Commit graph

10974 commits

Author SHA1 Message Date
Miroslav Štampar
154adb1d4d Fixing keyset dump for some cases 2026-07-28 12:19:42 +02:00
Miroslav Štampar
18e06c6381 Fixing MsSQL FOR JSON handling of NULL values 2026-07-28 11:57:14 +02:00
Miroslav Štampar
0ab84074f7 Reducing number of requests for --hex in --technique=E 2026-07-28 11:43:24 +02:00
Miroslav Štampar
cd911acb24 Fixing --hex in boolean-based blind 2026-07-28 11:12:51 +02:00
Miroslav Štampar
5dd91ba8ca Minor patch 2026-07-28 00:48:54 +02:00
Miroslav Štampar
9fdb704af7 Minor bug fix 2026-07-27 17:32:26 +02:00
Miroslav Štampar
bb9e5dbf44 Fixing bug with --lengths and --null-connection combined 2026-07-27 17:22:17 +02:00
Miroslav Štampar
f43dba3d34 Fixing retrieval of exotic coltypes on MySQL
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-27 14:43:42 +02:00
Miroslav Štampar
fbc3704bf2 Fixing multi-byte corruption 2026-07-27 14:25:54 +02:00
Miroslav Štampar
762650db07 Fixing --dump for Derby 2026-07-27 14:03:19 +02:00
Miroslav Štampar
534f873660 Minor update 2026-07-27 13:49:41 +02:00
Miroslav Štampar
2aeb275ec9 Some more unicode retrieval patchin 2026-07-27 13:34:25 +02:00
Miroslav Štampar
d3cfad6a8d Fixing DB2 boolean-based blind retrieval of non-ASCII chars 2026-07-27 12:52:08 +02:00
Miroslav Štampar
1d263f22c3 Adding --hex for ClickHouse 2026-07-27 12:05:49 +02:00
Miroslav Štampar
8b70a392a1 Minor bug fix for bug UTF codepoints retrieval in MsSQL 2026-07-27 11:49:41 +02:00
Miroslav Štampar
ec58f57fa9 Expanding capabilities of MySQL to correctly retrieve UTF8MB4 chars 2026-07-27 11:35:14 +02:00
Miroslav Štampar
69108bcf01 Minor patch 2026-07-26 23:58:52 +02:00
Miroslav Štampar
dcb2b513c0 Hardening MySQL time-based payloads to not work on Cubrid 2026-07-26 23:18:31 +02:00
Miroslav Štampar
13e956ca64 Adding Cubrid time-based payloads 2026-07-26 22:47:22 +02:00
Miroslav Štampar
ca608da2f1 Adding Virtuoso error-based payloads
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-26 21:45:07 +02:00
Miroslav Štampar
c75df91eb7 Adding CUBRID error-based payloads 2026-07-26 21:32:26 +02:00
Miroslav Štampar
a1ed35cf3b Adding error-based payloads for InterSystems Cache 2026-07-26 21:15:27 +02:00
Miroslav Štampar
2f56ad66f4 Making more DBMS specific error-based payloads for H2, Firebird and Vertica 2026-07-26 20:32:29 +02:00
Miroslav Štampar
07d8d5f731 Fixing MonetDB error-based payload 2026-07-26 18:45:11 +02:00
Miroslav Štampar
523cdd8d9e Fixing chunked error-based responses for Firebird 2026-07-26 18:03:54 +02:00
Miroslav Štampar
57dee852e4 Some more fixing CI/CD errors
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-26 14:39:49 +02:00
Miroslav Štampar
bf138e800a Fixing CI/CD errors 2026-07-26 14:35:35 +02:00
Miroslav Štampar
d2bcb39763 Improvement of error-based vectors (e.g. SQLite error vector added) 2026-07-26 14:23:14 +02:00
Miroslav Štampar
edbfca0b8e Adding switch --jwt
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 22:40:12 +02:00
Miroslav Štampar
b2f98b61ec Improved crawling
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 19:10:58 +02:00
Miroslav Štampar
5a5aebfc6e Hardening Brotli/Zstandard decoding against hostile input
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 09:59:53 +02:00
Miroslav Štampar
a4c983ae06 Adding native Brotli (br) and Zstandard (zstd) response decoding
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 00:42:27 +02:00
Miroslav Štampar
ab881132b8 Hardening Negotiate/Kerberos authentication (#3404) 2026-07-25 00:24:52 +02:00
Miroslav Štampar
1bd1b457d7 Adding Negotiate/Kerberos authentication (#3404) 2026-07-24 22:26:43 +02:00
Miroslav Štampar
2d9e9ed959 Implementing support for 429 (rate limit)
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-24 15:17:05 +02:00
Miroslav Štampar
075d009bb7 Adding switch --mine-params 2026-07-24 14:27:05 +02:00
Miroslav Štampar
ffe124f3e0 Some more fixing CI/CD errors
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-23 13:08:18 +02:00
Miroslav Štampar
fcec8ef89e Fixing CI/CD errors 2026-07-23 12:56:24 +02:00
Miroslav Štampar
f129d3ac76 Fixing CI/CD errors 2026-07-23 12:21:10 +02:00
Miroslav Štampar
36ebce6935 Tons of stabilization of non-SQLi techniques 2026-07-23 12:15:45 +02:00
Miroslav Štampar
e6a5e8ff05 More style changes for Esperanto DBMS engine
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-07-22 01:48:54 +02:00
Miroslav Štampar
c294098cc1 Minor style changes for Esperanto DBMS engine 2026-07-22 01:31:11 +02:00
Miroslav Štampar
272d1447d7 Fixing CI/CD errors 2026-07-22 01:10:06 +02:00
Miroslav Štampar
a5a7f7203a Tons of improvements for Esperanto engine 2026-07-22 01:06:57 +02:00
Miroslav Štampar
bdf1901a43 Minor update 2026-07-21 15:00:09 +02:00
Miroslav Štampar
016c388a13 Expanding Esperanto engine with more log2 comparators 2026-07-21 14:04:30 +02:00
Miroslav Štampar
e8512c8c13 Expanding Esperanto engine with SIGN 2026-07-21 13:53:45 +02:00
Miroslav Štampar
9925adf799 Adding tamper script sign 2026-07-21 13:33:53 +02:00
Miroslav Štampar
0cf4c641a1 Adding auto-between on > filtering 2026-07-21 13:16:40 +02:00
Miroslav Štampar
a7c63afdd8 Fixing H2 file write 2026-07-21 12:34:18 +02:00