Commits

Commit history

1. Commits on Sep 26, 2012

   • Cleaning/refactoring of bunch of stacked/suffix/comment stuff (e.g.

     stamparm

     committed
     687f399View commit details

     Copy full SHA for 687f399

     View code at this pointBrowse repository at this point
2. Commits on Sep 17, 2012

   • Removing boundaries (it were meant to be used as 'parameter replace' logic but it's not doable for boundaries)

     stamparm

     committed
     67cfc3bView commit details

     Copy full SHA for 67cfc3b

     View code at this pointBrowse repository at this point

   • Minor update

     stamparm

     committed
     acad7a3View commit details

     Copy full SHA for acad7a3

     View code at this pointBrowse repository at this point
3. Commits on Aug 22, 2012

   • Fixing INSERT/UPDATE generic boundaries (those previous few were junkies)

     stamparm

     committed
     d7cf0deView commit details

     Copy full SHA for d7cf0de

     View code at this pointBrowse repository at this point
4. Commits on Aug 20, 2012

   • Making payloads a bit shorter (removing redundant space after comma character - e.g. in inband queries)

     stamparm

     committed
     8ee9feaView commit details

     Copy full SHA for 8ee9fea

     View code at this pointBrowse repository at this point
5. Commits on Aug 6, 2012

   • Fix by zhouhx@knownsec.com (better LIKE boundaries)

     stamparm

     committed
     6fdbe4eView commit details

     Copy full SHA for 6fdbe4e

     View code at this pointBrowse repository at this point
6. Commits on Jul 26, 2012

   • Revert of a previous commit (actually missing mysql.db is a bonus in this kind of attack :)

     stamparm

     committed
     57f2fccView commit details

     Copy full SHA for 57f2fcc

     View code at this pointBrowse repository at this point

   • Safer for provoking 'Subquery returns more than 1 row' state than potentially missing mysql.db

     stamparm

     committed
     ec96689View commit details

     Copy full SHA for ec96689

     View code at this pointBrowse repository at this point

   • Style update

     stamparm

     committed
     6878ef9View commit details

     Copy full SHA for 6878ef9

     View code at this pointBrowse repository at this point

   • Implementation of payloads for Issue #122

     stamparm

     committed
     ab31603View commit details

     Copy full SHA for ab31603

     View code at this pointBrowse repository at this point
7. Commits on Jul 20, 2012

   • fixes issue #97

     bdamele

     committed
     1928d54View commit details

     Copy full SHA for 1928d54

     View code at this pointBrowse repository at this point
8. Commits on Jul 17, 2012

   • more on issue #97

     bdamele

     committed
     243a905View commit details

     Copy full SHA for 243a905

     View code at this pointBrowse repository at this point

   • added payloads for ORDER BY/GROUP BY time-based injections - issue #97

     bdamele

     committed
     c483e91View commit details

     Copy full SHA for c483e91

     View code at this pointBrowse repository at this point

   • Initial commit for issue #97

     bdamele

     committed
     771e7a9View commit details

     Copy full SHA for 771e7a9

     View code at this pointBrowse repository at this point
9. Commits on Jun 11, 2012

   • minor refactoring

     stamparm

     committed
     5d35d25View commit details

     Copy full SHA for 5d35d25

     View code at this pointBrowse repository at this point
10. Commits on May 22, 2012

    • fixing an issue with --file-read and ROW() MySQL payload (it's internal caching mechanism prevents error message if FROM part is not unique enough dumping only partial file content); minor refactoring

      stamparm

      committed
      2538e2dView commit details

      Copy full SHA for 2538e2d

      View code at this pointBrowse repository at this point
11. Commits on May 21, 2012

    • adding revisited wildcard LIKE payloads

      stamparm

      committed
      3a9e266View commit details

      Copy full SHA for 3a9e266

      View code at this pointBrowse repository at this point

    • reverting last changes on boundaries

      stamparm

      committed
      602369cView commit details

      Copy full SHA for 602369c

      View code at this pointBrowse repository at this point

    • adding a new payload boundaries by smcintyre@securestate.com

      stamparm

      committed
      1500b3fView commit details

      Copy full SHA for 1500b3f

      View code at this pointBrowse repository at this point
12. Commits on May 9, 2012

    • making a generic solution for all "Generic comment"/MsAccess cases (it's the only DBMS which doesn't accept --, hence replacing generic comment with %00 for it)

      stamparm

      committed
      37f2709View commit details

      Copy full SHA for 37f2709

      View code at this pointBrowse repository at this point
13. Commits on Apr 25, 2012

    • reverting back to smaller UNION ranges as that mechanism for automatic extending was implemented few days ago

      stamparm

      committed
      1e45ee9View commit details

      Copy full SHA for 1e45ee9

      View code at this pointBrowse repository at this point
14. Commits on Apr 23, 2012

    • increased UNION test ranges

      bdamele

      committed
      eb73cabView commit details

      Copy full SHA for eb73cab

      View code at this pointBrowse repository at this point
15. Commits on Apr 13, 2012

    • new payload

      stamparm

      committed
      414c74bView commit details

      Copy full SHA for 414c74b

      View code at this pointBrowse repository at this point
16. Commits on Apr 4, 2012

    • switch two conditional payloads for proper detection

      bdamele

      committed
      1f82d29View commit details

      Copy full SHA for 1f82d29

      View code at this pointBrowse repository at this point

    • minor revert

      bdamele

      committed
      d5b4b79View commit details

      Copy full SHA for d5b4b79

      View code at this pointBrowse repository at this point
17. Commits on Apr 3, 2012

    • improved detection for INSERT and UPDATE statements

      bdamele

      committed
      049c27cView commit details

      Copy full SHA for 049c27c

      View code at this pointBrowse repository at this point
18. Commits on Mar 30, 2012

    • Minor fix to avoid useless tests (FROM DUAL is Oracle specific so no point using + to concatenate strings)

      bdamele

      committed
      40a7232View commit details

      Copy full SHA for 40a7232

      View code at this pointBrowse repository at this point
19. Commits on Mar 29, 2012

    • improvement toward proper implementation of OR-based injection by usage of "negative logic" mechanism

      stamparm

      committed
      637a8d8View commit details

      Copy full SHA for 637a8d8

      View code at this pointBrowse repository at this point

    • fixed support for error-based injection on MySQL 4.1 (help table a needs more than 2 items inside); also, fixed some border issues with reflective values

      stamparm

      committed
      772ead8View commit details

      Copy full SHA for 772ead8

      View code at this pointBrowse repository at this point
20. Commits on Mar 15, 2012

    • minor fix

      stamparm

      committed
      84479eeView commit details

      Copy full SHA for 84479ee

      View code at this pointBrowse repository at this point

    • Minor fixes to make --os-* switch work again against MySQL/Windows/ASP.NET (where stacked queries are supported)

      bdamele

      committed
      890bf70View commit details

      Copy full SHA for 890bf70

      View code at this pointBrowse repository at this point
21. Commits on Mar 1, 2012

    • Oracle's XMLType doesn't like '#' char too

      stamparm

      committed
      ac5a752View commit details

      Copy full SHA for ac5a752

      View code at this pointBrowse repository at this point
22. Commits on Jan 10, 2012

    • minor concision/beautification update

      stamparm

      committed
      f114703View commit details

      Copy full SHA for f114703

      View code at this pointBrowse repository at this point
23. Commits on Dec 1, 2011

    • minor update (removing reference to Microsoft Access for Generic payload)

      stamparm

      committed
      94790bfView commit details

      Copy full SHA for 94790bf

      View code at this pointBrowse repository at this point
24. Commits on Nov 23, 2011

    • using MySQL comments in explicit MySQL payloads where not comments stated in title (as we already use in MySQL UNION payloads; in lots of cases minus character is either filtered or "exploded" - se…

      Show description for df4e3be
      stamparm

      committed
      df4e3beView commit details

      Copy full SHA for df4e3be

      View code at this pointBrowse repository at this point