Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5443

#5459

#5475

#5478

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5649

#5658

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5849

#5849

#5852

#5859

#5860

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5883

#5890

#5893

#5910

#5913

#5923

#5923

#5930

#5931

#5932

#5940

#5944

#5945

#5945

#5952

#5953

#5957

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

1.9.8

1.9.9

Mono Color

• 48c20a62ac minor nag fix Miroslav Stampar 2011-05-22 15:08:55 +0000
• 40971aca94 fixing nasty bug caused by retrying counter Miroslav Stampar 2011-05-22 10:59:56 +0000
• 712e238f33 another minor fix Miroslav Stampar 2011-05-22 10:29:25 +0000
• 2795aeff34 minor fix Miroslav Stampar 2011-05-22 10:27:45 +0000
• 806e898694 no more CRITICAL drop outs in test mode - lots of reports were related to this Miroslav Stampar 2011-05-22 10:21:49 +0000
• 7b52bbe3fb reverting that ignoreTimeout for --tables (because of this and that) Miroslav Stampar 2011-05-22 09:59:19 +0000
• 9b2623514a one bug fix for Host header (value should be without port number); one improvement for --tables - when no tables ask user if he wants to brute force them; one tweak - adding kb.ignoreTimeout for --tables Miroslav Stampar 2011-05-22 09:48:46 +0000
• 2ea613b170 type correction and adding global flag kb.ignoreTimeout which could be useful Miroslav Stampar 2011-05-22 08:24:13 +0000
• 27f0e73cc9 refactoring of 'target' flag in connect.py Miroslav Stampar 2011-05-22 07:46:09 +0000
• a58aaf2e1a better format for results file (easier for sorting when lots of files) Miroslav Stampar 2011-05-22 07:02:36 +0000
• 25fff8c135 changes in handling --tor (using SOCKS instead of HTTP for handling Tor - more standard way; doesn't require proxy bundle; fixes problems with default proxy ports on Win/Linux) Miroslav Stampar 2011-05-21 11:46:57 +0000
• 939e6541d0 far safer way for dealing with error-based payloads on MySQL (no timeouts with .CHARACTER_SETS on testing platforms versus when used .TABLES) Miroslav Stampar 2011-05-19 23:36:51 +0000
• 126cdf9e19 minor info update Miroslav Stampar 2011-05-19 23:28:27 +0000
• a034462c31 fixing annoying timeouts for basic DBMS check (reference: http://dev.mysql.com/doc/refman/5.0/en/date-and-time-functions.html#function_timestampadd) Miroslav Stampar 2011-05-19 23:03:00 +0000
• 5a979f7667 minor bug fix for empty colList; also added "do you want to use LIKE" (LIKE is default) question when -C used Miroslav Stampar 2011-05-19 17:35:33 +0000
• 9e5856caf8 improvement for recognition of scalar vs multiple-row commands Miroslav Stampar 2011-05-19 16:45:05 +0000
• db72428765 minor update Miroslav Stampar 2011-05-19 15:57:29 +0000
• f40c6b2ce7 added --cookie for maskSensitiveData too Miroslav Stampar 2011-05-19 15:42:59 +0000
• bd1b07fbc2 one more parameter replace payload for MySQL and rising level of GENERATE_SERIES for PostgreSQL Miroslav Stampar 2011-05-19 06:32:23 +0000
• 7f086916c0 decent parameter replace payload for PostgreSQL (GENERATE_SERIES) Miroslav Stampar 2011-05-18 23:40:42 +0000
• e58d6d2e00 removing (CBRT(LN(0)) because it's nothing special compared to standard 1/0; also, removing parameter replacement with returned value 1 as it doesn't have much sense in comparison to origvalue one (which is far more stable and usable) Miroslav Stampar 2011-05-18 23:20:02 +0000
• fe50d09cc8 added new payload for PostgreSQL (parameter replace) Miroslav Stampar 2011-05-18 23:01:41 +0000
• 9832fc42d4 minor improvement for --tamper (now standard tamper scripts can be used like --tamper=randomcase) Miroslav Stampar 2011-05-18 21:47:40 +0000
• 3048e9f710 minor refactoring Miroslav Stampar 2011-05-17 23:03:31 +0000
• cc07e5dc97 added --charset option to force charset encoding of the retrieved data (e.g. when the backend collation is different than the current web page charset) as requested by devon.mitchell1988@y​ahoo.com Miroslav Stampar 2011-05-17 22:55:22 +0000
• dfe81cc66f minor yielding Miroslav Stampar 2011-05-16 20:14:10 +0000
• a5ad4621c9 minor refactoring Miroslav Stampar 2011-05-16 20:09:12 +0000
• ba1df457ab fix for a charset euc_tw reported by devon.mitchell1988@y​ahoo.com Miroslav Stampar 2011-05-16 19:26:58 +0000
• 6ba9dea640 just in case for trimmed output Miroslav Stampar 2011-05-16 06:17:37 +0000
• d2221e4604 fix for a minor "retrieved" cosmetic issue in partial union technique reported by Devon Mitchell (retrieved: "information_schema","COLUMNS</title><...) Miroslav Stampar 2011-05-16 00:23:50 +0000
• faa74cd2bc introducing results file for multiple target mode Miroslav Stampar 2011-05-15 22:21:38 +0000
• 90e84c9a6d removing xmlcharrefreplace error handler as it seems that it wasn't such a good idea at the end Miroslav Stampar 2011-05-15 21:43:38 +0000
• c3bb5a03e1 minor improvement Miroslav Stampar 2011-05-14 20:09:37 +0000
• 3484a4426b fix for a bug reported by itxx@qq.co​m (TypeError: encode() takes no keyword arguments) Miroslav Stampar 2011-05-14 19:57:28 +0000
• 053c245114 few minor fixes Miroslav Stampar 2011-05-13 09:56:12 +0000
• a7d7be5ce0 bug fix ('Host' header was being set to the conf.hostname for all getPages causing problems in some cases when retrieved page was not coming from that same Host) Miroslav Stampar 2011-05-13 01:01:53 +0000
• f11d5c91e3 minor update so that only one DNS request per scan is being done (before this commit there were two) Miroslav Stampar 2011-05-12 14:32:39 +0000
• 70688fb8b5 minor enhancement for dumping 'None' values (proper way should be empty string because None is too pythonic) Miroslav Stampar 2011-05-12 12:00:17 +0000
• c64eb38a8b same thing as for the last commit, but for error technique this time Miroslav Stampar 2011-05-12 11:52:18 +0000
• 84a7e5ffb9 "unfix" for r3172 which was causing "AttributeError: 'list' object has no attribute 'isdigit'" because of change of appereance Miroslav Stampar 2011-05-12 11:36:02 +0000
• 0b2da2f9f5 minor beautification for --tor switch Miroslav Stampar 2011-05-12 05:46:17 +0000
• e05a9c0554 i was probably very tired or very stupid to do this Miroslav Stampar 2011-05-11 13:13:46 +0000
• 2ab9e30f7a bug fix Miroslav Stampar 2011-05-11 12:54:33 +0000
• 4efc284b83 adding more info for --passwords Miroslav Stampar 2011-05-11 12:35:32 +0000
• 48ac9911c0 more graceful fix related to the last commit Miroslav Stampar 2011-05-11 09:42:35 +0000
• 402c623119 minor fix Miroslav Stampar 2011-05-11 09:40:11 +0000
• 53065ee1fb adding ordered set for kb.targetUrls (now the order of appereance in multiple targets mode will be respected) Miroslav Stampar 2011-05-11 08:55:48 +0000
• 5ee07b90b9 added -m switch for bulk loading multiple targets Miroslav Stampar 2011-05-11 08:46:40 +0000
• 120b0d756e unfix Miroslav Stampar 2011-05-10 21:33:06 +0000
• 6b66fce72c minor fix Miroslav Stampar 2011-05-10 20:52:43 +0000
• 192c685bc8 changing conf attribute to a more proper name Miroslav Stampar 2011-05-10 20:48:34 +0000
• deae534ee7 minor refactoring Miroslav Stampar 2011-05-10 20:44:36 +0000
• 97bc816aeb layout Bernardo Damele 2011-05-10 16:24:09 +0000
• b5f090cc4f Minor bug fix Bernardo Damele 2011-05-10 15:48:48 +0000
• 3a8309c4b0 Major bug fix to detect UNION query technique and various improvements to parsing and using of --union-char and --union-cols switches Bernardo Damele 2011-05-10 15:34:54 +0000
• 707edc7b1a fix for a bug (previously --dbms="mysql 4" was ignored and abruptly terminated while the mechanism was here all along) Miroslav Stampar 2011-05-10 13:28:07 +0000
• 1dea609019 fix for a bug reported by David (UnicodeDecodeError: url = url + '?' + query) Miroslav Stampar 2011-05-10 12:51:37 +0000
• a64407d9db minor bug fix for multithreading and lots of connection retries Miroslav Stampar 2011-05-10 12:40:01 +0000
• 22a1870c2c adding some constraining to number of used threads on brute force switches together with a warning in case of connection exception(s) with --threads>1 Miroslav Stampar 2011-05-10 12:32:07 +0000
• 49b925772b Minor update Bernardo Damele 2011-05-10 10:56:06 +0000
• b713b18fd2 minor fix for a bug spotted on Sybase Miroslav Stampar 2011-05-09 16:09:18 +0000
• ac74557614 Minor adjustment for --dump-all Bernardo Damele 2011-05-08 10:25:40 +0000
• ec4d9178f8 minor update related to the previous commit Miroslav Stampar 2011-05-08 06:28:58 +0000
• 4d6e7c738c minor update Miroslav Stampar 2011-05-08 06:17:43 +0000
• 356037ca22 cosmetics Bernardo Damele 2011-05-08 02:11:34 +0000
• 9955483052 Major improvement for --dump. Minor improvement for --dump-all. Minor bug fix for infinite loop Bernardo Damele 2011-05-08 02:08:18 +0000
• 8179fd63c0 Minor fix Bernardo Damele 2011-05-07 23:48:03 +0000
• d3589493d1 Temporary fix for bug reported by ultramegaman (infinite loop) Bernardo Damele 2011-05-07 23:28:59 +0000
• 6e784e766b Minor bug fix Bernardo Damele 2011-05-07 21:20:47 +0000
• 6653907700 forgot in last commit Bernardo Damele 2011-05-07 21:13:56 +0000
• 1151af52bb More fix for save/resume of --technique Bernardo Damele 2011-05-07 21:08:14 +0000
• 28a4ae8eaf Minor improvement to cleanup script Bernardo Damele 2011-05-06 13:53:10 +0000
• d2a71d647b minor update Miroslav Stampar 2011-05-06 13:38:58 +0000
• 9652efa995 minor update Miroslav Stampar 2011-05-06 13:34:03 +0000
• 079ddf84b2 updating FAQ Miroslav Stampar 2011-05-06 11:19:49 +0000
• aae140080e SVN roll back, DB2 patch will be recommitted after testing: Bernardo Damele 2011-05-06 10:27:43 +0000
• 42bca80968 removing blank lines and adding newline at the end of files Miroslav Stampar 2011-05-06 09:35:53 +0000
• 6e392b6054 applying contributed patch for DB2 Miroslav Stampar 2011-05-06 09:30:39 +0000
• 2d8408c885 More fix for --technique resume Bernardo Damele 2011-05-05 16:38:46 +0000
• e96a533a04 Bug fix to resume of --technique Bernardo Damele 2011-05-05 15:18:33 +0000
• eea96c5b8d code cleanup Bernardo Damele 2011-05-05 08:50:18 +0000
• b12aa8a56f added mime type octet to README.pdf Miroslav Stampar 2011-05-05 08:17:23 +0000
• b324b99f6e minor update of warning message Miroslav Stampar 2011-05-04 10:41:08 +0000
• 83fac3f6d9 fix for proper MSSQL error chunking in some cases (not screwing output length toward lower values at chunk phase) Miroslav Stampar 2011-05-03 21:12:51 +0000
• e6f010734e minor fix for cases when the retrieved output is safe encoded (like for --os-shell) Miroslav Stampar 2011-05-03 16:14:03 +0000
• 4d4e3802e4 decoding of chars for --os-shell Miroslav Stampar 2011-05-03 15:31:12 +0000
• 2976ed7e90 Updated user's manual, added details about URI injection Bernardo Damele 2011-05-03 14:47:01 +0000
• dac59a55bc leftover Bernardo Damele 2011-05-03 14:14:39 +0000
• c58dc4a6d8 isDbmsWithin() must stay like this, no getIdentifiedDbms() in there Bernardo Damele 2011-05-03 14:13:45 +0000
• 742b0ef76e major improvement of ERROR data retrieval on MSSQL Miroslav Stampar 2011-05-03 13:25:20 +0000
• 2a7838928e minor fancier --replicate update Miroslav Stampar 2011-05-03 11:48:04 +0000
• b202d73b46 bug fix for MSSQL identificators which were starting with d, b, o and . Thing is that .lstrip strips all occurances of the given chars :) (spotted ancidentally) Miroslav Stampar 2011-05-03 11:09:30 +0000
• b2f6ce9716 updated documentation Bernardo Damele 2011-05-03 10:57:55 +0000
• 1840b0e43b fix for a bug reported by k1971@live.co.uk (OperationalError: unknown database dbo) Miroslav Stampar 2011-05-03 10:22:38 +0000
• 1e6c2fea74 update regarding warning for --random-agent during connection timeout in connection test phase Miroslav Stampar 2011-05-03 10:05:42 +0000
• eceb5eca7b fix for --file-read on MSSQL for error technique (again that unpacking was causing problems); also reverting that check for file paths as one user mentioned that network paths are also possible for usage on Windows machines (e.g. \\bla\bla) Miroslav Stampar 2011-05-02 21:55:06 +0000
• 6cff3e97f4 cosmetics Bernardo Damele 2011-05-02 21:48:08 +0000
• 06498796b9 minor cosmetics Miroslav Stampar 2011-05-02 20:51:53 +0000
• b327a78522 minor minor update of the last commit Miroslav Stampar 2011-05-02 19:24:49 +0000
• 0bb7d715a7 more user friendliness/handiness for users which mix Linux and Windows paths where they shouldn't do that Miroslav Stampar 2011-05-02 19:18:28 +0000