|
1 | 1 | sqlmap (0.9-1) stable; urgency=low |
2 | 2 |
|
3 | | - * Added support to directly connect to the database without passing via |
4 | | - a SQL injection, -d switch (Bernardo and Miroslav). |
| 3 | + * Support to directly connect to the database without passing via a |
| 4 | + SQL injection, -d switch (Bernardo and Miroslav). |
| 5 | + * Implemented support for SQLite 2 and 3 (Bernardo and Miroslav). |
| 6 | + * Initial support for SAP MaxDB (Miroslav). |
5 | 7 | * Added support to enumerate roles on Oracle, --roles switch (Bernardo). |
6 | | - * Implemented feature to speedup the enumeration of table names |
7 | | - (Miroslav). |
8 | 8 | * Extended old '--dump -C' functionality to be able to search for |
9 | 9 | specific database(s), table(s) and column(s), --search switch |
10 | 10 | (Bernardo). |
11 | | - * Added support to fetch unicode data (Bernardo and Miroslav). |
12 | 11 | * Added support for SOAP based web services requests (Bernardo). |
| 12 | + * Added support to fetch unicode data (Bernardo and Miroslav). |
13 | 13 | * Added support to use persistent HTTP(s) connection for speed |
14 | 14 | improvement, --keep-alive switch (Miroslav). |
15 | 15 | * Implemented HTTP proxy authentication support, --proxy-cred switch |
16 | 16 | (Miroslav). |
17 | | - * Implemented support for SQLite 2 and 3 (Bernardo and Miroslav). |
18 | | - * Added initial support for SAP MaxDB (Miroslav). |
19 | | - * Added safe URL feature, --safe-url and --safe-freq (Miroslav). |
20 | | - * Added --use-between switch to use BETWEEN syntax in inferencial |
21 | | - statement and bypass firewalls filtering '>' character (Bernardo and |
22 | | - Miroslav). |
| 17 | + * Implemented feature to speedup the enumeration of table names |
| 18 | + (Miroslav). |
23 | 19 | * Support for customizable HTTP redirections (Bernardo). |
| 20 | + * Support to replicate the back-end DBMS tables structure and entries |
| 21 | + in a local SQLite 3 database (Miroslav). IN PROGRESS |
| 22 | + * Added switches to brute-force table names with a dictionary attack, |
| 23 | + --common-exists and --exists. Useful for instance when system table |
| 24 | + 'information_schema' is not available on MySQL (Miroslav). |
| 25 | + * Basic support for REST-style URL parameters by using the asterisk (*) |
| 26 | + to mark where to test for and exploit SQL injection (Miroslav). |
| 27 | + * Added safe URL feature, --safe-url and --safe-freq (Miroslav). |
| 28 | + * Added --text-only switch to strip from the HTTP body the HTML/JS code |
| 29 | + and compare pages based only on their textual content (Miroslav). |
24 | 30 | * Several bugs fixed (Bernardo and Miroslav). |
25 | 31 | * Major code refactoring (Bernardo and Miroslav). |
26 | 32 | * User's manual updated (Bernardo). |
|
0 commit comments