Commit graph

6603 commits

Author SHA1 Message Date
Miroslav Štampar
a1ed35cf3b Adding error-based payloads for InterSystems Cache 2026-07-26 21:15:27 +02:00
Miroslav Štampar
2f56ad66f4 Making more DBMS specific error-based payloads for H2, Firebird and Vertica 2026-07-26 20:32:29 +02:00
Miroslav Štampar
07d8d5f731 Fixing MonetDB error-based payload 2026-07-26 18:45:11 +02:00
Miroslav Štampar
523cdd8d9e Fixing chunked error-based responses for Firebird 2026-07-26 18:03:54 +02:00
Miroslav Štampar
57dee852e4 Some more fixing CI/CD errors
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-26 14:39:49 +02:00
Miroslav Štampar
bf138e800a Fixing CI/CD errors 2026-07-26 14:35:35 +02:00
Miroslav Štampar
d2bcb39763 Improvement of error-based vectors (e.g. SQLite error vector added) 2026-07-26 14:23:14 +02:00
Miroslav Štampar
edbfca0b8e Adding switch --jwt
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 22:40:12 +02:00
Miroslav Štampar
b2f98b61ec Improved crawling
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 19:10:58 +02:00
Miroslav Štampar
5a5aebfc6e Hardening Brotli/Zstandard decoding against hostile input
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 09:59:53 +02:00
Miroslav Štampar
a4c983ae06 Adding native Brotli (br) and Zstandard (zstd) response decoding
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-25 00:42:27 +02:00
Miroslav Štampar
1bd1b457d7 Adding Negotiate/Kerberos authentication (#3404) 2026-07-24 22:26:43 +02:00
Miroslav Štampar
2d9e9ed959 Implementing support for 429 (rate limit)
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-24 15:17:05 +02:00
Miroslav Štampar
075d009bb7 Adding switch --mine-params 2026-07-24 14:27:05 +02:00
Miroslav Štampar
ffe124f3e0 Some more fixing CI/CD errors
Some checks are pending
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
2026-07-23 13:08:18 +02:00
Miroslav Štampar
fcec8ef89e Fixing CI/CD errors 2026-07-23 12:56:24 +02:00
Miroslav Štampar
f129d3ac76 Fixing CI/CD errors 2026-07-23 12:21:10 +02:00
Miroslav Štampar
36ebce6935 Tons of stabilization of non-SQLi techniques 2026-07-23 12:15:45 +02:00
Miroslav Štampar
e6a5e8ff05 More style changes for Esperanto DBMS engine
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-07-22 01:48:54 +02:00
Miroslav Štampar
c294098cc1 Minor style changes for Esperanto DBMS engine 2026-07-22 01:31:11 +02:00
Miroslav Štampar
272d1447d7 Fixing CI/CD errors 2026-07-22 01:10:06 +02:00
Miroslav Štampar
a5a7f7203a Tons of improvements for Esperanto engine 2026-07-22 01:06:57 +02:00
Miroslav Štampar
bdf1901a43 Minor update 2026-07-21 15:00:09 +02:00
Miroslav Štampar
016c388a13 Expanding Esperanto engine with more log2 comparators 2026-07-21 14:04:30 +02:00
Miroslav Štampar
e8512c8c13 Expanding Esperanto engine with SIGN 2026-07-21 13:53:45 +02:00
Miroslav Štampar
9925adf799 Adding tamper script sign 2026-07-21 13:33:53 +02:00
Miroslav Štampar
0cf4c641a1 Adding auto-between on > filtering 2026-07-21 13:16:40 +02:00
Miroslav Štampar
a7c63afdd8 Fixing H2 file write 2026-07-21 12:34:18 +02:00
Miroslav Štampar
99ec51f86d Minor bug fix 2026-07-21 12:23:02 +02:00
Miroslav Štampar
d381a32c94 Fixing Sybase queries 2026-07-21 11:54:57 +02:00
Miroslav Štampar
721c9d9d70 Fixing Derby queries 2026-07-21 11:44:37 +02:00
Miroslav Štampar
a22f782db5 Fixing DB2 truncation 2026-07-21 11:35:40 +02:00
Miroslav Štampar
26e13122ca Fixing #6087 2026-07-21 11:34:18 +02:00
Miroslav Štampar
002828a734 Some more fixing of query workflow 2026-07-21 11:19:18 +02:00
Miroslav Štampar
6b8de6704c Some more fixing of queries 2026-07-21 10:50:13 +02:00
Miroslav Štampar
4a0308dd8d Fixing some Altibase and Sybase queries 2026-07-21 10:25:25 +02:00
Miroslav Štampar
6a4ae1fa96 Fixing some MsSQL enumeration bugs 2026-07-21 10:09:54 +02:00
Miroslav Štampar
5848fa4f1a Bug fix for MsSQL (removing it from PLUS_ONE_DBMSES) 2026-07-21 09:56:00 +02:00
Miroslav Štampar
6d9322bc74 Trivial patch 2026-07-21 09:06:10 +02:00
Miroslav Štampar
e589936982 Adding some guard blocks when people fool around with their environment 2026-07-20 22:19:57 +02:00
Miroslav Štampar
37771f0d25 Minor update
Some checks failed
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
2026-07-20 17:39:52 +02:00
Miroslav Štampar
2626e50190 Adding boundarycheck tool 2026-07-20 17:19:28 +02:00
Miroslav Štampar
3238415d48 Removing some junk boundaries 2026-07-20 17:02:29 +02:00
Miroslav Štampar
0f5ba41535 Adding RAISERROR MsSQL payload 2026-07-20 14:08:16 +02:00
Miroslav Štampar
67574b8047 Minor improvement of payloads 2026-07-20 13:40:19 +02:00
Miroslav Štampar
6ce5d7d7e4 Adding some more boundaries 2026-07-20 12:37:16 +02:00
Miroslav Štampar
fc9b3c9b67 Fixing some more wrong ptype values in boundaries.xml 2026-07-20 12:22:04 +02:00
Miroslav Štampar
b0408f1bd8 Fixing some wrong ptype values in boundaries.xml 2026-07-20 11:44:50 +02:00
Miroslav Štampar
adc43552d6 Compressing common identifiers list 2026-07-20 11:11:29 +02:00
Miroslav Štampar
d1eb861d72 Adding some more inference tests 2026-07-20 10:57:19 +02:00