Commit Graph

  • 4989e8e6d3 minor update Miroslav Stampar 2011-10-10 17:29:54 +0000
  • c204f2b221 minor optimization Miroslav Stampar 2011-10-10 14:47:48 +0000
  • 47b27a5988 minor improvement of HashDB Miroslav Stampar 2011-10-10 14:23:17 +0000
  • 323aa7bf2f minor update Miroslav Stampar 2011-10-09 21:21:41 +0000
  • a31a0aa8d4 minor update Miroslav Stampar 2011-10-06 22:29:49 +0000
  • 8720aad6dc transformed cDel to pDel as a more generic option Miroslav Stampar 2011-10-06 22:03:33 +0000
  • dd0ed5f5da adding redirect response to the traffic file Miroslav Stampar 2011-09-28 08:13:46 +0000
  • 6d2536f217 minor update Miroslav Stampar 2011-09-27 22:27:34 +0000
  • c0910ca2c8 added one more warning message by request Miroslav Stampar 2011-09-27 22:25:15 +0000
  • b888a84764 minor update Miroslav Stampar 2011-09-27 14:31:58 +0000
  • 88f1110c44 adding a new (for now) hidden switch --test-filter for filtering tests by their name Miroslav Stampar 2011-09-27 14:09:25 +0000
  • fd9acfd7d2 fix Miroslav Stampar 2011-09-26 13:36:08 +0000
  • b3b4459c72 minor fix Miroslav Stampar 2011-09-26 13:01:43 +0000
  • 34738129c9 minor update Miroslav Stampar 2011-09-25 21:27:58 +0000
  • 7e80274fac refactoring Miroslav Stampar 2011-09-25 21:10:45 +0000
  • 744636a8c1 switching to SQLite resume support (on error and union techniques this moment) Miroslav Stampar 2011-09-25 20:36:32 +0000
  • 2d7d84e16b minor fix Miroslav Stampar 2011-09-25 19:42:24 +0000
  • ba5eff1de6 minor bug fix Miroslav Stampar 2011-09-23 18:29:45 +0000
  • 0c9944daa8 update for THANKS file Miroslav Stampar 2011-09-20 22:18:20 +0000
  • af94ac7f02 minor fix Miroslav Stampar 2011-09-20 22:16:56 +0000
  • d95ff4350d bug fix Miroslav Stampar 2011-09-20 13:08:35 +0000
  • 4a3580d10b minor fix Miroslav Stampar 2011-09-19 19:08:08 +0000
  • af7af0a1df added version check (no more crashes on Python > 3 and < 2.6 Miroslav Stampar 2011-09-12 22:48:57 +0000
  • f890b29f81 Proper reference to Metasploit Framework as now it's version 4, not 3 anymore Bernardo Damele 2011-09-12 17:26:22 +0000
  • 4fb6dab1a2 minor bug fix Miroslav Stampar 2011-09-12 14:15:57 +0000
  • 9a1ac96756 bug fix Miroslav Stampar 2011-09-11 17:22:27 +0000
  • 1bdde51d0e minor just in case update Miroslav Stampar 2011-09-11 16:41:07 +0000
  • 02f993583b minor bug fix Miroslav Stampar 2011-09-09 11:36:09 +0000
  • 2f4e34f5a0 minor improvement for URI injections Miroslav Stampar 2011-09-08 11:13:12 +0000
  • d434047482 minor bug fix Miroslav Stampar 2011-09-05 09:28:40 +0000
  • 382db1b67a degrading Microsoft Access UNION tests for one level down (it really does take toooooo long to scan a site with no vulnerable parameters and normal level) Miroslav Stampar 2011-08-31 20:35:57 +0000
  • 793f1d7774 new tampering script Miroslav Stampar 2011-08-29 15:42:01 +0000
  • 08e0eb9b61 minor lower/upper case fix Miroslav Stampar 2011-08-29 13:47:32 +0000
  • 9be89422da implemented parameter --skip Miroslav Stampar 2011-08-29 13:29:42 +0000
  • e0f521cf9d minor update regarding --randomize Miroslav Stampar 2011-08-29 13:08:25 +0000
  • ac00014c4a implemented --randomize switch by request Miroslav Stampar 2011-08-29 12:50:52 +0000
  • d283e3eb3c adding support for pre-WHERE injections Miroslav Stampar 2011-08-24 09:04:18 +0000
  • 8fe069b495 minor fix Miroslav Stampar 2011-08-23 21:48:39 +0000
  • 01014eca17 by request Miroslav Stampar 2011-08-23 21:45:01 +0000
  • 606debe55c better language Miroslav Stampar 2011-08-23 21:42:34 +0000
  • 699cb89711 minor corrections to the definition and minor typos Miroslav Stampar 2011-08-23 16:56:13 +0000
  • cfc1f2b70b minor update Miroslav Stampar 2011-08-22 22:43:14 +0000
  • f4127a80d7 improvement of UNION based injection detection (with non-NULL kb.uChar values searching of the content inside -1 UNION.. pages is used) Miroslav Stampar 2011-08-22 21:43:46 +0000
  • dafc4d93bd typo Miroslav Stampar 2011-08-22 15:05:54 +0000
  • 8a174248dc fix for a bug reported by blueBoy Miroslav Stampar 2011-08-20 20:08:11 +0000
  • fb6a84b10b minor update (when columns are missing from information_schema too) Miroslav Stampar 2011-08-18 07:03:53 +0000
  • cb32d46f2a minor minor update Miroslav Stampar 2011-08-18 06:09:12 +0000
  • 54bcc35ba7 important bug fix (connection exception was causing losing of already retrieved data) Miroslav Stampar 2011-08-17 22:31:33 +0000
  • 9d31322f3d update regarding special case when conf.uChar appears only in testable pages Miroslav Stampar 2011-08-17 21:40:42 +0000
  • 75ec146224 minor beautification Miroslav Stampar 2011-08-17 21:17:02 +0000
  • f46baac70b bug fix (when comment is None this was errornous) Miroslav Stampar 2011-08-17 10:58:29 +0000
  • 9361e633f4 Minor bug fix - some applications do really set cookies like param="value" with double-quotes Bernardo Damele 2011-08-16 09:21:01 +0000
  • e1dbb4443b minor update related to the last commit Miroslav Stampar 2011-08-16 07:01:14 +0000
  • 7cc5743c5d minor adjustment of a time based char retrievals (no more infinite increasing of timeSec value for problematic characters) Miroslav Stampar 2011-08-16 06:50:20 +0000
  • 600ef3eace minor patch Miroslav Stampar 2011-08-16 06:22:04 +0000
  • 262996fc5b bug fix Miroslav Stampar 2011-08-16 06:14:40 +0000
  • df4abf1af1 lowering constant value from 10 to 7 for da peace in da houz Miroslav Stampar 2011-08-12 17:19:19 +0000
  • 702ed73a65 Added --code switch to match in boolean-based tests against the HTTP response code Bernardo Damele 2011-08-12 16:48:11 +0000
  • e34787db99 update Bernardo Damele 2011-08-12 16:06:41 +0000
  • fff4c34e33 Search for --string and --regexp matches also in HTTP response headers Bernardo Damele 2011-08-12 15:33:37 +0000
  • 6d22d09a61 doc updated Bernardo Damele 2011-08-12 15:03:39 +0000
  • 5e5133b8e7 Should be fixed now Bernardo Damele 2011-08-12 15:00:11 +0000
  • 1505cb2a80 typo Bernardo Damele 2011-08-12 14:51:39 +0000
  • 702ca22d54 Minor bug fix for URI injections Bernardo Damele 2011-08-12 14:48:44 +0000
  • 28bba9f5e6 More verbose warning message Bernardo Damele 2011-08-12 13:47:38 +0000
  • 10bdd90e60 minor speed optimizations (as a result of profiling) Miroslav Stampar 2011-08-12 13:40:37 +0000
  • 36280b33fa Ask the user wheather or not to adjust the time delay - there have been a case where the forcing of conf.timeSec screwed the result in an extremely lagged and unreliable site Bernardo Damele 2011-08-12 13:06:40 +0000
  • 997c9ba1e8 Minor adjustments to user's manual Bernardo Damele 2011-08-12 12:56:55 +0000
  • 41ae9bc7ff minor bug fix Miroslav Stampar 2011-08-09 14:20:25 +0000
  • 2ad267132a minor update for empty normal responses (like AJAX requests) Miroslav Stampar 2011-08-05 10:55:21 +0000
  • e849b71027 minor typo Miroslav Stampar 2011-08-03 14:31:42 +0000
  • 538b49bcc5 removing word "dramatically". i was too excited at the moment :). it is cool and all but we shouldn't put "highly subjective" attribs in reports Miroslav Stampar 2011-08-03 13:26:38 +0000
  • f7562da754 from now on proper union column count should be displayed in injection info output Miroslav Stampar 2011-08-03 10:34:50 +0000
  • 13eb20cea1 minor beautification Miroslav Stampar 2011-08-03 10:12:06 +0000
  • 2e20eb1a88 Minor fix Bernardo Damele 2011-08-03 10:08:59 +0000
  • a3a649ed03 minor update Miroslav Stampar 2011-08-03 09:11:50 +0000
  • 9423d15fb3 ORDER BY technique used for finding proper UNION col count (dramatical improvement of speed and capabilities) and one minor bug fix Miroslav Stampar 2011-08-03 09:08:16 +0000
  • 07afcd5440 fix for a bug reported by Ahmed Shawky (when user uses --suffix intermixing test default comments with the provided suffix is a big no no) Miroslav Stampar 2011-08-02 18:20:21 +0000
  • 07c3d4fb18 minor adjustment Miroslav Stampar 2011-08-02 17:35:43 +0000
  • edab7d01a5 minor fix Miroslav Stampar 2011-08-02 17:31:13 +0000
  • c15439ab7f Minor improvement to --passwords output Bernardo Damele 2011-08-02 09:04:34 +0000
  • cb0981d858 proper way of handling 0 length results (as in __goInferenceProxy) Miroslav Stampar 2011-08-02 08:39:32 +0000
  • 0643ced651 minor update Miroslav Stampar 2011-08-02 08:12:43 +0000
  • 457f501bbd proper fix Miroslav Stampar 2011-08-01 23:48:38 +0000
  • ad4584da70 Minor bug fix when dumping tables with UNION query technique on Access, Firebird and MaxDB Bernardo Damele 2011-08-01 23:44:14 +0000
  • 4ca81dd345 quick fix Miroslav Stampar 2011-08-01 23:25:58 +0000
  • cbd0ea0866 Possible fix for a minor bug Bernardo Damele 2011-08-01 23:24:39 +0000
  • b9438c3e14 doc/THANKS update Miroslav Stampar 2011-08-01 10:18:00 +0000
  • e0fda9f985 minor fix Miroslav Stampar 2011-08-01 10:13:25 +0000
  • 79b4e26e23 bug fix Miroslav Stampar 2011-08-01 00:17:26 +0000
  • 018d7ed646 improvement for limited queries (more stable to have TOP/LIMIT/OFFSET mechanisms as part of a subquery) Miroslav Stampar 2011-07-31 23:40:09 +0000
  • 0627bb02cb minor beautification Miroslav Stampar 2011-07-31 10:21:47 +0000
  • 93ae1dfa2b minor bug fix Miroslav Stampar 2011-07-31 08:52:48 +0000
  • 1f06d7d7de update of THANKS file Miroslav Stampar 2011-07-30 21:51:37 +0000
  • 4d923ec375 change in invalid logic regarding --sql-shell (retrieving output for non-query commands did nothing at all) Miroslav Stampar 2011-07-30 21:46:59 +0000
  • a6ade08c28 just in case commit to prevent join string iteration over 'None' values Miroslav Stampar 2011-07-30 13:01:37 +0000
  • 68ae8ea5b2 minor refactoring Miroslav Stampar 2011-07-29 10:54:25 +0000
  • e522263640 fix for a neverending data retrieval in large full inband cases Miroslav Stampar 2011-07-29 10:45:09 +0000
  • 4ce93221d1 minor update Miroslav Stampar 2011-07-28 09:24:37 +0000
  • 684ddc43e6 minor patch Miroslav Stampar 2011-07-28 08:53:09 +0000