sqlmap
-
Huge speed improvement of hash cracking routine, especially on large table dumps (minutes to seconds)
10:45 PM Nov 1st
via TweetDeck
-
Fancy designing a new homepage and logo for sqlmap? Get in touch, dev@sqlmap.org
1:18 AM Nov 1st
via Twitter for iPhone
-
Added compatibility support for using switches --crawl and --forms together
2:23 AM Oct 29th
via web
-
Added support for automatic filtering of badly formed HTML in --forms mode
2:18 PM Oct 28th
via web
-
Bug fixed which prevented proper FULL inband/UNION table dumps (particularly MySQL/PgSQL in last couple of weeks)
8:16 AM Oct 28th
via web
-
Fixed bug regarding support for parsing Burp logs (switch -l)
11:19 AM Oct 27th
via web
-
Added switch --check-tor which checks (via ) if the Tor is properly used
10:29 AM Oct 25th
via web
-
Added tampering scripts modsecurityversioned.py and modsecurityzeroversioned.py for bypassing ModSecurity WAF by using versioned comments
6:47 AM Oct 25th
via web
-
Fixed bug with --code switch providing proper usage of redirection response codes
5:05 PM Oct 23rd
via TweetDeck
-
Generalizing ORDER BY approach in UNION SQLi detection gives better and considerably faster positives in larger number of cases
3:54 PM Oct 23rd
via TweetDeck
-
Implemented support for non-Latin (e.g. Cyrillic) hostnames (e.g. site:рф)
10:02 AM Oct 23rd
via TweetDeck
-
Important bug fix for UNION technique detection (lesser false negatives)
1:57 PM Oct 21st
via TweetDeck
-
Dumping queries are stored now in SQLite local db resulting in optimal resume of data retrieval (no more MemoryError on huge dump resumes)
12:53 AM Oct 5th
via TweetDeck
-
Continuously fixing reported bugs. Report without hesitation anything (we most like criticals) you find.
11:26 AM Sep 23rd
via TweetDeck
-
Added support for pre-WHERE injections (e.g. UPDATE table SET name='$_REQUEST["name"]' WHERE id=1) //note: --level >= 4
2:02 AM Aug 24th
via TweetDeck
-
Improved detection for partial UNION injection cases
8:50 AM Aug 23rd
via TweetDeck
-
Added --code switch to match in boolean-based tests against the HTTP response code
9:54 AM Aug 12th
via web
-
--string and --regexp now look for the match on both HTTP response headers and body - before only body was parsed
9:54 AM Aug 12th
via web
-
Bug fix to correctly exploit URI injections (REST-alike) which lead to a 404 return code
9:53 AM Aug 12th
via web
-
When password hashes are identified during dump phase, now the relevant column name(s) are displayed when asked to crack them
4:02 AM Aug 6th
via Twitter for iPhone
|
- Name sqlmap
- Location World Wild Web
- Web http://www.sqlmap...
- Bio Open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.
|