Commit Graph
575 Commits
Author SHA1 Message Date
Miroslav Stampar facce2c0df some more cleanup 2012-06-14 13:50:36 +00:00
Miroslav Stampar 3a90105fbb minor refactoring 2012-06-14 13:38:53 +00:00
Miroslav Stampar b85a1fc271 minor fix 2012-06-05 22:55:42 +00:00
Miroslav Stampar 76a4aa19ac some more fine tunning 2012-05-28 19:50:12 +00:00
Miroslav Stampar 73dba249e8 one more just in case update 2012-05-28 19:34:47 +00:00
Miroslav Stampar 190ae4ca13 no need for conf.timeSec value as inference is always evaluated to False in DNS (large random values used for > ...) 2012-05-28 15:10:17 +00:00
Miroslav Stampar a70a647aeb few fixes regarding --dns-domain usage (time-based technique should not be used as a failback because of few things, --time-sec should be put to 0 just in case,...) 2012-05-28 14:51:23 +00:00
Miroslav Stampar b1d82422a0 changing conf.dnsDomain to conf.dName just because of long text problems in help listing 2012-05-28 14:15:04 +00:00
Miroslav Stampar 4e6fcce9ca minor update 2012-05-26 07:04:32 +00:00
Miroslav Stampar ce077137c9 minor language update 2012-05-26 07:01:37 +00:00
Miroslav Stampar d335ec0c34 turning back on time auto-adjustment mechanism (if turned off) after a threshold run of valid chars 2012-05-26 07:00:26 +00:00
Miroslav Stampar b0a8238774 minor fixes 2012-05-09 14:58:16 +00:00
Miroslav Stampar 9fa3619262 minor fix 2012-05-09 14:00:07 +00:00
Miroslav Stampar 56a3431be6 minor update for empty tables (skipping other techniques) 2012-05-09 10:34:21 +00:00
Miroslav Stampar e419177871 minor update 2012-05-08 17:28:19 +00:00
Miroslav Stampar eccd4da00f minor fix 2012-05-08 15:03:33 +00:00
Miroslav Stampar 938d9ff23e doing all the work for the users so they wouldn't strain their little hands 2012-05-08 15:00:23 +00:00
Miroslav Stampar 524dd75ff2 that query variable hasn't been used anywhere (obsolete for some time) 2012-05-08 14:34:40 +00:00
Miroslav Stampar 3532d23933 automatically extending ranges for UNION tests in case where at least one other injection technique is usable (boundaries has been established) 2012-04-23 13:41:36 +00:00
Miroslav Stampar 71b0acc16f minor fix (checking for full inband should be done with ORIGINAL - more concise) 2012-04-15 16:43:18 +00:00
Miroslav Stampar 5772c52f46 minor refactoring/fix (randQuery is just a part (e.g. abc) of phrase (def:abc:ghi) - phrase should be searched for, not just randQuery); both phrases should be inside the content for it to be full-inband injectable (...UNION ALL SELECT phrase UNION ALL SELECT phrase2....) 2012-04-15 16:33:47 +00:00
Miroslav Stampar ae8c70e895 another cosmetics 2012-04-13 15:11:44 +00:00
Miroslav Stampar d765cdc3a3 minor cosmetics 2012-04-13 15:10:40 +00:00
Miroslav Stampar 831f79b851 minor generalization 2012-04-12 09:30:19 +00:00
Miroslav Stampar 8c6eb4faa9 adding support for PgSQL DNS data exfiltration 2012-04-07 14:06:11 +00:00
Miroslav Stampar a5b69eaea4 removing unused imports 2012-04-04 13:18:14 +00:00
Bernardo Damele 52796bb4da revert 2012-04-04 13:02:50 +00:00
Miroslav Stampar a4b95ab7dd works against MySQL/Windows 2012-04-04 12:49:45 +00:00
Bernardo Damele a1d97e9d7b Add a space after a comment 2012-04-04 12:48:21 +00:00
Bernardo Damele 025c531d22 leftover 2012-04-04 12:44:25 +00:00
Bernardo Damele c0946ce2c9 Minor refactoring 2012-04-04 12:42:58 +00:00
Bernardo Damele d106fb5184 layout adjustments 2012-04-04 12:27:24 +00:00
Miroslav Stampar 556b349be3 minor fix for retrieving non-printable chars in inference and non-multi threading mode 2012-04-03 14:04:07 +00:00
Miroslav Stampar 33bb9c5f19 much cleaner approach in that "flat" representation of retrieved items in union technique 2012-04-03 13:56:11 +00:00
Miroslav Stampar 7fb190f3b1 minor fix 2012-04-03 12:35:19 +00:00
Miroslav Stampar 886aa22efc minor update 2012-04-03 12:19:37 +00:00
Miroslav Stampar 78f51fd2e5 minor fix 2012-04-03 10:18:03 +00:00
Miroslav Stampar e05109812f minor improvements regarding data retrieval through DNS channel 2012-04-03 09:18:30 +00:00
Miroslav Stampar 5f94987b0f fix for DNS method for MSSQL 2012-04-02 17:28:18 +00:00
Miroslav Stampar 2c28423cb8 minor update 2012-04-02 14:57:15 +00:00
Miroslav Stampar 8a9d09f79b minor fixes 2012-04-02 14:11:23 +00:00
Miroslav Stampar 1cd3c3f7af further update of DNS data retrieval mechanism through SQLi 2012-04-02 14:05:30 +00:00
Miroslav Stampar 7fd64df167 minor code cleaning 2012-03-28 13:31:07 +00:00
Miroslav Stampar 1b072f6415 laying foundation for DNS based data retrieval 2012-03-27 18:59:12 +00:00
Miroslav Stampar 8e7d360ea2 cleaner refactoring regarding last commit 2012-03-19 12:03:25 +00:00
Miroslav Stampar 401763b6f8 minor fix (it has to be level 1 array like it was with the previous re.findall mechanism) 2012-03-19 12:00:22 +00:00
Miroslav Stampar d66056fe39 one more related commit 2012-03-16 13:16:53 +00:00
Miroslav Stampar ac02a2d92c minor fix 2012-03-16 13:14:14 +00:00
Miroslav Stampar b130a9e14e minor fix (writing to HashDB on any interrupt) 2012-03-16 10:15:43 +00:00
Miroslav Stampar e38b59a2ae minor update 2012-03-14 13:16:49 +00:00