Commit Graph
2292 Commits
Author SHA1 Message Date
Miroslav Stampar ff9080de48 MaxDB always precalculates values for both TRUE and FALSE, hence we can't trick him to run any "faulty" command (e.g. 1/0). This payload is fairly ok because in case of FALSE --> something=NULL is always NULL 2011-02-21 20:59:34 +00:00
Miroslav Stampar 08697e60a9 added some Microsoft Access payloads 2011-02-21 20:04:50 +00:00
Bernardo Damele 3e8c204121 Major bug fix to properly prepare UNION technique statement for --os-pwn and --is-dba 2011-02-21 16:00:56 +00:00
Miroslav Stampar 90582ed7dc minor change 2011-02-21 11:35:21 +00:00
Miroslav Stampar 68a95fd1b1 minor update 2011-02-20 22:45:23 +00:00
Miroslav Stampar aac817935a further improvement of MaxDB support 2011-02-20 22:41:42 +00:00
Miroslav Stampar a3ba8b6928 --dump now works on MaxDB too 2011-02-20 22:07:12 +00:00
Miroslav Stampar 70449eb01b minor bug fix 2011-02-20 21:35:28 +00:00
Miroslav Stampar 345df5968d minor update 2011-02-20 21:27:38 +00:00
Miroslav Stampar 0e512d3c09 minor update for MaxDB 2011-02-20 21:17:16 +00:00
Miroslav Stampar 59e666d16e --is-dba (related) update for Sybase 2011-02-20 17:28:06 +00:00
Miroslav Stampar 4d52f7fc6e minor fix regarding --dump-table on Sybase for --technique=23 2011-02-20 16:58:01 +00:00
Miroslav Stampar 67ec691eb1 more updates regarding Sybase 2011-02-20 16:28:48 +00:00
Miroslav Stampar cc47737c44 minor update 2011-02-20 16:00:13 +00:00
Miroslav Stampar 823e4351b5 minor change 2011-02-20 12:34:09 +00:00
Miroslav Stampar 0c57f2af0f minor fix 2011-02-20 12:20:44 +00:00
Miroslav Stampar 2f9227bcce Sybase update (--passwords) 2011-02-20 12:07:32 +00:00
Bernardo Damele 6e1a08a805 Documentation update 2011-02-19 21:08:18 +00:00
Bernardo Damele 023a80c31c Section explanation change to reflect recent enhancements 2011-02-19 21:06:24 +00:00
Bernardo Damele 60b05ff49f Reflect new switch name 2011-02-19 21:05:15 +00:00
Bernardo Damele 8e60acae5d Added support for --scope also in WebScarab logs (-l) 2011-02-19 21:03:55 +00:00
Miroslav Stampar f30dea74f3 more Sybase updates 2011-02-19 18:36:26 +00:00
Miroslav Stampar b71bb321dd some more Sybase updates 2011-02-19 18:04:27 +00:00
Miroslav Stampar cec7694aac some progress regarding SYBASE 2011-02-19 14:56:58 +00:00
Miroslav Stampar e0efe453ab minor update regarding Sybase support 2011-02-19 14:07:08 +00:00
Miroslav Stampar de7ca5a27c minor update 2011-02-19 09:40:41 +00:00
Miroslav Stampar 72fc0a0565 minor refactoring 2011-02-19 09:36:57 +00:00
Miroslav Stampar 5f4ffc9287 update regarding Sybase dumping 2011-02-19 00:36:47 +00:00
Miroslav Stampar df58bcaf95 minor improvement 2011-02-18 14:27:02 +00:00
Miroslav Stampar 3badf92ceb not doing "basic" filtering in default cases because of a bug reported by Kazim 2011-02-18 07:38:13 +00:00
Miroslav Stampar 6cdf08b81c minor fix 2011-02-17 21:51:40 +00:00
Miroslav Stampar 22cd49a217 --technique can now be something like 123 which includes both techniques 1, 2 and 3 2011-02-17 21:39:16 +00:00
Miroslav Stampar 7ebc1ab90a minor cosmetics 2011-02-17 08:59:14 +00:00
Bernardo Damele dcb398f916 Test 2 2011-02-16 11:12:15 +00:00
Bernardo Damele fc7414db7a Test 2011-02-16 11:09:58 +00:00
Miroslav Stampar 199f14df46 implementation of MySQL GROUP_CONCAT technique 2011-02-15 00:28:27 +00:00
Bernardo Damele 808b03fc3e Minor reordering 2011-02-14 02:08:11 +00:00
Bernardo Damele 2ea828e416 Proper fix for r3307 (file-write on MySQL via UNION query tech) 2011-02-13 22:48:01 +00:00
Miroslav Stampar 417b311475 minor update 2011-02-13 22:02:47 +00:00
Miroslav Stampar 50d25c3b4d update regarding explicit testing of ua and referer when using -p 2011-02-13 21:58:48 +00:00
Bernardo Damele 429ab631fe Minor refactoring 2011-02-13 21:25:01 +00:00
Miroslav Stampar 5fb11fd173 update regarding multiple DBMS payloads 2011-02-13 21:20:21 +00:00
Bernardo Damele 45a005737d Minor adjustment so that User-Agent and Referer headers are tests only when --level >= 3 and Cookie is tested only when --level >= 2 2011-02-13 21:08:42 +00:00
Miroslav Stampar 83d7803ce7 other techniques use dataToStdout for retrieved string, hence this update (also, fixing ugly retrieved: 0 or 1 while doing fingerprinting --flush-session -f --technique=2) 2011-02-12 20:03:28 +00:00
Miroslav Stampar 9f7d666451 removing --method per request of buawig 2011-02-12 19:50:27 +00:00
Miroslav Stampar 1cd483f42f one more update 2011-02-12 10:24:09 +00:00
Miroslav Stampar 25a3a64327 we need this because of one pesky little bug going around (when union is recognized and the dbmses are fingerprinted, for those who don't have proper unescaping false TRUE is recognized in form of retrieved: %27%2B%28SELECT%20CAST...). tested on all major DBMSes. 2011-02-12 10:15:42 +00:00
Miroslav Stampar 521635c84d quick fix for UA and Referer 2011-02-11 23:36:23 +00:00
Bernardo Damele 7253362114 Minor bug fix so that --file-write on MySQL via UNION query now works again 2011-02-11 23:35:45 +00:00
Miroslav Stampar 535eb9f3eb implementation of referer feature 2011-02-11 23:07:03 +00:00