Commit graph

293 commits

Author SHA1 Message Date
Piyush satyarthi
cb5216564a
Close leaked sqlite3 connections (ResourceWarning on Python 3.13+) (#6181)
Python 3.13+ reports sqlite3 connections that are garbage collected
without being closed. The unit tests print a run of
"ResourceWarning: unclosed database" lines on Linux/CPython 3.14:

- SQLAlchemy.close() only returned its connection to the engine's
  pool, so the underlying DBAPI connection (e.g. sqlite3 for
  '-d sqlite://...') stayed open. Dispose the engine on close.
- vulnTest() used "with sqlite3.connect(...)", which commits but does
  not close the connection. Use contextlib.closing().
- test_multibit and test_sqlalchemy never closed what they opened.

Co-authored-by: PiyushSatyarthi <244159432+PiyushSatyarthi@users.noreply.github.com>
2026-11-12 09:46:10 +01:00
Miroslav Štampar
d0ad9b2e34 Adding cross-DBMS security configuration audit (--audit) 2026-10-19 18:34:39 +02:00
Miroslav Štampar
e90078184d Implements --links (#21) 2026-10-19 10:19:34 +02:00
Miroslav Štampar
559d6f4543 Increasing the GraphQL timeout in tests
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-10-18 22:37:59 +02:00
Miroslav Štampar
c36d056481 Minor patch for shellExec (adding timeout)
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-09-25 17:01:07 +02:00
Miroslav Štampar
dd57fd91e2 Adding switches --odata and --sparql 2026-08-09 11:04:44 +02:00
Miroslav Štampar
fb5339d783 Fixing CI/CD errors 2026-08-08 08:27:00 +02:00
Miroslav Štampar
aa8d9b9841 Patching non-SQLi techniques regarding reflective values 2026-08-08 00:55:37 +02:00
Miroslav Štampar
881d2e8f90 Adding switch --xslt 2026-08-08 00:37:32 +02:00
Miroslav Štampar
6acc970801 Improved mechanism for --proof 2026-08-07 17:04:32 +02:00
Miroslav Štampar
edbfca0b8e Adding switch --jwt
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 22:40:12 +02:00
Miroslav Štampar
2d9e9ed959 Implementing support for 429 (rate limit)
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-24 15:17:05 +02:00
Miroslav Štampar
075d009bb7 Adding switch --mine-params 2026-07-24 14:27:05 +02:00
Miroslav Štampar
ffe124f3e0 Some more fixing CI/CD errors
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-23 13:08:18 +02:00
Miroslav Štampar
43c6574056 Fixing CI/CD errors 2026-07-16 18:33:39 +02:00
Miroslav Štampar
f4c4025bdb Minor patch 2026-07-10 12:51:25 +02:00
Miroslav Štampar
d0f16b284d Adding support for --hql 2026-07-10 10:38:20 +02:00
Miroslav Štampar
5893f069ae Enabling jsonAgg in partial union cases 2026-07-09 08:15:35 +02:00
Miroslav Štampar
fd009027f7 Adding --payload-lint to CI/CD 2026-07-08 17:51:37 +02:00
Miroslav Štampar
291abb0ee8 Minor update 2026-07-08 12:32:05 +02:00
Miroslav Štampar
50ff3debe5 General boolean inference improvements
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-06 12:02:22 +02:00
Miroslav Štampar
3e7d064cc9 Adding some more tests
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-07-01 14:59:34 +02:00
Miroslav Štampar
e0269acc0d Minor update 2026-06-30 14:59:32 +02:00
Miroslav Štampar
87ba03815b Fixing CI/CD pipeline
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-06-29 23:38:34 +02:00
Miroslav Štampar
fd7eaf107b Minor fix 2026-06-29 23:36:02 +02:00
Miroslav Štampar
820efa7a8a Adding switch --ssti 2026-06-29 11:43:10 +02:00
Miroslav Štampar
8ff5d3811a Adding switch --xpath 2026-06-29 00:29:27 +02:00
Miroslav Štampar
771d4cfb66 Fixing CI/CD failure 2026-06-28 09:36:32 +02:00
Miroslav Štampar
e8162d314a Adding switch --ldap
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-06-28 01:36:38 +02:00
Miroslav Štampar
7a95103122 Fixing CI/CD issue
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-06-27 19:43:29 +02:00
Miroslav Štampar
e47b976f5a Fixing CI/CD issue 2026-06-27 19:34:20 +02:00
Miroslav Štampar
f6912fc921 Adding support for GraphQL (--graphql) 2026-06-27 19:23:30 +02:00
Miroslav Štampar
2893fd5c4d Adding support for NoSQL injection
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-06-24 22:57:09 +02:00
Miroslav Štampar
87a3a2e51c Minor fixes 2026-06-22 22:11:16 +02:00
Miroslav Štampar
9d653d2d50 Making Keep-Alive on by default
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-06-21 01:59:23 +02:00
Miroslav Štampar
497d3772bd Adding keyset (seek) pagination for faster blind table dumps
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-06-20 00:00:40 +02:00
Miroslav Štampar
8de9c5899d Couple of improvements 2026-06-18 17:46:40 +02:00
Miroslav Štampar
1404133538 Add --prove, opt-in --auto-tamper WAF bypass, and blindbinary/infoschema2innodb tampers 2026-06-17 15:58:08 +02:00
Miroslav Štampar
a0cbfba9bd Adding support for better JSON comparison 2026-06-16 10:02:44 +02:00
Miroslav Štampar
91bf58b54e Adding --api-test for CI/CD 2026-06-15 16:58:57 +02:00
Miroslav Štampar
48b915b5ee Minor update 2026-06-15 01:20:48 +02:00
Your Name
e40a9a3b87 Fixing the CI/CD 2026-04-23 16:40:11 +02:00
Miroslav Stampar
3d70e2511b Trivial update 2026-01-12 20:24:13 +01:00
Miroslav Stampar
a995e1afb4 Minor update of vuln testing 2026-01-10 11:37:39 +01:00
Miroslav Stampar
363a405fa0 Minor update 2026-01-08 23:59:47 +01:00
Miroslav Stampar
e2534b3c36 Adding test check for --titles 2026-01-08 23:47:06 +01:00
Miroslav Stampar
65ce6ba4c9 Implementing CSRF case into vuln testing 2026-01-08 23:31:40 +01:00
Miroslav Stampar
603295e68d Minor update of vulnserver testing 2026-01-08 20:49:17 +01:00
Miroslav Stampar
f69a63b2b6 Year bump 2026-01-01 19:12:07 +01:00
Miroslav Stampar
d7be168f79 Minor update 2025-12-30 23:13:04 +01:00