Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5443

#5459

#5475

#5478

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5649

#5658

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5849

#5849

#5852

#5859

#5860

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5883

#5890

#5893

#5910

#5913

#5923

#5923

#5930

#5931

#5932

#5940

#5944

#5945

#5945

#5952

#5953

#5957

#5959

#5963

#5963

#5965

#5967

#5970

#5973

#5973

#5980

#5984

#5985

#5995

#5999

#6000

#6001

#6004

#6004

#6012

#6013

#6013

#6015

#6016

#6016

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.10

1.10.2

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.10

1.9.11

1.9.12

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

1.9.8

1.9.9

Mono Color

• 3f6bc1f3c2 minor fix Miroslav Stampar 2012-05-24 18:05:33 +0000
• 1e18168cc8 fix for one silent bug and small language update Miroslav Stampar 2012-05-23 16:35:40 +0000
• 2538e2d5b4 fixing an issue with --file-read and ROW() MySQL payload (it's internal caching mechanism prevents error message if FROM part is not unique enough dumping only partial file content); minor refactoring Miroslav Stampar 2012-05-22 09:33:22 +0000
• 2c057d5b3d minor style update Miroslav Stampar 2012-05-21 22:40:52 +0000
• 3a9e266d78 adding revisited wildcard LIKE payloads Miroslav Stampar 2012-05-21 21:49:54 +0000
• 602369c762 reverting last changes on boundaries Miroslav Stampar 2012-05-21 09:20:46 +0000
• 588d829be6 update of doc/THANKS Miroslav Stampar 2012-05-21 08:34:12 +0000
• 1500b3fccd adding a new payload boundaries by smcintyre@securestate.com Miroslav Stampar 2012-05-21 08:31:37 +0000
• 0e8d8577a7 adding a DB2 patch from smcintyre@securestate.com Miroslav Stampar 2012-05-21 08:26:19 +0000
• 079e0e1434 minor bug fix Miroslav Stampar 2012-05-18 08:51:50 +0000
• bbfa4b6d5d minor update Miroslav Stampar 2012-05-14 14:38:16 +0000
• 333f8057a5 minor fix (when redirected path has non-ASCII char and conf.url is unicode) and bits along with pieces Miroslav Stampar 2012-05-14 14:06:43 +0000
• 595f69fa2c minor language update Miroslav Stampar 2012-05-10 18:30:25 +0000
• 35f400b45b minor language upgrade Miroslav Stampar 2012-05-10 18:25:12 +0000
• 80aedbe284 adding a warning about --tor switch Miroslav Stampar 2012-05-10 18:17:32 +0000
• b81fe42d4b turning off null connection on -o when --tor used (not compatible) Miroslav Stampar 2012-05-10 17:50:54 +0000
• efdd86ddcc minor just in case patch Miroslav Stampar 2012-05-10 14:22:34 +0000
• 6367f59b98 minor code refactoring Miroslav Stampar 2012-05-10 14:15:17 +0000
• 12d32f58f2 fix for that SOAP reported bug Miroslav Stampar 2012-05-10 13:39:54 +0000
• 1418ae9767 little refactoring of parseUnionPage together with a patch for some special case Miroslav Stampar 2012-05-09 18:47:40 +0000
• 7fb1f3fc70 minor renaming Miroslav Stampar 2012-05-09 18:26:02 +0000
• 11d9859199 making nice code Miroslav Stampar 2012-05-09 18:25:04 +0000
• b0a8238774 minor fixes Miroslav Stampar 2012-05-09 14:58:16 +0000
• 9fa3619262 minor fix Miroslav Stampar 2012-05-09 14:00:07 +0000
• 56a3431be6 minor update for empty tables (skipping other techniques) Miroslav Stampar 2012-05-09 10:34:21 +0000
• 6177317a17 minor update Miroslav Stampar 2012-05-09 10:06:23 +0000
• 37f2709197 making a generic solution for all "Generic comment"/MsAccess cases (it's the only DBMS which doesn't accept --, hence replacing generic comment with %00 for it) Miroslav Stampar 2012-05-09 09:08:23 +0000
• fdf61015ad minor patch Miroslav Stampar 2012-05-09 08:41:05 +0000
• e419177871 minor update Miroslav Stampar 2012-05-08 17:28:19 +0000
• deec97dfe3 adding Frontbase to error message regexes Miroslav Stampar 2012-05-08 17:02:58 +0000
• eccd4da00f minor fix Miroslav Stampar 2012-05-08 15:03:33 +0000
• 938d9ff23e doing all the work for the users so they wouldn't strain their little hands Miroslav Stampar 2012-05-08 15:00:23 +0000
• 524dd75ff2 that query variable hasn't been used anywhere (obsolete for some time) Miroslav Stampar 2012-05-08 14:34:40 +0000
• 6af110d631 avoiding --no-cast/--hex warning message before a DBMS is fingerprinted Miroslav Stampar 2012-05-08 14:06:41 +0000
• 64c241fe92 limiting original UNION query results to only 1 result (potentially speeding things up in some cases) Miroslav Stampar 2012-05-08 13:45:53 +0000
• e00f4a8934 minor cosmetics Miroslav Stampar 2012-05-08 10:50:04 +0000
• a121339395 automatically writing uncracked hashes to a file for eventual further processing Miroslav Stampar 2012-05-08 10:46:05 +0000
• 80ee687b41 minor beauty patch Miroslav Stampar 2012-05-07 13:51:31 +0000
• e9f6b00e26 minor fix in a KeepAlive library Miroslav Stampar 2012-05-07 13:36:36 +0000
• 57234e1ff5 fix for proper (international character) inference on MsAccess Miroslav Stampar 2012-05-03 23:13:48 +0000
• 96299d3d5d minor refactoring Miroslav Stampar 2012-05-03 22:34:18 +0000
• cc28f6db6b minor update Miroslav Stampar 2012-05-01 20:43:16 +0000
• 8013a64f8c minor refactoring Miroslav Stampar 2012-05-01 19:57:30 +0000
• c71d435d9f making "id"-like columns prioritized for ORDER BY in MySQL Miroslav Stampar 2012-05-01 19:52:02 +0000
• 17efeaae7f causing too much confusion among dummy users Miroslav Stampar 2012-05-01 09:04:11 +0000
• 458a73c9b4 few consistency fixes Miroslav Stampar 2012-04-29 23:09:00 +0000
• 694b14111f skipping suffix if comment is used in agent.suffixQuery (and --suffix not explicitly set) Miroslav Stampar 2012-04-27 13:16:51 +0000
• c7a606637f switching few readInput defaults for brute forcing when no table/column found Miroslav Stampar 2012-04-27 12:59:22 +0000
• 1e45ee9ab6 reverting back to smaller UNION ranges as that mechanism for automatic extending was implemented few days ago Miroslav Stampar 2012-04-25 20:37:39 +0000
• 6f67dc85ee adding --invalid-bignum (Havij like bignum style for invalidating/negating values); renaming --logical-negate to --invalid-logical Miroslav Stampar 2012-04-25 20:29:07 +0000
• 4da03d898e Added support to create files with a visual basic script - no longer reliant on debug.exe so works on Windows 64-bit too. Fixes #236 Bernardo Damele 2012-04-25 07:40:42 +0000
• 6116853025 Minor layout adjustments Bernardo Damele 2012-04-24 17:01:24 +0000
• cec432f94d minor update Miroslav Stampar 2012-04-23 14:43:59 +0000
• 697768c01a adding --purge-output to be one of mandatory switches Miroslav Stampar 2012-04-23 14:42:24 +0000
• d57d5e4b2c minor update Miroslav Stampar 2012-04-23 14:33:36 +0000
• 1eecfb3dce adding new file related to the last commit Miroslav Stampar 2012-04-23 14:25:16 +0000
• 095b25e1d1 adding option '--purge' Miroslav Stampar 2012-04-23 14:24:23 +0000
• 3532d23933 automatically extending ranges for UNION tests in case where at least one other injection technique is usable (boundaries has been established) Miroslav Stampar 2012-04-23 13:41:36 +0000
• eb73cab636 increased UNION test ranges Bernardo Damele 2012-04-23 11:54:52 +0000
• be2da77bf8 minor update Miroslav Stampar 2012-04-23 10:15:04 +0000
• 21c6b52198 minor fix Miroslav Stampar 2012-04-23 10:11:00 +0000
• 775134639d minor update Miroslav Stampar 2012-04-20 20:33:15 +0000
• 072e08836f Falling back to unionReadFile() when --file-read does not work against MySQL. This happens when the session user does not have INSERT privilege, required to run LOAD DATA INFILE Bernardo Damele 2012-04-19 14:05:45 +0000
• 2b1b4c0742 minor fix Miroslav Stampar 2012-04-18 10:01:04 +0000
• 6ebb621228 adding support for (custom) POST injection (marking injection point with '*' in conf.data) Miroslav Stampar 2012-04-17 14:23:00 +0000
• efd27d7ade minor renaming Miroslav Stampar 2012-04-17 08:41:19 +0000
• ccd6fb70a8 minor refactoring Miroslav Stampar 2012-04-15 17:17:30 +0000
• 965c1511a6 adding new tamper script Miroslav Stampar 2012-04-15 17:10:43 +0000
• 601d118c68 reverting back to UNION ALL scheme (UNION is doing another DISTINCT on data causing problems on some column types) Miroslav Stampar 2012-04-15 16:59:03 +0000
• 71b0acc16f minor fix (checking for full inband should be done with ORIGINAL - more concise) Miroslav Stampar 2012-04-15 16:43:18 +0000
• 5772c52f46 minor refactoring/fix (randQuery is just a part (e.g. abc) of phrase (def🔤ghi) - phrase should be searched for, not just randQuery); both phrases should be inside the content for it to be full-inband injectable (...UNION ALL SELECT phrase UNION ALL SELECT phrase2....) Miroslav Stampar 2012-04-15 16:33:47 +0000
• ae8c70e895 another cosmetics Miroslav Stampar 2012-04-13 15:11:44 +0000
• d765cdc3a3 minor cosmetics Miroslav Stampar 2012-04-13 15:10:40 +0000
• 54576ab3a6 making a random choice from candidates Miroslav Stampar 2012-04-13 10:54:30 +0000
• bbbcc95fe5 use it only if page is stable Miroslav Stampar 2012-04-13 10:19:26 +0000
• 414c74b8aa new payload Miroslav Stampar 2012-04-13 08:16:33 +0000
• 052d9455fe warning user in cases of "User xyz already has more than 'max_user_connections' active connections" Miroslav Stampar 2012-04-12 09:44:54 +0000
• 831f79b851 minor generalization Miroslav Stampar 2012-04-12 09:30:19 +0000
• c7422546e1 tiny update Miroslav Stampar 2012-04-11 23:01:38 +0000
• 2bad73a981 minor update Miroslav Stampar 2012-04-11 21:48:44 +0000
• e195de2093 correcting comment on reflective removal function Miroslav Stampar 2012-04-11 21:41:48 +0000
• b45ae10da4 minor fixes Miroslav Stampar 2012-04-11 21:36:37 +0000
• 627bfc589f some more updates in reflective removal mechanism Miroslav Stampar 2012-04-11 21:26:00 +0000
• 8b130f6497 minor improvement for reflective values (when missing first part of payload like in error reports) Miroslav Stampar 2012-04-11 15:01:28 +0000
• 01bd5d0ab2 some more updates for reflective mechanism Miroslav Stampar 2012-04-11 10:41:33 +0000
• 2e92d8636e improvement of reflective mechanism Miroslav Stampar 2012-04-11 08:58:03 +0000
• 60ca44e0cf minor adjustment Miroslav Stampar 2012-04-11 08:35:09 +0000
• e33ea7c33a minor fix Miroslav Stampar 2012-04-10 22:29:39 +0000
• 8541222080 minor update Miroslav Stampar 2012-04-10 22:26:42 +0000
• 9c2f244d47 minor fix Miroslav Stampar 2012-04-10 22:20:53 +0000
• a82206cec4 minor cosmetics Miroslav Stampar 2012-04-10 21:57:00 +0000
• 119eec3598 improving "boolean detection" by automatic recognition of convenient --string candidate Miroslav Stampar 2012-04-10 21:48:34 +0000
• 698b7a15d9 minor update Miroslav Stampar 2012-04-07 14:14:26 +0000
• 8c6eb4faa9 adding support for PgSQL DNS data exfiltration Miroslav Stampar 2012-04-07 14:06:11 +0000
• b2afa87e48 reading page responses in chunks, trimming unnecessary content (especially for large table dumps in full inband cases) Miroslav Stampar 2012-04-06 08:42:36 +0000
• 2223c884e5 minor refactoring Miroslav Stampar 2012-04-05 12:55:26 +0000
• 02924eb345 minor update Miroslav Stampar 2012-04-04 23:47:06 +0000
• e0994947e2 minor update Miroslav Stampar 2012-04-04 23:37:50 +0000
• b1dd03731a minor cosmetics Miroslav Stampar 2012-04-04 23:34:08 +0000
• 83387d92bb minor bug fix Miroslav Stampar 2012-04-04 23:32:20 +0000