100 Commits
Author SHA1 Message Date
Bernardo Damele A. G. 11836f8299 Update .gitignore 2026-06-09 20:21:50 +02:00
Bernardo Damele A. G. 3142e7b9cc Added tarsier 2026-06-09 20:19:49 +02:00
Bernardo Damele A. G c722f8e3bd Update FUNDING.yml
Updated funding information to point to sqlmap project's sponsors page
2022-07-14 09:29:51 +00:00
Bernardo Damele A. G 98ac1cf9c1 Update FUNDING.yml 2021-03-11 18:11:28 +00:00
Bernardo Damele A. G 56721240fa Update FUNDING.yml 2021-03-11 17:22:58 +00:00
Bernardo Damele A. G c81414cf25 Update FUNDING.yml 2021-03-11 15:41:21 +00:00
Bernardo Damele A. G 2e195a35dc Create FUNDING.yml 2021-03-11 15:38:12 +00:00
Bernardo Damele 9eb7a0a0f2 enhanced time-based payloads - issue #1169 2015-03-19 12:09:43 +00:00
Bernardo Damele 43f6cb1508 some more boundaries 2015-03-19 12:07:26 +00:00
Bernardo Damele 204ee1db39 Merge branch 'master' of github.com:sqlmapproject/sqlmap 2015-03-19 12:06:36 +00:00
Bernardo Damele 865c3852ea Merge branch 'master' of github.com:sqlmapproject/sqlmap 2015-03-16 09:00:59 +00:00
Bernardo Damele 0a0c3edf06 Merge branch 'master' of github.com:sqlmapproject/sqlmap 2015-03-10 09:25:54 +00:00
Bernardo Damele 2bdf121915 cleanup 2015-03-04 13:36:09 +00:00
Bernardo Damele A. G. b2fca35c36 consolidated some time-based blind payloads - issue #1169 2015-03-03 14:22:20 +00:00
Bernardo Damele e13bbe2e87 Merge branch 'master' of github.com:sqlmapproject/sqlmap 2015-03-03 14:19:48 +00:00
Bernardo Damele 37ca0a95f1 consolidated stacked queries payloads - issue #1169 2015-03-03 14:19:36 +00:00
Bernardo Damele 849ca3da3d added a newline 2015-03-03 14:18:53 +00:00
Bernardo Damele 8281fe48e5 bug fix: test for boundaries with high levels if the test was extended 2015-03-01 11:02:05 +00:00
Bernardo Damele 260643241a prioritized fingerprinted DBMS to error-based and user provided one 2015-02-27 14:19:30 +00:00
Bernardo Damele 2f08c8b666 bug fix: do not skil heuristic check if previous page (test for dynamicity) had DBMS message. Code cleanup 2015-02-27 13:57:28 +00:00
Bernardo Damele 475cc8b24b trivial code cleanup 2015-02-21 13:12:30 +00:00
Bernardo Damele 383929c0c2 if the user forces the DBMS, then sort the tests accordingly to perform first the DBMS-specific tests, then the others 2015-02-21 13:12:03 +00:00
Bernardo Damele d235ee375b code cleanup 2015-02-21 12:59:44 +00:00
Bernardo Damele 8be24d3e9b minor enhancement, prefer intersect() each time DBMS values are comfronted 2015-02-21 12:59:27 +00:00
Bernardo Damele 388c0dfd77 trivial layout fix 2015-02-21 12:57:49 +00:00
Bernardo Damele 21c1ae427b swapped generic and MySQL-specific UNION payloads - issue #1169 2015-02-21 12:57:28 +00:00
Bernardo Damele ef9d4b58ae minor signature for PHP pgsql functions 2015-02-21 02:24:03 +00:00
Bernardo Damele 52dd92748a rework some of the logic of the detection phase based on identified DBMS along the way 2015-02-21 02:23:42 +00:00
Bernardo Damele 4f939b5719 avoid false positive message when extensive heuristic check is performed following detection of boolean blind injection detection: do only heuristic DBMS fingerprint for DBMS specific tables 2015-02-20 18:36:34 +00:00
Bernardo Damele 4bbf168b18 Minor titles fix 2015-02-20 18:35:13 +00:00
Bernardo Damele ab6cc271d3 Major consistency rework of error-based payloads - issue #1169 2015-02-20 18:34:47 +00:00
Bernardo Damele 9fed41ddc2 Major consistency rework of boolean payloads - issue #1169 2015-02-20 18:34:23 +00:00
Bernardo Damele 2d886011c8 Consistency in enums 2015-02-20 18:33:04 +00:00
Bernardo Damele 1ecb921ba7 Consistency in enums 2015-02-20 18:31:47 +00:00
Bernardo Damele 214b9360e9 Minor fix to check for inline query payloads regardless of previously identified payloads and code cleanup 2015-02-20 18:30:42 +00:00
Bernardo Damele 3b3205c532 Minor stacked queries and time-based payloads cleanup - issue #1169 2015-02-20 15:44:06 +00:00
Bernardo Damele 79d4d970a5 trivial code cleanup 2015-02-20 15:42:28 +00:00
Bernardo Damele 5b65d2e133 more consistency of boolean blind payloads - issue #1169 2015-02-20 11:34:16 +00:00
Bernardo Damele 201b605f9b Minor fix and consistency: do not ask to include all tests if level and risk are at the max settings already 2015-02-20 10:21:44 +00:00
Bernardo Damele f547a776d8 consolidating blind based payloads - issue #1169 2015-02-19 16:42:26 +00:00
Bernardo Damele 4195f770a3 removing one unnecessary character from stacked payloads 2015-02-19 16:41:55 +00:00
Bernardo Damele 1e9586c90b minor layout fix 2015-02-19 16:18:16 +00:00
Bernardo Damele 6cc092b926 split payloads in different files 2015-02-18 10:13:44 +00:00
Bernardo Damele daa8e0d8c5 minor fix 2015-02-18 10:13:28 +00:00
Bernardo Damele 560bc7cc28 minor fixes 2015-02-18 09:51:07 +00:00
Bernardo Damele c51ecf33f3 ported the recent MySQL time-based payload (introduced with 66c2a79397) to other techniques and conditions 2015-02-18 09:45:44 +00:00
Bernardo Damele 32373996ee standard message 2015-02-15 20:53:40 +00:00
Bernardo Damele e17d212c23 bug fix introduced with 863d5a6281 2015-02-15 20:07:52 +00:00
Bernardo Damele 84349a370a minor code cleanup 2015-02-15 19:51:07 +00:00
Bernardo Damele 32ab52b8ca code refactoring: split boundaries and payloads XML files 2015-02-15 16:31:35 +00:00
Bernardo Damele 863d5a6281 --test-filter now ignores values of --risk and --level 2015-02-15 16:28:37 +00:00
Bernardo Damele 66c2a79397 added a time-based payload for MySQL when the simpler AND SLEEP(X) does not work 2015-02-03 15:14:41 +00:00
Bernardo Damele A. G. f110bfe28a Merge pull request #779 from hydhyd/patch-1
Update settings.py
2014-08-06 10:45:42 +01:00
Bernardo Damele A. G. 2da94ba82d minor doc update 2014-08-04 16:46:01 +01:00
Bernardo Damele a09e590fe8 updated regression tests 2014-07-17 17:13:09 +01:00
Bernardo Damele 4e909a2a05 code cleanup 2014-07-01 00:58:49 +01:00
Bernardo Damele b38bd1e7fd code cleanup - issue #742 2014-07-01 00:35:02 +01:00
Bernardo Damele 018748f52e increase the timeout for the Metasploit session initialization to 5 minutes, better on slow speed connections 2014-07-01 00:34:09 +01:00
Bernardo Damele 5c64a31a9c works now.. can upload arbitrary files via powershell now, closes #742 2014-07-01 00:26:59 +01:00
Bernardo Damele 3e431ec202 working on allowing large files to be uploaded via powershell - issue #742 2014-06-30 23:53:04 +01:00
Bernardo Damele 1218e694ef more on issue #742 2014-06-30 20:43:48 +01:00
Bernardo Damele 8ce98ae22c more on issue #742 2014-06-30 20:43:02 +01:00
Bernardo Damele 0c1b3f2dbc more on issue #742 2014-06-30 20:39:21 +01:00
Bernardo Damele ce67156d80 trying some more encoding as the file wasnt exactly the same - issue #742 2014-06-30 20:26:05 +01:00
Bernardo Damele 3ec37b14a6 trying some more encoding as the file wasnt exactly the same - issue #742 2014-06-30 20:23:57 +01:00
Bernardo Damele 9c583bc96e trying some more encoding as the file wasnt exactly the same - issue #742 2014-06-30 20:23:01 +01:00
Bernardo Damele 5c4c4c6abe minor cleanup, prefer powershell to the other two techniques to upload files - issue #742 2014-06-30 19:11:01 +01:00
Bernardo Damele fcc50193b3 working on #742 - working on it 2014-06-30 18:50:33 +01:00
Bernardo Damele 4be0b366eb working on #742 - working on it 2014-06-30 18:38:18 +01:00
Bernardo Damele 6999c3413c working on #742 - working on it 2014-06-30 18:26:40 +01:00
Bernardo Damele aa076013a7 working on #742 - minor fixes 2014-06-30 18:18:14 +01:00
Bernardo Damele 563c73c4c7 working on #742 - code cleanup 2014-06-30 18:09:11 +01:00
Bernardo Damele 94c09019fd working on #742 - missing import 2014-06-30 18:07:45 +01:00
Bernardo Damele cd260a7470 working on #742 - powershell support for file write on MSSQL 2014-06-30 18:06:19 +01:00
Bernardo Damele e2aed41c6f minor fixed 2014-06-30 17:30:20 +01:00
Bernardo Damele A. G. 73f79f5481 Merge pull request #686 from viniciusmarangoni/master
Update README-por.md
2014-05-06 07:55:01 +00:00
Bernardo Damele A. G. f07bdcfda1 Update README.md
markdown syntax fix
2014-04-11 14:15:17 +00:00
Bernardo Damele 78ab525966 minor fix to Oracle payloads 2014-04-09 12:31:52 +00:00
Bernardo Damele 42bde5328d minor fix 2014-04-09 12:29:52 +00:00
Bernardo Damele a5aa1c2f94 some more common output for Oracle banner 2014-04-09 12:20:52 +00:00
Bernardo Damele 7f5ea24590 added a few common outputs for --predict-output 2014-04-09 12:14:33 +00:00
Bernardo Damele 9b0662d1a9 added new Oracle time-based payloads 2014-04-09 12:14:16 +00:00
Bernardo Damele 276dab781b forgot commend, mandatory 2014-03-21 11:50:12 +00:00
Bernardo Damele 9f838c3d5b typo fix 2014-03-21 11:37:34 +00:00
Bernardo Damele bc5c0ee4ae reverted previous commit, it must be OUTFILEP: LINES TERMINATED BY does not work with DUMPFILE 2014-03-21 11:36:46 +00:00
Bernardo Damele 8091a88d3e minor code cleanup and bug fix 2014-03-21 11:35:30 +00:00
Bernardo Damele c211255773 replaced outfile with dumpfile so works even if the original statement outputs blob 2014-03-21 11:01:57 +00:00
Bernardo Damele 1d7e804c1d Merge branch 'master' of github.com:sqlmapproject/sqlmap 2014-02-27 15:02:43 +00:00
Bernardo Damele 07a22070d8 updated signatures for test environment 2014-02-27 15:02:33 +00:00
Bernardo Damele be6767b3b0 minor fix for command execution via web shell 2014-02-10 09:59:57 +00:00
Bernardo Damele bc29bf6481 removed comments 2014-01-13 23:57:49 +00:00
Bernardo Damele 1505f1dc74 removed useless sink 2014-01-13 23:55:32 +00:00
Bernardo Damele 124ebefc7f code cleanup 2014-01-13 23:48:15 +00:00
Bernardo Damele 4e8ab48145 fixed match 2014-01-13 23:48:00 +00:00
Bernardo Damele b86353b485 minor fix to DB2 test case 2014-01-13 23:34:25 +00:00
Bernardo Damele 85f60d0c09 leftovers 2014-01-13 17:41:33 +00:00
Bernardo Damele 536b44a429 adapted 2014-01-13 17:38:04 +00:00
Bernardo Damele 3c79d66569 fixed stderr 2014-01-13 17:34:38 +00:00
Bernardo Damele 43a4e85749 updated copyright 2014-01-13 17:24:49 +00:00
Bernardo Damele d546fc5ad5 slight update to regression test regexp 2014-01-13 17:24:09 +00:00