Commit graph

421 commits

Author SHA1 Message Date
Miroslav Štampar
9b0e262560 Fix related to the #6149
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-10-20 10:07:33 +02:00
Miroslav Štampar
9a1660aa12 Minor cleaning after #6146
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-10-17 13:06:38 +02:00
Bharath Vemula
0cf2f6db07
Fix REST API multi-target scans returning only the last target's results (#2503) (#6146)
A scan covering multiple targets inside a single API task (crawl,
'-m' bulk file, forms) ran every target through one StdDbOut keyed by
the single taskid, so _storeData()'s COMPLETE branch deleted each
earlier target's TARGET/TECHNIQUES rows - /scan/<id>/data returned
only the last target's results.

Mirror the --report-json fix for #6123: controller.start() now sets
kb.reportTaskId per target for API scans too, StdDbOut.write() keys
data rows '<taskid>-<n>' per target, and scan_data() folds the
per-target rows back into the task's flat result in target order.
Single-target scans keep the exact same response shape.

Regression tests in tests/test_api.py (TestStdDbOutMultiTarget,
TestScanDataMultiTarget).
2026-10-17 13:02:34 +02:00
Miroslav Štampar
bda62dcf28 Fixes #6123 2026-09-18 00:41:57 +02:00
Miroslav Štampar
e11ea65230 Minor patch 2026-08-11 23:13:20 +02:00
Miroslav Štampar
dd57fd91e2 Adding switches --odata and --sparql 2026-08-09 11:04:44 +02:00
Miroslav Štampar
881d2e8f90 Adding switch --xslt 2026-08-08 00:37:32 +02:00
Miroslav Štampar
edbfca0b8e Adding switch --jwt
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 22:40:12 +02:00
Miroslav Štampar
075d009bb7 Adding switch --mine-params 2026-07-24 14:27:05 +02:00
Miroslav Štampar
d0f16b284d Adding support for --hql 2026-07-10 10:38:20 +02:00
Miroslav Štampar
5fa2da5eae Adding support for --xxe 2026-07-04 09:53:04 +02:00
Miroslav Štampar
1716ad1524 Minor improvement of UNION detection 2026-07-01 22:31:37 +02:00
Miroslav Štampar
87eb93db15 Minor update 2026-06-30 12:18:06 +02:00
Miroslav Štampar
820efa7a8a Adding switch --ssti 2026-06-29 11:43:10 +02:00
Miroslav Štampar
8ff5d3811a Adding switch --xpath 2026-06-29 00:29:27 +02:00
Miroslav Štampar
e8162d314a Adding switch --ldap
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-06-28 01:36:38 +02:00
Miroslav Štampar
f6912fc921 Adding support for GraphQL (--graphql) 2026-06-27 19:23:30 +02:00
Miroslav Štampar
2893fd5c4d Adding support for NoSQL injection
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-06-24 22:57:09 +02:00
Miroslav Štampar
8de9c5899d Couple of improvements 2026-06-18 17:46:40 +02:00
Miroslav Štampar
1404133538 Add --prove, opt-in --auto-tamper WAF bypass, and blindbinary/infoschema2innodb tampers 2026-06-17 15:58:08 +02:00
Miroslav Štampar
75c4c868b4 Minor update 2026-06-15 21:14:10 +02:00
Miroslav Štampar
ea1f089220 Adding some warning message 2026-06-15 18:29:32 +02:00
Miroslav Štampar
17e94c3409 Adding --report-json option 2026-06-15 15:35:33 +02:00
Your Name
c20c718dc3 Minor refactoring 2026-04-15 19:08:17 +02:00
Miroslav Stampar
f69a63b2b6 Year bump 2026-01-01 19:12:07 +01:00
Miroslav Stampar
1d7493d243 Patch for #5897 2025-05-08 23:54:39 +02:00
Miroslav Stampar
ed4fc46217 Year bump 2025-01-02 00:51:30 +01:00
Miroslav Stampar
374134e8c0 Minor improvement 2024-10-25 15:47:16 +02:00
Miroslav Stampar
c84f141b89 Bumping copyright year 2024-01-03 23:11:52 +01:00
Miroslav Stampar
bb1772c8b8 Fixes #5560 2023-10-31 15:16:15 +01:00
Miroslav Stampar
2c767d7d1f Patch for #5484 2023-08-15 11:06:28 +02:00
Miroslav Stampar
4357b0087d Minor refactoring for #5308 2023-02-07 09:49:42 +01:00
Miroslav Stampar
d3bfe59401 Fixes #5308 2023-02-07 09:40:42 +01:00
Miroslav Stampar
05293e01a4 Year and version bump 2023-01-02 23:24:59 +01:00
Miroslav Stampar
b8fa0edea6 Fixes #5232 2022-11-21 00:37:48 +01:00
Miroslav Stampar
df4293473d Fixing DeprecationWarning (logger.warn) 2022-06-22 12:04:34 +02:00
Miroslav Stampar
e1a04a8201 Fixes #5044 2022-03-21 14:33:48 +01:00
Miroslav Stampar
6276db1d80 Copyright year bump 2022-01-03 11:30:34 +01:00
Miroslav Stampar
90b145ee87 Fixes #4895 2021-12-02 17:01:02 +01:00
Miroslav Stampar
d95406016c Update regarding #4795 2021-09-08 21:01:41 +02:00
Miroslav Stampar
afa4d2c514 Fixes #4783 2021-08-31 13:04:45 +02:00
Miroslav Stampar
d63401632c Fixes #4776 2021-08-26 18:08:48 +02:00
Miroslav Stampar
31fe3453a2 Copyright year bump 2020-12-31 11:46:27 +01:00
Miroslav Stampar
bce1cfe00f Minor update 2020-12-08 13:40:46 +01:00
Miroslav Stampar
4687383a44 Patch for multiple-Ctrl-C in multiple-target mode 2020-10-14 12:22:56 +02:00
Miroslav Stampar
2bf22df53a Implementing support for piped input of targets 2020-10-14 11:34:52 +02:00
Miroslav Stampar
a6ce91a3e2 Fixes #4269 2020-07-16 14:30:50 +02:00
Miroslav Stampar
f28d82c119 Minor patch related to the #4239 2020-06-25 13:02:56 +02:00
Miroslav Stampar
74603c5530 Fixes #4239 2020-06-25 12:55:10 +02:00
Miroslav Stampar
d9e540e8b2 Couple of minor patches 2020-03-04 22:43:50 +01:00