From c52066608e254f5faa463dae58ba3aa997778a4a Mon Sep 17 00:00:00 2001 From: Jacob Reynolds Date: Thu, 21 Dec 2017 09:57:57 -0600 Subject: [PATCH 1/9] Removing clicky, GA for the win --- index.html | 6 ------ 1 file changed, 6 deletions(-) diff --git a/index.html b/index.html index d6508e4..58e1ea3 100644 --- a/index.html +++ b/index.html @@ -86,12 +86,6 @@ - - From 39672b486b8816fe83a934d518776022f3ecee24 Mon Sep 17 00:00:00 2001 From: Jacob Reynolds Date: Thu, 21 Dec 2017 13:06:28 -0600 Subject: [PATCH 2/9] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 3c15377..f01288d 100644 --- a/README.md +++ b/README.md @@ -57,6 +57,6 @@ That will update the master repository. - Colin Salisbury - Eric Gruber (@egru) - Jake Reynolds (@jreynoldsdev) -- Kai Tran (@k_tr4n) +- Khai Tran (@k_tr4n) - Rafael Seferyan - Scott Sutherland (@_nullbind) From 84cab26c6213597751377f9bad2a81f40ad30655 Mon Sep 17 00:00:00 2001 From: Jacob Reynolds Date: Thu, 21 Dec 2017 13:06:41 -0600 Subject: [PATCH 3/9] Update contributors.html --- views/contributors.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/views/contributors.html b/views/contributors.html index 97fbaf9..da5a819 100644 --- a/views/contributors.html +++ b/views/contributors.html @@ -6,7 +6,7 @@

Special thanks to our contributors:

  • Colin Salisbury

  • Eric Gruber (@egru)

  • Jake Reynolds (@jreynoldsdev)

    • -

  • Kai Tran (@k_tr4n)

    • +

  • Khai Tran (@k_tr4n)

  • Rafael Seferyan

  • Scott Sutherland (@_nullbind)

    • From e1165f5de62ff1238d014d64d85d8ea007b1036d Mon Sep 17 00:00:00 2001 From: Jacob Reynolds Date: Fri, 29 Dec 2017 13:52:42 -0600 Subject: [PATCH 4/9] Update index.js --- javascripts/index.js | 1 - 1 file changed, 1 deletion(-) diff --git a/javascripts/index.js b/javascripts/index.js index 0137a69..15ac729 100644 --- a/javascripts/index.js +++ b/javascripts/index.js @@ -27,7 +27,6 @@ function loadPage() { $.get('/views/' + pageType + '.html?' + VERSION, function(response, data) { if (response.indexOf('') > -1 && response.indexOf('SQL') > -1) { //Whatever view it is, we don't have it and it defaulted to index.html - debugger; window.location.pathname = '/'; } else { $('#contentContainer').html(response); From e83136b4581466de49c1b4300bf6ae2c84684a27 Mon Sep 17 00:00:00 2001 From: Jacob Reynolds <jreynoldsdev@gmail.com> Date: Fri, 19 Jan 2018 09:30:32 -0600 Subject: [PATCH 5/9] Update obfuscation.html --- build/Oracle/injectionTechniques/obfuscation.html | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/build/Oracle/injectionTechniques/obfuscation.html b/build/Oracle/injectionTechniques/obfuscation.html index ee719ed..e25f75a 100644 --- a/build/Oracle/injectionTechniques/obfuscation.html +++ b/build/Oracle/injectionTechniques/obfuscation.html @@ -20,19 +20,15 @@ <h3 id="obfuscating-queries">Obfuscating Queries</h3> </tr> <tr> <td>Bitwise AND</td> - <td>SELECT 6 & 2 from dual</td> + <td>SELECT BITAND(1,2) FROM DUAL</td> </tr> <tr> <td>Bitwise OR</td> - <td>SELECT 6 from dual</td> - </tr> - <tr> - <td>Bitwise Negation</td> - <td>SELECT ~6 from dual</td> + <td>SELECT (x+y)-BITAND(x,y) FROM DUAL</td> </tr> <tr> <td>Bitwise XOR</td> - <td>SELECT 6 ^ 2 from dual</td> + <td>SELECT (x + y) - BitAND(x, y) * 2 FROM DUAL</td> </tr> <tr> <td>Select Nth Char</td> From 867f6b94c8a9578ea5db8d696df6c0b5ea779d97 Mon Sep 17 00:00:00 2001 From: Jacob Reynolds <jreynoldsdev@gmail.com> Date: Fri, 19 Jan 2018 09:31:16 -0600 Subject: [PATCH 6/9] Update references.html --- build/Oracle/misc/references.html | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/build/Oracle/misc/references.html b/build/Oracle/misc/references.html index f94ec4f..c9848bc 100644 --- a/build/Oracle/misc/references.html +++ b/build/Oracle/misc/references.html @@ -4,4 +4,5 @@ <h3 id="special-thanks-to">Special thanks to:</h3> <a target="_blank" rel="noopener" href="http://pentestmonkey.net/cheat-sheet/sql-injection/oracle-sql-injection-cheat-sheet">http://pentestmonkey.net/cheat-sheet/sql-injection/oracle-sql-injection-cheat-sheet</a> <br> <a target="_blank" rel="noopener" href="http://www.sqlinjectionwiki.com/Categories/3/oracle-sql-injection-cheat-sheet">http://www.sqlinjectionwiki.com/Categories/3/oracle-sql-injection-cheat-sheet</a> <br> <a target="_blank" rel="noopener" href="https://information.rapid7.com/rs/rapid7/images/R7%20SQL_Injection_Cheat_Sheet.v1.pdf">https://information.rapid7.com/rs/rapid7/images/R7%20SQL_Injection_Cheat_Sheet.v1.pdf</a> <br> - <a target="_blank" rel="noopener" href="http://www.sqlinjection.net/union/">http://www.sqlinjection.net/union/</a></p> + <a target="_blank" rel="noopener" href="http://www.sqlinjection.net/union/">http://www.sqlinjection.net/union/</a> <br/> + <a target="_blank" rel="noopener" href="https://asktom.oracle.com/pls/asktom/f?p=100:11:0::::P11_QUESTION_ID:1284001741333">https://asktom.oracle.com/pls/asktom/f?p=100:11:0::::P11_QUESTION_ID:1284001741333</a></p> From 172ff693290af7a0c7b77d58609500395c8a9f82 Mon Sep 17 00:00:00 2001 From: Jacob Reynolds <jreynoldsdev@gmail.com> Date: Fri, 19 Jan 2018 09:31:49 -0600 Subject: [PATCH 7/9] Update obfuscation.html --- build/SQLServer/injectionTechniques/obfuscation.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build/SQLServer/injectionTechniques/obfuscation.html b/build/SQLServer/injectionTechniques/obfuscation.html index 188571b..2786861 100644 --- a/build/SQLServer/injectionTechniques/obfuscation.html +++ b/build/SQLServer/injectionTechniques/obfuscation.html @@ -28,7 +28,7 @@ <h3 id="obfuscating-queries">Obfuscating Queries</h3> </tr> <tr> <td>Bitwise OR</td> - <td>SELECT 6</td> + <td>SELECT 6|2</td> </tr> <tr> <td>Bitwise Negation</td> From b17c4d1521d31212423f7e353bbf61a8b9d148f2 Mon Sep 17 00:00:00 2001 From: Jacob Reynolds <jreynoldsdev@gmail.com> Date: Fri, 19 Jan 2018 09:32:04 -0600 Subject: [PATCH 8/9] Update obfuscation.html --- build/MySQL/injectionTechniques/obfuscation.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build/MySQL/injectionTechniques/obfuscation.html b/build/MySQL/injectionTechniques/obfuscation.html index 5e8af42..a7e7354 100644 --- a/build/MySQL/injectionTechniques/obfuscation.html +++ b/build/MySQL/injectionTechniques/obfuscation.html @@ -32,7 +32,7 @@ <h3 id="obfuscating-queries">Obfuscating Queries</h3> </tr> <tr> <td>Bitwise OR</td> - <td>SELECT 6</td> + <td>SELECT 6|2</td> </tr> <tr> <td>Bitwise Negation</td> From 7d81f0673e8c0dbf6c418423947771fb3b943e72 Mon Sep 17 00:00:00 2001 From: Jacob Reynolds <jreynoldsdev@gmail.com> Date: Fri, 19 Jan 2018 09:32:44 -0600 Subject: [PATCH 9/9] Update index.html --- index.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.html b/index.html index 58e1ea3..3eacc88 100644 --- a/index.html +++ b/index.html @@ -91,7 +91,7 @@ <script src="https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0-alpha.2/js/bootstrap.min.js" integrity="sha384-vZ2WRJMwsjRMW/8U7i6PWi6AlO1L79snBrmgiDpgIWJ82z8eA5lenwvxbMV1PAh7" crossorigin="anonymous"></script> <script> //Because caching - var VERSION = 1.1; + var VERSION = 1.2; injectJS('/javascripts/descriptions.js?' + VERSION) injectJS('/javascripts/nav.js?' + VERSION, function() { //index.js depends on functions in nav.js