Commit Graph

Select branches

Hide Pull Requests

gh-pages

master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5443

#5459

#5475

#5478

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5649

#5658

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5849

#5849

#5852

#5859

#5860

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5883

#5890

#5893

#5910

#5913

#5923

#5923

#5930

#5931

#5932

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

Mono Color

• c5b6d377fb fix for a bug reported by Kirill Morozov (we haven't expected mixed case/copied results in partial union pages) Miroslav Stampar 2011-03-25 12:14:19 +0000
• af5342c495 fix for partial inband queries on MSSQL Miroslav Stampar 2011-03-25 11:19:15 +0000
• e80c9e08d8 minor update regarding --live-test Miroslav Stampar 2011-03-25 09:03:08 +0000
• ea52d7acad minor revisit of inference Miroslav Stampar 2011-03-24 20:10:40 +0000
• 1f1c4c0e61 better update related to the last commit Miroslav Stampar 2011-03-24 20:04:20 +0000
• c0cc5d1dad minor update Miroslav Stampar 2011-03-24 17:18:03 +0000
• f3858a5fcf another fix related to the bug reported by Alone Shell Miroslav Stampar 2011-03-24 17:08:14 +0000
• 82ab4c8dc2 minor fix (ORDER BY 1 screws things up in blind mode) Miroslav Stampar 2011-03-24 14:19:32 +0000
• 06a5c39efe fix related to the bug reported by Alone Shell Miroslav Stampar 2011-03-24 14:03:40 +0000
• cef2c0879d adding live test cases for --technique=1 too Miroslav Stampar 2011-03-24 12:19:40 +0000
• e42cdfd138 adding possibility to run only one live test (e.g. --run-case=8) Miroslav Stampar 2011-03-24 12:07:47 +0000
• 33c01726dd adding basic live tests for MSSQL too Miroslav Stampar 2011-03-24 12:01:53 +0000
• 2b15ad57c2 basic live tests against 3 major DBMSes Miroslav Stampar 2011-03-24 11:47:01 +0000
• ecbbfeba6e introduction of --fresh-queries Miroslav Stampar 2011-03-24 10:08:47 +0000
• 762397854e fix for a bug reported by Kirill (unknown charset '8859-1') Miroslav Stampar 2011-03-24 09:27:19 +0000
• d79fae724c minor refactoring Miroslav Stampar 2011-03-24 09:16:21 +0000
• 0bb08d09d2 fix for a bug reported by Kirill (value is None in attack table phase) and minor fix for loading request file Miroslav Stampar 2011-03-24 08:43:40 +0000
• bd75fd26e9 implementing a --page-rank switch as requested by l0rda@l0rda.biz Miroslav Stampar 2011-03-23 11:57:57 +0000
• 02379c01a2 minor update (will do "schema update" for sybase some other time; that COUNT(*) blew my mind) Miroslav Stampar 2011-03-23 11:42:36 +0000
• 0f7bce5c66 fixing a huge mess going on because of counting on error and union techniques Miroslav Stampar 2011-03-23 11:36:40 +0000
• 7ea45e9032 minor update for Sybase regarding last commit Miroslav Stampar 2011-03-23 11:04:15 +0000
• b72cdfe9e6 fix for mssql regarding usage of schema names reported by jabra@spl0it.org Miroslav Stampar 2011-03-23 10:40:34 +0000
• 5a1aaecf16 minor fix so concatenated queries could be run in Oracle --sql-shell (e.g. select NAME||chr(58)||OWNER FROM ALL_SOURCE WHERE TYPE='FUNCTION') Miroslav Stampar 2011-03-22 13:07:37 +0000
• 7613134515 it was a real pain in the ass to have SELECT COUNT(*) for all rows (it was processed by a limit logic) Miroslav Stampar 2011-03-22 12:37:05 +0000
• 9479a68eb5 minor fix regarding last commit Miroslav Stampar 2011-03-22 12:21:56 +0000
• c24ed6e622 minor fix related to a bug reported by warninggp@gmail.com Miroslav Stampar 2011-03-22 09:22:48 +0000
• cbfb10cbd1 fix of a minor bug reported by syssecurity7@googlemail.com (missing iso-8858...) Miroslav Stampar 2011-03-21 16:43:46 +0000
• 0d3f6edcc4 typo Bernardo Damele 2011-03-21 16:27:13 +0000
• 7b1021d100 minor update of THANKS file Miroslav Stampar 2011-03-21 13:18:00 +0000
• b5c9ccb755 Oracle XML based error payload has problems with char $ as with space Miroslav Stampar 2011-03-21 13:13:12 +0000
• 1abcd507b8 hidding --group-concat switch Miroslav Stampar 2011-03-21 12:13:21 +0000
• 4889764114 minor update regarding last commit Miroslav Stampar 2011-03-21 11:40:27 +0000
• 5291fe35c9 proper implementation of --dbs on Oracle (we are using now schema names as a counterpart to dbs in other DBMSes) Miroslav Stampar 2011-03-21 11:29:43 +0000
• f8a2cf0497 minor THANKS update Miroslav Stampar 2011-03-21 09:53:34 +0000
• 19e2ed9803 Layout fix Bernardo Damele 2011-03-21 00:40:25 +0000
• f7c1b7dc5f Updated Bernardo Damele 2011-03-21 00:39:54 +0000
• 3ca5cddca7 massive BUG FIX (if NULL is one of dumping values it will screw everything in corner cases because "SELECT 1 WHERE NULL IN (NULL)" and "SELECT 1 WHERE NULL NOT IN (NULL)" will always return nothing/nadda/zero/not even NULL) Miroslav Stampar 2011-03-20 23:54:56 +0000
• 9b1f2d82d0 minor update (that .strip() was a leftover) Miroslav Stampar 2011-03-20 23:20:47 +0000
• db992a0a86 mssql likes to htmlescape error reports Miroslav Stampar 2011-03-20 23:16:34 +0000
• 088c815567 minor update (exposing --tor switch) Miroslav Stampar 2011-03-19 18:28:51 +0000
• 2cc91b8470 minor fix Miroslav Stampar 2011-03-19 17:44:34 +0000
• 7c2b3afafb minor fix (-r required Content-Length which is a part of Burp log and as we share the parsing logic this was a headache for -r) Miroslav Stampar 2011-03-19 17:37:26 +0000
• 139448eeb9 little stabilization regarding POST url(de/en)coding Miroslav Stampar 2011-03-19 16:53:14 +0000
• 0fcd999e51 fix for a bug reported by malice Miroslav Stampar 2011-03-18 16:52:46 +0000
• 58e9a074d3 masking some more command line arguments Miroslav Stampar 2011-03-18 16:47:18 +0000
• 36233fac42 update regarding a feature request from andyroyalbattle@yahoo.it Miroslav Stampar 2011-03-18 16:35:30 +0000
• 00b9d85ffc fix regarding bug report from andyroyalbattle@yahoo.it Miroslav Stampar 2011-03-18 16:26:39 +0000
• 4e300baaf2 minor cosmetics Miroslav Stampar 2011-03-18 14:09:18 +0000
• 3628887110 los cosmeticados Miroslav Stampar 2011-03-18 14:08:36 +0000
• 75c0e09f43 little refactoring Miroslav Stampar 2011-03-18 13:46:51 +0000
• c301b245a9 adding default value for referer in case --referer was not defined and --level>=3 used (so it could be tested with default value) Miroslav Stampar 2011-03-18 13:39:51 +0000
• b53c9a2599 minor fix and some refactoring Miroslav Stampar 2011-03-18 00:24:02 +0000
• 3edb30968b Pff.. just layout Bernardo Damele 2011-03-17 12:37:50 +0000
• 9526f0c4c2 Minor layout adjustments Bernardo Damele 2011-03-17 12:35:40 +0000
• 03fac62592 Minor code restyle Bernardo Damele 2011-03-17 12:34:29 +0000
• cbdd9e921e minor cosmetics Miroslav Stampar 2011-03-17 12:23:56 +0000
• 6607a240cf added logging to redirecthandler Miroslav Stampar 2011-03-17 12:21:27 +0000
• 9a513198dd minor fix regarding last couple of commits Miroslav Stampar 2011-03-17 11:25:37 +0000
• 970cde5a8a minor update regarding last commit Miroslav Stampar 2011-03-17 09:23:46 +0000
• beba69faa9 implementation of request from Santiago (look for error based responses in redirects) Miroslav Stampar 2011-03-17 09:12:28 +0000
• 847ce863e3 refactoring Miroslav Stampar 2011-03-17 08:54:20 +0000
• fbd0cfda29 minor update toward the implementation of request from Santiago Miroslav Stampar 2011-03-17 06:39:05 +0000
• 0535225fe7 throwing out obsolete ORDER BY 1 from inband queries Miroslav Stampar 2011-03-16 14:18:12 +0000
• f00aff5303 -v 0 shows both error, critical and raw_input messages Bernardo Damele 2011-03-11 22:02:38 +0000
• d7d47b6257 Minor bug fix (revert) Bernardo Damele 2011-03-11 21:56:45 +0000
• e64f225e65 minor refactoring Miroslav Stampar 2011-03-11 20:16:34 +0000
• 2fd3f0d7b2 minor update (added comment) Miroslav Stampar 2011-03-11 20:07:52 +0000
• 6cc745f789 removal of deprecated piece of code (replaced later with that getCurrentThreadData().disableStdOut) Miroslav Stampar 2011-03-11 20:04:15 +0000
• 5eae525010 this was bothering me for some time (POST and/or GET payloads needs to be urlencoded throughly) Miroslav Stampar 2011-03-11 19:57:44 +0000
• d8a76ebe34 Minor bug fix for counting of entries for error-based and partial UNION query SQL injection techs Bernardo Damele 2011-03-11 16:03:19 +0000
• 3cb0ca4b63 Minor bug fix for --privileges on PgSQL with error-based SQL inj technique Bernardo Damele 2011-03-11 15:24:25 +0000
• 5af7410cb1 Another bug fix for --privileges on PgSQL with UNION query technique Bernardo Damele 2011-03-11 15:13:09 +0000
• 74ef1e53c7 Minor bug fixes to --privileges for PostgreSQL query (corner case) Bernardo Damele 2011-03-11 14:54:41 +0000
• 1879a49506 fix for a bug reported by andreoaz@gmail.com Miroslav Stampar 2011-03-10 20:40:12 +0000
• eb1cda7065 minor refactoring (more consistent) Miroslav Stampar 2011-03-09 12:06:32 +0000
• 62e3510387 minor refactoring Miroslav Stampar 2011-03-09 11:37:37 +0000
• 5c97f9a496 improvement of url encoding technique (implemented failsafe routine for shortening too long GET queries) Miroslav Stampar 2011-03-09 09:36:56 +0000
• 9b2962ff1c now when we don't urlencode whole URI using : and \ as safe chars is not a good idea Miroslav Stampar 2011-03-09 08:56:29 +0000
• eedd6a990d removing space after , for our payloads Miroslav Stampar 2011-03-08 14:29:22 +0000
• 3dc31f6273 removing spaces after , in our queries Miroslav Stampar 2011-03-08 14:07:26 +0000
• 30619c599b minor update regarding encoding (adding few safe chars for e.g. CHR(50)|...) Miroslav Stampar 2011-03-08 11:53:59 +0000
• 68c7247ee4 bug fix (pgsql drop function requires input arguments - at cleanup() in plugins/generic/misc.py it's already fixed before) Miroslav Stampar 2011-03-08 10:46:23 +0000
• 99adbbeaa3 los cosmeticados Miroslav Stampar 2011-03-07 22:04:17 +0000
• cc0306044c adding SVN revision number support for non SVN client platforms Miroslav Stampar 2011-03-07 21:54:30 +0000
• 8e7c3b4666 update of THANKS file Miroslav Stampar 2011-03-07 21:29:06 +0000
• 154d947c62 minor update Miroslav Stampar 2011-03-07 10:15:41 +0000
• 16b286982d fix for a bug reported by nightman (AttributeError: 'list' object has no attribute 'split') Miroslav Stampar 2011-03-07 09:50:43 +0000
• 7524a0c0cf Proper error message Bernardo Damele 2011-03-04 11:59:09 +0000
• 8edc3b3302 further update regarding last commit Miroslav Stampar 2011-03-03 10:39:04 +0000
• bc50387a17 possible fix for a bug reported by Black Zero (UnicodeDecodeError for --forms) Miroslav Stampar 2011-03-03 09:42:50 +0000
• 3a1f5744be minor update to make counting variable totally independent of the urllib2's self.retried Miroslav Stampar 2011-03-02 10:42:17 +0000
• a010386a23 finally a proper fix for that annoying recursive bug Miroslav Stampar 2011-03-02 10:29:38 +0000
• f27f05308a minor update for masking sensitive data in error report (added aCred too) Miroslav Stampar 2011-03-02 10:09:17 +0000
• ad2e4002ea minor improvement Miroslav Stampar 2011-03-01 10:38:27 +0000
• 0f3cc153a3 fix for --technique Miroslav Stampar 2011-03-01 09:54:06 +0000
• 9856cb71de redo of the last commit with comments added Miroslav Stampar 2011-02-28 18:58:05 +0000
• ade31b2cb0 removal of obsolete item Miroslav Stampar 2011-02-28 18:49:25 +0000
• da6a87af43 update Bernardo Damele 2011-02-28 16:59:39 +0000
• 50ba0fa955 More adjustments Bernardo Damele 2011-02-28 16:14:09 +0000
• 021fce5601 Should be done with the ChangeLog - ready for 0.9. Minor adjustments to user's manual too. Bernardo Damele 2011-02-28 15:23:05 +0000