 h00die
|
d64ed33cdf
|
code spell for a bunch of modules
|
2023-09-24 17:42:00 -04:00 |
|
|
Grant Willcox
|
08f07eccb6
|
Fix initial incorrect parameters in YARD documentation
|
2023-03-05 20:15:14 -06:00 |
|
|
Grant Willcox
|
b10386ba08
|
Land #16650, Add #read_from_file for MSSQL and PostgreSQL, fix the MySQL implementation
|
2022-06-17 14:58:22 -05:00 |
|
|
Redouane NIBOUCHA
|
d47d1bc259
|
Remove newlines from base64 output on MySQL also
|
2022-06-17 00:51:52 +02:00 |
|
|
Redouane NIBOUCHA
|
88036a7f1f
|
Check for nil before using the decoder in test_vulnerable
|
2022-06-08 22:00:03 +02:00 |
|
|
Redouane NIBOUCHA
|
5331c343a0
|
Use the encoder in all the #test_vulnerable methods from the common class
|
2022-06-06 23:13:26 +02:00 |
|
|
Redouane NIBOUCHA
|
6d9c789f4d
|
Add method #read_from_file for MSSQL and PostgreSQL, and update the MySQL #read_from_file method
|
2022-06-06 23:07:25 +02:00 |
|
|
Redouane NIBOUCHA
|
51814a4a8b
|
Refactor the code, using if(CONDITION,sleep(...),0) only
|
2022-01-30 23:49:07 +00:00 |
|
|
Redouane NIBOUCHA
|
e329d78a46
|
Use = instead of <> for blind queries (fixes some wordpress plugin SQLis)
|
2022-01-30 23:01:08 +00:00 |
|
|
Jeffrey Martin
|
43ecfe5138
|
Land #14602, Fix length detection & enhance hex
|
2021-02-14 12:37:48 -06:00 |
|
|
Niboucha Redouane
|
82874a5cf5
|
fix hex_encode_strings, encode empty strings before others (""||"a" would otherwise encode "||" before getting to empty strings)
|
2021-01-09 14:15:05 +01:00 |
|
|
Niboucha Redouane
|
e63dd77b52
|
Handle empty strings when hex_encode_strings is true
|
2021-01-09 14:01:32 +01:00 |
|
|
Niboucha Redouane
|
b9d9a8af5b
|
Fix MySQLi timebasedblind output length detection
|
2021-01-09 14:00:25 +01:00 |
|
|
dwelch-r7
|
1617b3ec9b
|
Use zeitwerk for lib/msf/core folder
|
2020-12-07 10:31:45 +00:00 |
|
|
Niboucha Redouane
|
d66bb4058e
|
Fix documentation, remove unused instance variable in SQLite TimeBasedBlind class (sleepdelay)
|
2020-08-27 19:08:27 +02:00 |
|
|
Niboucha Redouane
|
4e302dc42b
|
Move get_bitmask to the SQLi::Utils module
|
2020-08-27 16:28:38 +02:00 |
|
|
Niboucha Redouane
|
2bb2b73dc2
|
Refactor to avoid repetitive code on Blind SQLi implementations
|
2020-08-27 16:28:38 +02:00 |
|
|
Niboucha Redouane
|
812a0b78e2
|
Fix write_to_file, and add read_from_file support for MySQL
|
2020-08-09 19:23:22 +02:00 |
|
|
Niboucha Redouane
|
4c229c0a24
|
Add method for writing to files using SQL injection
|
2020-07-06 16:53:46 +02:00 |
|
|
Niboucha Redouane
|
4950c2dacf
|
Fix minor bugs, in safe mode, and in the name of the attribute passed to attr_accessor
|
2020-07-01 23:00:23 +02:00 |
|
|
Niboucha Redouane
|
f9ade608b5
|
minor change: add default value to some arguments
|
2020-07-01 02:56:01 +02:00 |
|
|
Niboucha Redouane
|
0680113288
|
get rid of database parameter in MySQLi methods
|
2020-06-30 18:49:13 +02:00 |
|
|
Niboucha Redouane
|
440294ff07
|
make some attributes writable, and specify its the SQLi library in any verbose message
|
2020-06-27 18:28:12 +02:00 |
|
|
Jeffrey Martin
|
aa6c037dbd
|
refactor mixin as factory for sqli classes
|
2020-06-26 15:09:01 -05:00 |
|
|
Niboucha Redouane
|
34e8eae471
|
move hex_encode_strings to MySQLi::Common, as it is specific to MySQL
|
2020-06-26 16:04:51 +02:00 |
|
|
Niboucha Redouane
|
7291a77807
|
minor fix to verbose logging / some comments
|
2020-06-25 12:46:05 +02:00 |
|
|
Niboucha Redouane
|
f89f80be47
|
add default value for options of SQLi constructors, and fix eyesofnetwork module
|
2020-06-24 00:38:13 +02:00 |
|
|
Niboucha Redouane
|
c94bd3b2d8
|
remove verbose prints in blind injections
|
2020-06-23 21:33:03 +02:00 |
|
|
Niboucha Redouane
|
2bdc693930
|
Replace puts with print_status and similar
|
2020-06-23 21:25:59 +02:00 |
|
|
Niboucha Redouane
|
aaa38a3188
|
Fix formatting
|
2020-06-22 17:41:20 +02:00 |
|
|
Niboucha Redouane
|
fba2d2e7be
|
inject the datastore into the SQLi library, and register advanced options
|
2020-06-22 17:36:38 +02:00 |
|
|
Niboucha Redouane
|
4f756ba229
|
replace some classes with modules
|
2020-06-20 21:09:13 +02:00 |
|
|
Niboucha Redouane
|
9d36076264
|
Add option to specify the range of characters to retrieve
|
2020-06-19 16:41:57 +02:00 |
|
|
Niboucha Redouane
|
7c630f0403
|
Avoid repetitive code in blind injections
|
2020-06-18 20:52:02 +02:00 |
|
|
Niboucha Redouane
|
fa43dc6dfb
|
minor fix to the structure
|
2020-06-18 17:28:47 +02:00 |
|
|
Niboucha Redouane
|
305dbe9e2f
|
refactor structure, get rid of prefix and suffix
|
2020-06-18 17:21:10 +02:00 |
|
|
Niboucha Redouane
|
0887f3feee
|
Improve the blind injection queries
|
2020-06-13 12:24:22 +02:00 |
|
|
Niboucha Redouane
|
c319799c44
|
Add more comments
|
2020-06-11 00:07:53 +02:00 |
|
|
Niboucha Redouane
|
12681b0746
|
Add support for encodings to exfiltrate data containing bad characters/multibyte characters
|
2020-06-10 21:40:22 +02:00 |
|
|
Niboucha Redouane
|
0f936f7500
|
Various fixes and enhancements
|
2020-06-09 23:43:15 +02:00 |
|
|
Niboucha Redouane
|
92d8464ac1
|
Various fixes and enhancements
|
2020-06-05 21:59:16 +02:00 |
|
|
Niboucha Redouane
|
db4880762a
|
Add common MySQL injection payloads and options
|
2020-06-03 01:18:19 +02:00 |
|