 dwelch-r7
|
1617b3ec9b
|
Use zeitwerk for lib/msf/core folder
|
2020-12-07 10:31:45 +00:00 |
|
|
Niboucha Redouane
|
8d64cb9b6b
|
Rename the common utilities from utils to common
|
2020-08-27 22:54:42 +02:00 |
|
|
Niboucha Redouane
|
d66bb4058e
|
Fix documentation, remove unused instance variable in SQLite TimeBasedBlind class (sleepdelay)
|
2020-08-27 19:08:27 +02:00 |
|
|
Niboucha Redouane
|
4e302dc42b
|
Move get_bitmask to the SQLi::Utils module
|
2020-08-27 16:28:38 +02:00 |
|
|
Niboucha Redouane
|
2bb2b73dc2
|
Refactor to avoid repetitive code on Blind SQLi implementations
|
2020-08-27 16:28:38 +02:00 |
|
|
Niboucha Redouane
|
080e25ee6a
|
Various fixes and enhacements to the comments, and addition of write_to_file method
|
2020-08-27 16:28:38 +02:00 |
|
|
Niboucha Redouane
|
e0c59ede5c
|
Comment the SQLite methods
|
2020-08-27 16:28:38 +02:00 |
|
|
Niboucha Redouane
|
1c69dfd5df
|
Add safe mode for SQLi, and support limiting the number of rows to be returned
|
2020-08-27 16:28:38 +02:00 |
|
|
Niboucha Redouane
|
a42ae5280b
|
Update SQLite support to work with the new factory redesign
|
2020-08-27 16:28:38 +02:00 |
|
|
Niboucha Redouane
|
4374edd37a
|
add truncated SQLi in SQLite, and update test module to add it as an option
|
2020-08-27 16:28:38 +02:00 |
|
|
Niboucha Redouane
|
8f9a849591
|
fix test module, and fix logging
|
2020-08-27 16:28:38 +02:00 |
|
|
Niboucha Redouane
|
477f7313a2
|
Avoid repertitive code in blind injections
|
2020-08-27 16:28:38 +02:00 |
|
|
Niboucha Redouane
|
26e5fc99de
|
add SQLite injection library, and test module (against sqlite_lab)
|
2020-08-27 16:28:38 +02:00 |
|
|
Jeffrey Martin
|
d3c04b13dc
|
Land #13968, Add a method for SQL injections where query output is not needed, and read_from_file support for MySQLi
|
2020-08-14 15:44:53 -05:00 |
|
|
Niboucha Redouane
|
812a0b78e2
|
Fix write_to_file, and add read_from_file support for MySQL
|
2020-08-09 19:23:22 +02:00 |
|
|
Jeffrey Martin
|
f6d21abb51
|
require instead of autoload for exploit mixin
|
2020-07-10 22:15:12 -05:00 |
|
|
Niboucha Redouane
|
4c229c0a24
|
Add method for writing to files using SQL injection
|
2020-07-06 16:53:46 +02:00 |
|
|
Niboucha Redouane
|
4950c2dacf
|
Fix minor bugs, in safe mode, and in the name of the attribute passed to attr_accessor
|
2020-07-01 23:00:23 +02:00 |
|
|
Niboucha Redouane
|
f9ade608b5
|
minor change: add default value to some arguments
|
2020-07-01 02:56:01 +02:00 |
|
|
Niboucha Redouane
|
0680113288
|
get rid of database parameter in MySQLi methods
|
2020-06-30 18:49:13 +02:00 |
|
|
Niboucha Redouane
|
b230adebba
|
Add check for positional arguments on class constructor (SQLi::Common)
|
2020-06-30 16:16:35 +02:00 |
|
|
Niboucha Redouane
|
440294ff07
|
make some attributes writable, and specify its the SQLi library in any verbose message
|
2020-06-27 18:28:12 +02:00 |
|
|
Jeffrey Martin
|
aa6c037dbd
|
refactor mixin as factory for sqli classes
|
2020-06-26 15:09:01 -05:00 |
|
|
Niboucha Redouane
|
34e8eae471
|
move hex_encode_strings to MySQLi::Common, as it is specific to MySQL
|
2020-06-26 16:04:51 +02:00 |
|
|
Niboucha Redouane
|
7291a77807
|
minor fix to verbose logging / some comments
|
2020-06-25 12:46:05 +02:00 |
|
|
Niboucha Redouane
|
f89f80be47
|
add default value for options of SQLi constructors, and fix eyesofnetwork module
|
2020-06-24 00:38:13 +02:00 |
|
|
Niboucha Redouane
|
c94bd3b2d8
|
remove verbose prints in blind injections
|
2020-06-23 21:33:03 +02:00 |
|
|
Niboucha Redouane
|
2bdc693930
|
Replace puts with print_status and similar
|
2020-06-23 21:25:59 +02:00 |
|
|
Niboucha Redouane
|
aaa38a3188
|
Fix formatting
|
2020-06-22 17:41:20 +02:00 |
|
|
Niboucha Redouane
|
fba2d2e7be
|
inject the datastore into the SQLi library, and register advanced options
|
2020-06-22 17:36:38 +02:00 |
|
|
Niboucha Redouane
|
4f756ba229
|
replace some classes with modules
|
2020-06-20 21:09:13 +02:00 |
|
|
Niboucha Redouane
|
9d36076264
|
Add option to specify the range of characters to retrieve
|
2020-06-19 16:41:57 +02:00 |
|
|
Niboucha Redouane
|
7c630f0403
|
Avoid repetitive code in blind injections
|
2020-06-18 20:52:02 +02:00 |
|
|
Niboucha Redouane
|
fa43dc6dfb
|
minor fix to the structure
|
2020-06-18 17:28:47 +02:00 |
|
|
Niboucha Redouane
|
305dbe9e2f
|
refactor structure, get rid of prefix and suffix
|
2020-06-18 17:21:10 +02:00 |
|
|
Niboucha Redouane
|
0887f3feee
|
Improve the blind injection queries
|
2020-06-13 12:24:22 +02:00 |
|
|
Niboucha Redouane
|
3639765277
|
Improve code quality: less repetitive code
|
2020-06-11 19:16:23 +02:00 |
|
|
Niboucha Redouane
|
c319799c44
|
Add more comments
|
2020-06-11 00:07:53 +02:00 |
|
|
Niboucha Redouane
|
ecb1a0bb16
|
add test_vulnerable to MySQLi class, and fix minor issues with the test modules
|
2020-06-10 21:59:51 +02:00 |
|
|
Niboucha Redouane
|
12681b0746
|
Add support for encodings to exfiltrate data containing bad characters/multibyte characters
|
2020-06-10 21:40:22 +02:00 |
|
|
Niboucha Redouane
|
0f936f7500
|
Various fixes and enhancements
|
2020-06-09 23:43:15 +02:00 |
|
|
Niboucha Redouane
|
92d8464ac1
|
Various fixes and enhancements
|
2020-06-05 21:59:16 +02:00 |
|
|
Niboucha Redouane
|
db4880762a
|
Add common MySQL injection payloads and options
|
2020-06-03 01:18:19 +02:00 |
|