Posted
over 13 years
ago
sqlmap: Added tampering scripts modsecurityversioned.py and modsecurityzeroversioned.py for bypassing ModSecurity WAF by using versioned comments
|
Posted
over 13 years
ago
sqlmap: Fixed bug with --code switch providing proper usage of redirection response codes
|
Posted
over 13 years
ago
sqlmap: Generalizing ORDER BY approach in UNION SQLi detection gives better and considerably faster positives in larger number of cases
|
Posted
over 13 years
ago
sqlmap: Implemented support for non-Latin (e.g. Cyrillic) hostnames (e.g. site:рф)
|
Posted
over 13 years
ago
sqlmap: Important bug fix for UNION technique detection (lesser false negatives)
|
Posted
over 13 years
ago
sqlmap: Dumping queries are stored now in SQLite local db resulting in optimal resume of data retrieval (no more MemoryError on huge dump resumes)
|
Posted
over 13 years
ago
sqlmap: Continuously fixing reported bugs. Report without hesitation anything (we most like criticals) you find.
|
Posted
almost 14 years
ago
sqlmap: Added support for pre-WHERE injections (e.g. UPDATE table SET name='$_REQUEST["name"]' WHERE id=1) //note: --level >= 4
|
Posted
almost 14 years
ago
sqlmap: Improved detection for partial UNION injection cases
|
Posted
almost 14 years
ago
sqlmap: Added --code switch to match in boolean-based tests against the HTTP response code
|