 +0000
• 144dc1b8c4 Show proper warning message when --priv-esc is provided and underlying OS is not Windows Bernardo Damele 2010-01-28 17:22:17 +0000
• 6f5d2ed171 Minor cosmetic adjustments Bernardo Damele 2010-01-28 17:07:34 +0000
• a2077bfc0e quick fix Miroslav Stampar 2010-01-28 16:56:00 +0000
• 732ed48e2b some refactoring regarding decloaking Miroslav Stampar 2010-01-28 16:50:34 +0000
• dcbbad642d Minor self fix, switched to rc6 Bernardo Damele 2010-01-28 10:27:47 +0000
• f6b447f6e7 fix for "NameError: global name 'webFileStreamUpload' is not defined" Miroslav Stampar 2010-01-28 08:54:47 +0000
• a20bbc3974 Removed carriage return (\r) from UDFs shared library source code Bernardo Damele 2010-01-28 01:16:01 +0000
• 645afee359 some changes Miroslav Stampar 2010-01-28 00:25:36 +0000
• 921e449454 added support for cloaking Churrasco.exe file Miroslav Stampar 2010-01-28 00:07:33 +0000
• 4559ded6c1 added new line at the end of the file Miroslav Stampar 2010-01-27 17:02:23 +0000
• f4b8ce5c72 fix for 'No such file or directory' OSError exception Miroslav Stampar 2010-01-27 17:00:54 +0000
• 00002eeb38 bad grammar fix Miroslav Stampar 2010-01-27 16:05:32 +0000
• d0acb1c5a3 another fix. hope it works :) Miroslav Stampar 2010-01-27 16:01:50 +0000
• f8056f4098 quick fix regarding usage of StringIO instead of file stream Miroslav Stampar 2010-01-27 15:44:35 +0000
• a0eabb6719 Id property set Miroslav Stampar 2010-01-27 14:28:34 +0000
• 8a8dc73980 more fixes Miroslav Stampar 2010-01-27 14:27:11 +0000
• 1d15c595a4 minor fix Miroslav Stampar 2010-01-27 14:08:09 +0000
• e63428207c modified a way to handle shell scripts Miroslav Stampar 2010-01-27 13:59:25 +0000
• f91687c4f7 removed old plain text shell scripts Miroslav Stampar 2010-01-27 13:58:28 +0000
• 6966c235a4 removed junk file Miroslav Stampar 2010-01-27 13:57:19 +0000
• 93b7994c0c added new cloaking functionality for shell scripts Miroslav Stampar 2010-01-27 13:56:26 +0000
• a78bf9a88b new files Miroslav Stampar 2010-01-27 13:55:13 +0000
• 6437c16156 run kitrap0d script along with listing Windows Impersonation Tokens via meterpreter's incognito extension when --priv-esc is provided (see #149). Bernardo Damele 2010-01-26 01:14:44 +0000
• a97e20d8e1 Added proper svn:keywords Bernardo Damele 2010-01-25 11:03:23 +0000