|
Posted
over 14 years
ago
sqlmap: Added tamper script --tamper=multiplespaces which surrounds SQL keywords with multiple spaces (e.g. 'UNION SELECT' -> ' UNION SELECT ')
|
|
Posted
over 14 years
ago
sqlmap: Added tamper script --tamper=appendnullbyte which appends encoded null byte to the end of payload (reference: http://t.co/iUxiX7Z)
|
|
Posted
over 14 years
ago
sqlmap: Added tamper script --tamper=apostrophemask which replaces all occurances of char ' in payloads with fullwidth utf8 counterpart '
|
|
Posted
over 14 years
ago
sqlmap: Fixed a nasty bug which prevented proper saving of dumped data after Ctrl+C was pressed
|
|
Posted
over 14 years
ago
sqlmap: Squezzed PHP backdoor script which should give more positives for --os-shell
|
|
Posted
over 14 years
ago
sqlmap: Important fix for a bug that most probably caused lots of false negatives for MSSQL union based injections
|
|
Posted
over 14 years
ago
sqlmap: Fixed big bug (brute forcing one): --columns (particularly) and --tables were not working properly for Access for at least a month
|
|
Posted
over 14 years
ago
sqlmap: Noticeable speed up of UNION technique (profiling has shown one regular expression to be a bottleneck)
|
|
Posted
over 14 years
ago
sqlmap: Added support for --threads on UNION and ERROR techniques (how fast is fast :)
|
|
Posted
over 14 years
ago
sqlmap: Added IDS/WAF piercing "./tamper/versionedkeywords.py" tamper script which encloses SQL keywords to MySQL /*!....*/ form
|