sqlmapproject/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-12 02:22:55 +00:00
Code Issues Packages Projects Releases Wiki Activity
56 Commits 2 Branches 142 Tags
81ed7c208680ed9959b41511433a122a526e44d6
Commit Graph
56 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Bernardo Damele 81ed7c2086 Initial implementation of support for stacked queries. 
Added method to test for Time based blind SQL injection query stacking
on the affected parameter a SLEEP() or similar DBMS specific function.
Adapted libraries, plugins and XML with the above changes.
Minor layout adjustments.
 2008-11-12 00:36:50 +00:00
Bernardo Damele 13f76cfe3b Adjusted unhandled exception error message 2008-11-11 14:08:40 +00:00
Bernardo Damele e1385eb2bf Removed useless W3C reference for CSS/HTML validation 2008-11-09 19:00:54 +00:00
Bernardo Damele 0c5d3df546 sqlmap 0.6.3-rc1: 
* Minor enhancement to be able to specify the number of seconds to wait between each HTTP request.
* Minor bug fix to handle session.error and session.timeout in HTTP requests.
* Updated documentation.
 2008-11-09 16:57:47 +00:00
Bernardo Damele 544ced52b5 Name adjustment 2008-11-04 19:56:07 +00:00
Bernardo Damele 2a01de3f0b Minor bug fix to correctly dump table entries when the column is provided 2008-11-04 19:54:44 +00:00
Bernardo Damele be599d5a33 Updated documentation and minor fix in update functionality 2008-11-04 16:33:13 +00:00
Bernardo Damele 359b28bbaf Updated documentation 2008-11-04 16:09:12 +00:00
Bernardo Damele 0f79ec0088 Minor bug fix in MySQL comment injection fingerprint technique 2008-11-04 16:05:43 +00:00
Bernardo Damele 278f0aad7c Documentation updated 2008-11-03 01:23:55 +00:00
Bernardo Damele 95d2a0fcd1 Updated documentation 0.6.2 2008-11-02 22:25:48 +00:00
Bernardo Damele 04474e3232 Updated ChangeLog 2008-11-02 22:20:02 +00:00
Bernardo Damele 8d130f12a0 Major bug fix to correctly update sqlmap to the latest stable release 
with command line --update
 2008-11-02 22:16:54 +00:00
Bernardo Damele bfe1863731 Updated Microsoft SQL Server XML versions file 2008-11-02 22:11:35 +00:00
Bernardo Damele de980ae79f Updated site and doc to 0.6.2 2008-11-02 20:23:06 +00:00
Bernardo Damele 56a5e8d390 Updated sqlmap packaging scripts, site and documentation, almost ready for sqlmap 0.6.2 2008-11-02 20:12:50 +00:00
Bernardo Damele 67e1be07a4 Added a JSP backdoor (GET /.../backdoor.jsp?cmd=<os command>) for long term new features for OS commanding 2008-11-02 19:32:04 +00:00
Bernardo Damele 3d81f60962 Updated documentation 2008-11-02 19:29:50 +00:00
Bernardo Damele 206191d164 Major bug fix so that when the expected value of a query (count variable) 
is an integer and for some reason the resumed value from session file is
a string or a binary file, the query is executed again and and its new
output saved to the session file
 2008-11-02 19:21:19 +00:00
Bernardo Damele 03b90e0a3f Be more user friendly on messages and minor code layout improvement 2008-11-02 18:23:42 +00:00
Bernardo Damele 09ca578ca1 Major bug fix so that the users' privileges enumeration now works properly also on both MySQL < 5.0 and MySQL >= 5.0 also if the user has provided one or more users with -U option; 2008-11-02 18:17:12 +00:00
Bernardo Damele 91a47246f8 Minor bug fix to correctly handle --start and --stop 2008-11-02 14:39:38 +00:00
Bernardo Damele e2a0f7a47b Fix typo 2008-10-30 23:20:14 +00:00
Bernardo Damele 7ad9639ed0 Updated the database management system fingerprint checks to correctly identify MySQL 5.1.x, MySQL 6.0.x and PostgreSQL 8.3 2008-10-29 15:32:12 +00:00
Bernardo Damele a19229cbd8 Updated documentation 2008-10-29 11:42:04 +00:00
Bernardo Damele 5e47518983 Minor layout fix 2008-10-28 00:09:03 +00:00
Bernardo Damele 4eef34c532 Updated documentation 2008-10-28 00:08:00 +00:00
Bernardo Damele 9895338630 Major bug fix following the last commit 2008-10-27 23:56:02 +00:00
Bernardo Damele eb6e6f4d03 Major bug fix when the request is POST to also send the GET parameters in the request if they've been provided 2008-10-27 15:42:32 +00:00
Bernardo Damele 5d5bfaf3db Updated changelog 2008-10-26 20:07:22 +00:00
Bernardo Damele 56383cfaad Updated documentation and removed svn:keyword 2008-10-26 19:12:17 +00:00
Bernardo Damele 342a5436f4 Minor enhancement to be able to dump entries also on MySQL < 5.0 when DB name, table name and column(s) are provided 2008-10-26 17:07:55 +00:00
Bernardo Damele 2fcbb57e1c Minor code restyling 2008-10-26 17:00:07 +00:00
Bernardo Damele 4b02ed45fa Due to last commit.. 2008-10-26 16:45:36 +00:00
Bernardo Damele 5216fb6e02 Major bug fix so that the users' privileges enumeration now works properly also on MySQL < 5.0 (fix a traceback) 2008-10-26 16:45:14 +00:00
Bernardo Damele fce61ff950 Minor if condition adjustment 2008-10-26 16:25:28 +00:00
Bernardo Damele 8f5fb5657d Major improvement to correctly enumerate tables, columns and dump tables 
entries on PostgreSQL when the database name is not 'public' or a system
database and on Oracle. Minor code restyle.
 2008-10-26 16:19:15 +00:00
Bernardo Damele e07e48efb2 Major bug fix to correctly dump tables entries 2008-10-26 16:10:28 +00:00
Bernardo Damele fc28372596 Added a comment 2008-10-26 16:06:43 +00:00
Bernardo Damele fee52bce3e Minor improvements to sqlmap msf3 auxiliary modules based on Efrain Torres' commit on msf3 trunk, http://metasploit.com/dev/trac/changeset/5787 2008-10-25 19:43:13 +00:00
Bernardo Damele fcc16b2346 Updated site, documentation (dev and user) and packaging scripts for 0.6.1 2008-10-20 13:43:18 +00:00
Bernardo Damele 6ddb5afef9 Adapted to latest enhancements 2008-10-20 10:13:03 +00:00
Bernardo Damele 38f13932bc Minor improvements to queries 2008-10-20 10:09:37 +00:00
Bernardo Damele fe6e29fbf6 Minor updates to the user's manual, need still to write on new enhancements 2008-10-17 15:50:36 +00:00
Bernardo Damele 016118ce7a Some more fixes and adjustments before 0.6.1 release. 2008-10-17 15:26:43 +00:00
Bernardo Damele 1f3ffc8ef7 Minor layout adjustment 2008-10-17 13:23:24 +00:00
Bernardo Damele 66136b48c0 Minor fixes.. should work also for Cookie now the % parsing 2008-10-17 11:51:12 +00:00
Bernardo Damele e2fedd3b46 Minor layout adjustment 2008-10-16 16:39:24 +00:00
Bernardo Damele f90a7cce28 Minor fix to urldecode %3d and any other urlencoded values in target url, posted data and cookie 2008-10-16 16:31:20 +00:00
Bernardo Damele 41f8acf0fd Updated documentation 2008-10-16 15:41:26 +00:00