sqlmap/lib/request
Bernardo Damele 7e3b24afe6 Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own.
All (hopefully) functionalities should still be working.
Added two switches, --level and --risk to specify which injection tests and boundaries to use.
The main advantage now is that sqlmap is able to identify initially which injection types are present so for instance if boolean-based blind is not supported, but error-based is, sqlmap will keep going and work!
2010-11-28 18:10:54 +00:00
..
__init__.py sorry, cosmetics 2010-10-14 23:18:29 +00:00
basic.py fix for a bug reported by nightman (unknown charset 'null') 2010-11-17 09:57:32 +00:00
certhandler.py sorry, cosmetics 2010-10-14 23:18:29 +00:00
comparison.py Proper english (--postfix is now --suffix) and --string/--regexp does not necessarily need to match into the original response body, it might well be in the injected True condition only! 2010-11-17 22:00:09 +00:00
connect.py Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own. 2010-11-28 18:10:54 +00:00
direct.py Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own. 2010-11-28 18:10:54 +00:00
inject.py Rewrite from scratch the detection engine. Now it performs checks defined in payload.xml. User can specify its own. 2010-11-28 18:10:54 +00:00
methodrequest.py More layout adjustments 2010-10-15 10:28:34 +00:00
proxy.py sorry, cosmetics 2010-10-14 23:18:29 +00:00
rangehandler.py added Range handler (dealing with 206 HTTP messages) 2010-11-08 12:26:13 +00:00
redirecthandler.py sorry, cosmetics 2010-10-14 23:18:29 +00:00