Automatic SQL injection and database takeover tool
Go to file
Bernardo Damele 5fdebb5d5b Added support to directly connect also to Microsoft SQL Server database.
Fixed direct connection to always use the same query as of UNION query SQL injection (= one query with multiple columns/entries output).
Minor fixes to Firebird/Access/SQLite connectors to use connector's execute()/fetchall() as wrapper for third-party libraries' methods.
Forced conf.timeout to 10 seconds when directly connecting to database.
Slightly improved regular expression to parse -d parameter.
Added import check for all connectors' third-party libraries.
Code refactoring:
* Moved conf.direct request to direct() function in lib/request/direct.py (code reused where needed).
* Back-delegated to generic connector close() and other methods.
2010-03-31 10:50:47 +00:00
doc Updated THANKS 2010-03-23 21:24:31 +00:00
extra Initial support for SQLite (90% approx). 2010-03-18 17:20:54 +00:00
lib Added support to directly connect also to Microsoft SQL Server database. 2010-03-31 10:50:47 +00:00
plugins Added support to directly connect also to Microsoft SQL Server database. 2010-03-31 10:50:47 +00:00
shell Improved PHP backdoor 2010-03-11 16:55:38 +00:00
txt Minor enhancement to show the DBMS operating system (if fingerprinted) 2008-11-17 11:22:03 +00:00
udf Initial support for SQLite (90% approx). 2010-03-18 17:20:54 +00:00
xml ms access update 2010-03-30 15:04:55 +00:00
sqlmap.conf Major enhancement to directly connect to the dbms without passing via a sql injection: adapted code accordingly - see #158. This feature relies on python third-party libraries to be able to connect to the database. For the moment it has been implemented for MySQL (with python-mysqldb module) and PostgreSQL (with python-psycopg2 module). 2010-03-26 23:23:25 +00:00
sqlmap.py Added support to connect directly also to Oracle - see #158 2010-03-27 21:50:19 +00:00