Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5443

#5459

#5475

#5478

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5649

#5658

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5849

#5849

#5852

#5859

#5860

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5883

#5890

#5893

#5910

#5913

#5923

#5923

#5930

#5931

#5932

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

Mono Color

• 6369a38ebc Adding support for JSON-like data with single quote Miroslav Stampar 2014-02-26 08:56:17 +0100
• 465f968be6 Minor cosmetic update Miroslav Stampar 2014-02-26 08:41:23 +0100
• edc8ef9d5b Patch for an Issue #611 (original page used in case of tamper functions was wrong - e.g. if --tamper=base64encode was used) Miroslav Stampar 2014-02-25 13:48:34 +0100
• 2a423d61ef Raising number of requests for false positive testing in case of higher levels Miroslav Stampar 2014-02-23 19:40:01 +0100
• d405fc1157 Minor update (for the consistency sake) Miroslav Stampar 2014-02-16 22:04:12 +0100
• 58eac364a2 Bug fix Miroslav Stampar 2014-02-16 21:57:14 +0100
• dfa727cbc5 Fix for a same bug mentioned in last commit Miroslav Stampar 2014-02-16 21:47:14 +0100
• 43df4efd11 Bug fix (bad idea is to do os.path.join on web URLs - especially on Windows OS) Miroslav Stampar 2014-02-16 21:44:57 +0100
• d05bfdd7dd Implementing option '--where' (Issue #605) Miroslav Stampar 2014-02-11 16:20:45 +0100
• be6767b3b0 minor fix for command execution via web shell Bernardo Damele 2014-02-10 09:59:57 +0000
• fe0ff6e679 Changing 'is injectable' to 'seems to be injectable' for boolean and time-based blind injection cases - for false positive cases Miroslav Stampar 2014-02-09 17:50:16 +0100
• 8521265526 Minor fix Miroslav Stampar 2014-02-07 14:40:43 +0100
• 8fa452dc9f Updated History (markdown) Bernardo Damele A. G. 2014-02-05 09:07:21 -0800
• de8cb15350 Fix for an Issue #601 Miroslav Stampar 2014-02-05 15:11:39 +0100
• b83d531ab3 Minor fix (Reference: https://en.wikipedia.org/wiki/Internet_Information_Services) Miroslav Stampar 2014-02-05 08:32:55 +0100
• f28b8dbda8 Minor update Miroslav Stampar 2014-02-01 22:24:56 +0100
• 534c2ee0e6 Minor update Miroslav Stampar 2014-02-01 22:12:00 +0100
• 0e44132778 Removing unused imports Miroslav Stampar 2014-02-01 21:49:12 +0100
• f97fcb7bb3 Adding a switch --invalid-string Miroslav Stampar 2014-01-23 21:56:06 +0100
• f88f6dcd7e Changing --invalid-bignum from float producing to int producing Miroslav Stampar 2014-01-23 09:07:25 +0100
• fc02badf40 Minor update Miroslav Stampar 2014-01-23 08:33:21 +0100
• ab36e5a2f0 Fix for an Issue #597 Miroslav Stampar 2014-01-15 10:29:53 +0100
• bc29bf6481 removed comments Bernardo Damele 2014-01-13 23:57:49 +0000
• 1505f1dc74 removed useless sink Bernardo Damele 2014-01-13 23:55:32 +0000
• 124ebefc7f code cleanup Bernardo Damele 2014-01-13 23:48:15 +0000
• 4e8ab48145 fixed match Bernardo Damele 2014-01-13 23:48:00 +0000
• b86353b485 minor fix to DB2 test case Bernardo Damele 2014-01-13 23:34:25 +0000
• 85f60d0c09 leftovers Bernardo Damele 2014-01-13 17:41:33 +0000
• 536b44a429 adapted Bernardo Damele 2014-01-13 17:38:04 +0000
• 3c79d66569 fixed stderr Bernardo Damele 2014-01-13 17:34:38 +0000
• 43a4e85749 updated copyright Bernardo Damele 2014-01-13 17:24:49 +0000
• d546fc5ad5 slight update to regression test regexp Bernardo Damele 2014-01-13 17:24:09 +0000
• 9a1be29b45 updated test cases for regression test Bernardo Damele 2014-01-13 17:12:59 +0000
• dfa9076a70 fixed and improved web shell upload in MySQL (it was actually broken since fc57b7565d) Bernardo Damele 2014-01-13 17:12:37 +0000
• 6863436d4e Implementation for an Issue #596 Miroslav Stampar 2014-01-13 10:05:49 +0100
• b4139f5b82 added takeover shared object for PgSQL 9.1 Linux 32-bit - issue #20 Bernardo Damele 2014-01-10 18:16:25 +0000
• 4975aafa65 updated live tests Bernardo Damele 2014-01-10 17:38:04 +0000
• 148767941b new host Bernardo Damele 2014-01-10 17:23:27 +0000
• d9e00adfae minor fix Bernardo Damele 2014-01-10 17:23:16 +0000
• 36f3ab5798 Minor bug fix (for cases when race between thread and main thread is causing server._running to not be set to True) Miroslav Stampar 2014-01-09 15:46:55 +0100
• cb1f17cb04 Proper patch for an Issue #591 Miroslav Stampar 2014-01-02 12:15:56 +0100
• 5437f8bf36 Fix for an Issue #85 Miroslav Stampar 2014-01-02 12:09:58 +0100
• 4de83daf03 Minor style update Miroslav Stampar 2014-01-02 11:06:19 +0100
• e0143e397a Consistency fix (down below we use direct SQL) Miroslav Stampar 2014-01-02 10:59:53 +0100
• 0b4fcb6845 Fix for an Issue #591 Miroslav Stampar 2014-01-02 10:55:40 +0100
• 854a55166c Fix for an Issue #588 Miroslav Stampar 2014-01-02 10:29:10 +0100
• 9b4b070ecf Minor cosmetics Miroslav Stampar 2014-01-02 10:05:58 +0100
• 192a911b76 Patch for an Issue #28 Miroslav Stampar 2013-12-29 16:16:50 +0100
• 41d6c1af82 Patch for an Issue #589 Miroslav Stampar 2013-12-28 13:47:40 +0100
• 6c80f2903b Patch for an Issue #564 Miroslav Stampar 2013-12-27 11:02:59 +0100
• 178056968f Cleaning a leftover (deleted) made for Issue #564 Miroslav Stampar 2013-12-27 10:49:15 +0100
• cadbddd607 Adding a boundary proposed in Issue #564 Miroslav Stampar 2013-12-27 10:46:18 +0100
• 7718edac9b Fix for an Issue #570 Miroslav Stampar 2013-12-27 09:40:33 +0100
• 02de2aee6d Patch for an Issue #582 Miroslav Stampar 2013-12-26 22:27:04 +0100
• ab64d385d6 Bug fix (stacked queries as in PgSQL and MsSQL DNS tunneling queries MUST end with the comment - not the recognized underlying technique's suffix) Miroslav Stampar 2013-12-25 22:18:57 +0100
• 2c2667b2be Minor patch for an Issue #575 Miroslav Stampar 2013-12-18 00:56:11 +0100
• fd6dcd8bf5 Merge pull request #583 from mattoufoutu/api Miroslav Stampar 2013-12-17 14:10:19 -0800
• 9ead80d707 Minor patch for Issue #585 Miroslav Stampar 2013-12-17 09:39:43 +0100
• f18abb1e9c Minor update (proxy can be also a https one (e.g. Burp for HTTPS targets) Miroslav Stampar 2013-12-17 09:30:51 +0100
• 7d8eb148ce Patch for an Issue #565 (DuckDuckGo doesn't like identity encoding) Miroslav Stampar 2013-12-17 09:30:04 +0100
• 4819e19200 Patch for an Issue #584 Miroslav Stampar 2013-12-16 22:00:47 +0100
• 4c9456dd72 moar logging! Mathieu Deous 2013-12-15 16:59:47 +0100
• 438ad73016 avoid names shadowing Mathieu Deous 2013-12-15 09:22:01 +0100
• eda9a3da67 all instance attributes should be defined in constructor Mathieu Deous 2013-12-15 09:16:38 +0100
• 3effaee2a1 avoid using global variables, use a "store" class Mathieu Deous 2013-12-15 00:19:58 +0100
• c70f2a4e6d unused imports Mathieu Deous 2013-12-15 00:00:08 +0100
• aa02019638 return file content in a json message when calling download endpoint Mathieu Deous 2013-12-14 16:33:17 +0100
• c87ad1bab5 make returned values more coherent Mathieu Deous 2013-12-14 16:22:30 +0100
• 72137e85f9 do not reset options when firing a scan Mathieu Deous 2013-12-14 15:59:47 +0100
• af7ad31182 fix commit method usage (belongs to connection, not cursor) Mathieu Deous 2013-12-14 15:58:09 +0100
• c5a3f54b89 remove unused imports Mathieu Deous 2013-12-14 15:47:26 +0100
• 8a946509b9 PEP8 Mathieu Deous 2013-12-14 15:44:10 +0100
• 5b2ded0b18 Fix for an Issue #577 Miroslav Stampar 2013-12-13 21:00:26 +0100
• 437278e32d Fix for an Issue #580 Miroslav Stampar 2013-12-13 19:48:05 +0100
• 93628cdd62 Merge pull request #578 from mattoufoutu/master Miroslav Stampar 2013-12-09 04:52:34 -0800
• c3dd6e1e32 api's get_option function doesn't lookup the right object Mathieu Deous 2013-12-08 17:46:02 +0100
• a06a6de193 minor bug fix Bernardo Damele 2013-12-06 13:26:34 +0000
• b7244a07cb Changing testing payload for MsSQL (BINARY_CHECKSUM seems to be blocked in some cases) Miroslav Stampar 2013-12-04 11:32:42 +0100
• b0ca34ff27 Bug fix (payload character '=' was not being url-encoded in custom (user) post cases - when posthint was None) Miroslav Stampar 2013-12-04 10:09:54 +0100
• bf3fbb0ae0 Ignore Google analytics cookies Miroslav Stampar 2013-12-04 09:56:37 +0100
• dd2ddec79a Minor fix (better extraction of original value in case of replacement and custom POST injection mark) Miroslav Stampar 2013-12-03 13:37:04 +0100
• 59d667d94c Minor update Miroslav Stampar 2013-12-01 22:25:12 +0100
• 663b1e711b Bug fix Miroslav Stampar 2013-12-01 21:22:29 +0100
• 07bd22fa80 Minor fix Miroslav Stampar 2013-12-01 21:03:30 +0100
• 7054586e8a Update for an Issue #565 (more work TBD - DuckDuckGo has some kind of IP blocking mechanism) Miroslav Stampar 2013-11-25 20:57:07 +0100
• 24e67289c8 Bug fix Miroslav Stampar 2013-11-25 11:57:20 +0100
• cda27ec20b Patch for an Issue #563 Miroslav Stampar 2013-11-24 15:01:26 +0100
• 59b6791faa minor improvement Bernardo Damele 2013-11-19 00:24:47 +0000
• c37ad88283 minor bug fix Bernardo Damele 2013-11-13 14:34:19 +0000
• 3c67ba08c5 Minor fix Miroslav Stampar 2013-11-12 14:53:05 +0100
• 354aaeae5b Removing unused imports Miroslav Stampar 2013-11-12 14:11:07 +0100
• d84ddf23bd Replacing os.sep constructs with os.path.join Miroslav Stampar 2013-11-12 14:08:41 +0100
• 2f1607b4d5 Minor fix for dumping non-alphanumeric database names Miroslav Stampar 2013-11-12 13:13:47 +0100
• abd76081e1 Adding a new WAF script (varnish.py) Miroslav Stampar 2013-11-11 09:25:42 +0100
• 3ff01f5777 Adding new tamper script Miroslav Stampar 2013-11-09 00:23:34 +0100
• 0a4512e9ae Implementation for an Issue #557 Miroslav Stampar 2013-11-08 09:23:38 +0100
• ae4cd2ebed Minor update Miroslav Stampar 2013-11-07 08:29:32 +0100
• 48bd2e75e9 Minor patch Miroslav Stampar 2013-10-28 13:59:38 +0100
• 7ed05f01b3 Minor update Miroslav Stampar 2013-10-27 00:24:57 +0200
• fabbe63f00 Proper fix for re.sub() call with repl value containing backslash Miroslav Stampar 2013-10-23 18:07:38 +0200