Commit graph

1037 commits

Author SHA1 Message Date
Miroslav Štampar
4df83fe737 Fix for user's LIMIT being ignored by UNION JSON aggregation (e.g. --sql-query) 2026-11-12 14:53:41 +01:00
Miroslav Štampar
b85cd4cc15 Fix for SSTI --os-cmd reporting fabricated output on shell-less engines (e.g. Freemarker) 2026-11-12 14:46:02 +01:00
Miroslav Štampar
e85b1bbd9d Fix for leftover ASC/DESC when stripping ORDER BY in UNION technique 2026-11-12 12:57:40 +01:00
Miroslav Štampar
eda9b00185 Fix for interrupted --first/--last corrupting stored value 2026-11-12 11:50:33 +01:00
Miroslav Štampar
c8422bf1f6 Fix for --hex with UNION JSON aggregation (SQLite, PgSQL, Oracle, MSSQL) 2026-11-12 11:50:33 +01:00
Miroslav Štampar
6e06114947 Fixes #6157
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-10-25 16:29:02 +01:00
Miroslav Štampar
d0ad9b2e34 Adding cross-DBMS security configuration audit (--audit) 2026-10-19 18:34:39 +02:00
Miroslav Štampar
516f55935c Implements #4973 2026-10-18 22:14:12 +02:00
Miroslav Štampar
a56a6b1f25 Fixes #6107 2026-09-07 12:03:02 +02:00
Miroslav Štampar
848ba68ccf Couple of fixes 2026-08-17 22:20:42 +02:00
Miroslav Štampar
bdf3e09315 Adding support for multi-bit boolean extraction 2026-08-16 23:11:49 +02:00
Miroslav Štampar
90b14df46c Minor update 2026-08-11 23:07:22 +02:00
Miroslav Štampar
08b986d40c Faster --odata 2026-08-11 22:43:40 +02:00
Miroslav Štampar
f9a45c6755 Patch related to #6093 2026-08-10 13:42:38 +02:00
Miroslav Štampar
dd57fd91e2 Adding switches --odata and --sparql 2026-08-09 11:04:44 +02:00
Miroslav Štampar
7d2c33cd32 Minor patch 2026-08-08 01:07:07 +02:00
Miroslav Štampar
aa8d9b9841 Patching non-SQLi techniques regarding reflective values 2026-08-08 00:55:37 +02:00
Miroslav Štampar
881d2e8f90 Adding switch --xslt 2026-08-08 00:37:32 +02:00
Miroslav Štampar
cb8298d55a Couple of trivial bug fixes 2026-08-04 17:02:57 +02:00
Miroslav Štampar
3186a4fa31 Fixing CI/CD errors 2026-07-29 17:40:02 +02:00
Miroslav Štampar
311bf7ce4d Adding support for DNS OOB for H2 and ClickHouse 2026-07-29 16:52:34 +02:00
Miroslav Štampar
1f42f52980 Trivial just in case update 2026-07-29 16:00:04 +02:00
Miroslav Štampar
5fb4b47378 Adding voting mechanism in heavy-jitter environment
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-29 13:03:19 +02:00
Miroslav Štampar
39d22d26c3 Making boolean inference some more robust against jitter
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-29 02:13:39 +02:00
Miroslav Štampar
306738539e Making boolean inference more robust against jitter 2026-07-29 01:08:47 +02:00
Miroslav Štampar
18e06c6381 Fixing MsSQL FOR JSON handling of NULL values 2026-07-28 11:57:14 +02:00
Miroslav Štampar
0ab84074f7 Reducing number of requests for --hex in --technique=E 2026-07-28 11:43:24 +02:00
Miroslav Štampar
cd911acb24 Fixing --hex in boolean-based blind 2026-07-28 11:12:51 +02:00
Miroslav Štampar
ec58f57fa9 Expanding capabilities of MySQL to correctly retrieve UTF8MB4 chars 2026-07-27 11:35:14 +02:00
Miroslav Štampar
523cdd8d9e Fixing chunked error-based responses for Firebird 2026-07-26 18:03:54 +02:00
Miroslav Štampar
edbfca0b8e Adding switch --jwt
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 22:40:12 +02:00
Miroslav Štampar
fcec8ef89e Fixing CI/CD errors 2026-07-23 12:56:24 +02:00
Miroslav Štampar
f129d3ac76 Fixing CI/CD errors 2026-07-23 12:21:10 +02:00
Miroslav Štampar
36ebce6935 Tons of stabilization of non-SQLi techniques 2026-07-23 12:15:45 +02:00
Miroslav Štampar
adc43552d6 Compressing common identifiers list 2026-07-20 11:11:29 +02:00
Miroslav Štampar
09389aadeb Fixing 3-byte char inference 2026-07-20 10:46:05 +02:00
Miroslav Štampar
b38eb79ed0 Implementing support for Struts2 into --ssti 2026-07-17 09:56:32 +02:00
Miroslav Štampar
40ccd801dc Fixing desync error from SLOW_ORDER_COUNT_THRESHOLD 2026-07-11 09:09:08 +02:00
Miroslav Štampar
1cdc69eb0e Minor update 2026-07-10 19:04:22 +02:00
Miroslav Štampar
b8fb645db0 Minor patches 2026-07-10 13:27:47 +02:00
Miroslav Štampar
f4c4025bdb Minor patch 2026-07-10 12:51:25 +02:00
Miroslav Štampar
986933e709 Minor patches 2026-07-10 12:04:08 +02:00
Miroslav Štampar
2fec735b13 Minor patches 2026-07-10 11:36:40 +02:00
Miroslav Štampar
d0f16b284d Adding support for --hql 2026-07-10 10:38:20 +02:00
Miroslav Štampar
346c9d9f03 Minor patch
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-10 07:58:07 +02:00
Miroslav Štampar
5893f069ae Enabling jsonAgg in partial union cases 2026-07-09 08:15:35 +02:00
Miroslav Štampar
d8cc2ae93b Minor update 2026-07-08 19:26:36 +02:00
Miroslav Štampar
8dda2b42a5 Minor patch 2026-07-08 19:09:10 +02:00
Miroslav Štampar
f46c463eba Adding support for --timeless HTTP2 technique 2026-07-08 01:58:36 +02:00
Miroslav Štampar
50ff3debe5 General boolean inference improvements
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-06 12:02:22 +02:00