★ wanayoo — archive 1999 https://twitter.com/sqlmapNouvelle recherche | Portail wanayoo

Get short, timely messages from sqlmap.

Twitter is a rich source of instantly updated information. It's easy to stay updated on an incredibly wide variety of topics. Join today and follow @sqlmap.

Get updates via SMS by texting follow sqlmap to 40404 in the United States
Codes for other countries

Two-way (sending and receiving) short codes:
Country Code For customers of
Australia
  • 0198089488 Telstra
Canada
  • 21212 (any)
United Kingdom
  • 86444 Vodafone, Orange, 3, O2
Indonesia
  • 89887 AXIS, 3, Telkomsel
Ireland
  • 51210 O2
India
  • 53000 Bharti Airtel, Videocon
Jordan
  • 90903 Zain
New Zealand
  • 8987 Vodafone, Telecom NZ
United States
  • 40404 (any)

sqlmap

  1. Huge speed improvement of hash cracking routine, especially on large table dumps (minutes to seconds)
  2. Fancy designing a new homepage and logo for sqlmap? Get in touch, dev@sqlmap.org
  3. Added compatibility support for using switches --crawl and --forms together
  4. Added support for automatic filtering of badly formed HTML in --forms mode
  5. Bug fixed which prevented proper FULL inband/UNION table dumps (particularly MySQL/PgSQL in last couple of weeks)
  6. Fixed bug regarding support for parsing Burp logs (switch -l)
  7. Added switch --check-tor which checks (via check.torproject.org) if the Tor is properly used
  8. Added tampering scripts modsecurityversioned.py and modsecurityzeroversioned.py for bypassing ModSecurity WAF by using versioned comments
  9. Fixed bug with --code switch providing proper usage of redirection response codes
  10. Generalizing ORDER BY approach in UNION SQLi detection gives better and considerably faster positives in larger number of cases
  11. Implemented support for non-Latin (e.g. Cyrillic) hostnames (e.g. site:рф)
  12. Important bug fix for UNION technique detection (lesser false negatives)
  13. Dumping queries are stored now in SQLite local db resulting in optimal resume of data retrieval (no more MemoryError on huge dump resumes)
  14. Continuously fixing reported bugs. Report without hesitation anything (we most like criticals) you find.
  15. Added support for pre-WHERE injections (e.g. UPDATE table SET name='$_REQUEST["name"]' WHERE id=1) //note: --level >= 4
  16. Improved detection for partial UNION injection cases
  17. Added --code switch to match in boolean-based tests against the HTTP response code
  18. --string and --regexp now look for the match on both HTTP response headers and body - before only body was parsed
  19. Bug fix to correctly exploit URI injections (REST-alike) which lead to a 404 return code
  20. When password hashes are identified during dump phase, now the relevant column name(s) are displayed when asked to crack them