Commit graph

Select branches

Hide pull requests

gh-pages

master

#102

#102

#1029

#1033

#1037

#1053

#1053

#107

#107

#1112

#1186

#1206

#1227

#1227

#1244

#1244

#1246

#1246

#1300

#1300

#1306

#1306

#1323

#1323

#1328

#1330

#1342

#1342

#1351

#1378

#1378

#1402

#1403

#1403

#1414

#1449

#1449

#1469

#1469

#1500

#1535

#1543

#1565

#1565

#1611

#1611

#1614

#1637

#1678

#1681

#1681

#1700

#1700

#1710

#1727

#1727

#1728

#1732

#1733

#1735

#1740

#1762

#1762

#1763

#1763

#1776

#1776

#1795

#1795

#1805

#1805

#1843

#1843

#1856

#1856

#1898

#1922

#1922

#2011

#2086

#2089

#2134

#2138

#2169

#2169

#2170

#2240

#2250

#2289

#2289

#232

#232

#2323

#2347

#2347

#2350

#2350

#2359

#2369

#2369

#2374

#2378

#2389

#2389

#2397

#2397

#2401

#2410

#2411

#2417

#2417

#2418

#2420

#2420

#2439

#2480

#2481

#2481

#2506

#2506

#252

#252

#2537

#2555

#2590

#2597

#2613

#2613

#2616

#2616

#2618

#2620

#2663

#2663

#2666

#2666

#2667

#2667

#269

#269

#2690

#2690

#2692

#2692

#2695

#2728

#2731

#2732

#2732

#2733

#2733

#2734

#2734

#2742

#2742

#2751

#2751

#2752

#2752

#2756

#2756

#2761

#2782

#2791

#2807

#2807

#2817

#2817

#2823

#2823

#284

#284

#2883

#2903

#2903

#2904

#2904

#2905

#2905

#2906

#2906

#2931

#2933

#2933

#2951

#2967

#2992

#3009

#3009

#3087

#3087

#3116

#3153

#3153

#3174

#3174

#3188

#320

#320

#321

#321

#3231

#3233

#3233

#3236

#3267

#3267

#3274

#3274

#3316

#3322

#3323

#3326

#3349

#3350

#3351

#3352

#3372

#3376

#3383

#3396

#3398

#3407

#3414

#3416

#3418

#3423

#3432

#3437

#3442

#3443

#3445

#3458

#3472

#3479

#3482

#3488

#3527

#3536

#3573

#3574

#3575

#3579

#3590

#3609

#3645

#3684

#375

#375

#3802

#3855

#3856

#3881

#3896

#39

#39

#3917

#3952

#3955

#3958

#3959

#3965

#3966

#3969

#3970

#3992

#3996

#400

#400

#4007

#4022

#4032

#4033

#4034

#4039

#4041

#4058

#4059

#4077

#4092

#4098

#4099

#41

#41

#4121

#413

#413

#4145

#4146

#4184

#4192

#4198

#4205

#4216

#4218

#4219

#4229

#4243

#4266

#4267

#4279

#4291

#4305

#4323

#4326

#4327

#4344

#4347

#4365

#4374

#4378

#4379

#4385

#4387

#4427

#4429

#4431

#4460

#4501

#4506

#4509

#4573

#4586

#4619

#4620

#4632

#4632

#4633

#4635

#4643

#4644

#4656

#4657

#466

#466

#4663

#4687

#4691

#4692

#47

#47

#4701

#4732

#4740

#475

#475

#4750

#4815

#4832

#4833

#4852

#4878

#4918

#4937

#4964

#4975

#4983

#4992

#4998

#5006

#5013

#5021

#5032

#5038

#5055

#5059

#506

#506

#507

#507

#5070

#5095

#5109

#5111

#512

#512

#5127

#5128

#5143

#5156

#5172

#5175

#5176

#5189

#5198

#5206

#5215

#5229

#5235

#5253

#5260

#5266

#5273

#5288

#53

#53

#530

#530

#5300

#5302

#5305

#5311

#5345

#5354

#5354

#5355

#5356

#536

#536

#5361

#5366

#5377

#5384

#539

#539

#5393

#5395

#5410

#5436

#5436

#5439

#5439

#544

#544

#5443

#5459

#5475

#5478

#5490

#5497

#5501

#5507

#5551

#5552

#5553

#5554

#5555

#5556

#5569

#5580

#5586

#5588

#5590

#5592

#5597

#5598

#5599

#5603

#5604

#5609

#5617

#5621

#5625

#5649

#5658

#5665

#5667

#5677

#5679

#5685

#5685

#5687

#5688

#5690

#5692

#5693

#5699

#5702

#5706

#5715

#5721

#5736

#5750

#5751

#5760

#5764

#5765

#5777

#578

#5820

#5821

#5824

#5825

#5825

#583

#5840

#5841

#5842

#5842

#5845

#5849

#5849

#5852

#5859

#5860

#5864

#5869

#5871

#5873

#5874

#5877

#5878

#5881

#5883

#5890

#5893

#5910

#5913

#5923

#5930

#5931

#5932

#5940

#5944

#5945

#5952

#5953

#5957

#5959

#5963

#5965

#5967

#5970

#5973

#5980

#5984

#5985

#5995

#5999

#6000

#6001

#6004

#6012

#6013

#6015

#6016

#6018

#6018

#6019

#6021

#6027

#6028

#6048

#6055

#6056

#6060

#6062

#6063

#6064

#6065

#6066

#6067

#6067

#6069

#6071

#6072

#6074

#6079

#6088

#6088

#63

#672

#672

#682

#682

#684

#686

#701

#713

#713

#714

#73

#73

#74

#74

#744

#749

#756

#766

#766

#779

#803

#835

#848

#848

#855

#855

#86

#86

#952

#973

#977

#977

#98

#98

#99

#99

0.19

0.6.2

0.6.3

0.6.4

0.7

0.7-rc1

0.8

0.8-rc2

0.8-rc3

0.8-rc4

0.9

1.0

1.0.10

1.0.11

1.0.12

1.0.3

1.0.4

1.0.5

1.0.6

1.0.7

1.0.8

1.0.9

1.1

1.1.10

1.1.11

1.1.12

1.1.2

1.1.3

1.1.4

1.1.5

1.1.6

1.1.7

1.1.8

1.1.9

1.10

1.10.2

1.10.3

1.10.4

1.10.5

1.10.6

1.10.7

1.2

1.2.10

1.2.11

1.2.12

1.2.2

1.2.3

1.2.4

1.2.5

1.2.6

1.2.7

1.2.8

1.2.9

1.3

1.3.10

1.3.11

1.3.12

1.3.2

1.3.3

1.3.4

1.3.5

1.3.6

1.3.7

1.3.8

1.3.9

1.4

1.4.10

1.4.11

1.4.12

1.4.2

1.4.3

1.4.4

1.4.5

1.4.6

1.4.7

1.4.8

1.4.9

1.5

1.5.10

1.5.11

1.5.12

1.5.2

1.5.3

1.5.4

1.5.5

1.5.6

1.5.7

1.5.8

1.5.9

1.6

1.6.10

1.6.11

1.6.12

1.6.2

1.6.3

1.6.4

1.6.5

1.6.6

1.6.7

1.6.8

1.6.9

1.7

1.7.1

1.7.10

1.7.11

1.7.12

1.7.2

1.7.3

1.7.4

1.7.5

1.7.6

1.7.7

1.7.8

1.7.9

1.8

1.8.1

1.8.10

1.8.11

1.8.12

1.8.2

1.8.3

1.8.4

1.8.5

1.8.6

1.8.7

1.8.8

1.8.9

1.9

1.9.10

1.9.11

1.9.12

1.9.2

1.9.3

1.9.4

1.9.5

1.9.6

1.9.7

1.9.8

1.9.9

Mono Color

• 95030a4652
  Merge 0c3f6f5884 into 579e559c71 tristanlatr 2026-08-04 17:05:03 +03:00
• 9ff151ed6d
  Merge a4227e8333 into 579e559c71 Alexandre ZANNI 2026-08-04 07:24:22 +07:00
• 69c08cc4eb
  Merge 70eb8deb75 into 579e559c71 Sri Charan 2026-07-31 09:28:55 -07:00
• 21c0888821
  Merge cf2d76a863 into 579e559c71 Aridhi Dhia eddine 2026-07-31 09:21:03 -07:00
• 579e559c71 Adding one more data correctness patch master Miroslav Štampar 2026-07-30 19:06:40 +02:00
• 5be154b9e2 Fixes diplaying of non-ASCII chars on Windows OS Miroslav Štampar 2026-07-30 18:04:49 +02:00
• 112356ac5c Minor patch Miroslav Štampar 2026-07-30 16:29:32 +02:00
• 15a39b6ee9 Minor style update Miroslav Štampar 2026-07-29 18:05:59 +02:00
• 3186a4fa31 Fixing CI/CD errors Miroslav Štampar 2026-07-29 17:40:02 +02:00
• 311bf7ce4d Adding support for DNS OOB for H2 and ClickHouse Miroslav Štampar 2026-07-29 16:52:34 +02:00
• 1f42f52980 Trivial just in case update Miroslav Štampar 2026-07-29 16:00:04 +02:00
• ac313f009e Minor patch Miroslav Štampar 2026-07-29 14:30:50 +02:00
• 5fb4b47378 Adding voting mechanism in heavy-jitter environment Miroslav Štampar 2026-07-29 13:03:19 +02:00
• e81a99c4f3 Renaming --murphy-rate to --jitter Miroslav Štampar 2026-07-29 09:05:44 +02:00
• 3a680be4eb Minor patches Miroslav Štampar 2026-07-29 08:20:08 +02:00
• 39d22d26c3 Making boolean inference some more robust against jitter Miroslav Štampar 2026-07-29 02:13:39 +02:00
• 306738539e Making boolean inference more robust against jitter Miroslav Štampar 2026-07-29 01:08:47 +02:00
• 023d85fba8 Minor update Miroslav Štampar 2026-07-29 00:14:38 +02:00
• 2afa92451a Adding new unit test Miroslav Štampar 2026-07-28 23:58:07 +02:00
• 0630556826 Stripping time outliers from the time stats Miroslav Štampar 2026-07-28 23:57:47 +02:00
• 2bf5bd1aa4 Minor improvement of test cases Miroslav Štampar 2026-07-28 22:42:55 +02:00
• e75d75dbe6 Adding a minor comment Miroslav Štampar 2026-07-28 21:58:51 +02:00
• aa42dc041d Fixing if2case tamper corrupting arguments that contain a function call (e.g. IF(...,SLEEP(5),...)) Miroslav Štampar 2026-07-28 21:29:28 +02:00
• 0a6dbd260f Fixing --openapi-only config file rejection and HAR export header-name casing Miroslav Štampar 2026-07-28 21:27:58 +02:00
• 1c869b7430 Fixing core helpers (decodeStringEscape round-trip, joinValue on Python 3, parseUnionPage case-sensitive de-duplication) Miroslav Štampar 2026-07-28 21:27:54 +02:00
• f21a6ab88d Fixing blind enumeration (MS Access listing only first table; MySQL --privileges user labeling) Miroslav Štampar 2026-07-28 21:27:49 +02:00
• 1b09b028ba Fixing tamper unicode/overlong encoding for characters beyond BMP/U+07FF Miroslav Štampar 2026-07-28 21:27:38 +02:00
• 90fe32f386 Some more fixing of CI/CD errors Miroslav Štampar 2026-07-28 18:43:18 +02:00
• d7d06c088d Some more fixing of CI/CD errors Miroslav Štampar 2026-07-28 18:27:23 +02:00
• b0afe6b8d4 Fixing CI/CD errors Miroslav Štampar 2026-07-28 18:17:19 +02:00
• 1dcca2c862 Implementing automatic auto-recover on charset mismatch (E/U) Miroslav Štampar 2026-07-28 18:01:27 +02:00
• ffffe2d0b2 Fixing multi-column blind --search Miroslav Štampar 2026-07-28 16:57:55 +02:00
• 356984929f Fixing --common-columns for -T A,B Miroslav Štampar 2026-07-28 16:42:37 +02:00
• e8a2fc50e0 Fixing limitCondition double-LIMIT Miroslav Štampar 2026-07-28 16:24:22 +02:00
• f992e44fb5 Minor bug fix for --openapi Miroslav Štampar 2026-07-28 14:39:44 +02:00
• 84f0ef8232 Minor corrected patch for MsSQL hash cracking Miroslav Štampar 2026-07-28 13:18:07 +02:00
• 0079412fd2 Massive speed improvement of luanginxmore tamper script Miroslav Štampar 2026-07-28 12:39:07 +02:00
• 154adb1d4d Fixing keyset dump for some cases Miroslav Štampar 2026-07-28 12:19:42 +02:00
• 18e06c6381 Fixing MsSQL FOR JSON handling of NULL values Miroslav Štampar 2026-07-28 11:57:14 +02:00
• 0ab84074f7 Reducing number of requests for --hex in --technique=E Miroslav Štampar 2026-07-28 11:43:24 +02:00
• cd911acb24 Fixing --hex in boolean-based blind Miroslav Štampar 2026-07-28 11:12:51 +02:00
• 70eb8deb75 feat(tamper): add space2tab tamper script for WAF bypass via tab substitution bb 2026-07-27 20:32:35 -04:00
• 5dd91ba8ca Minor patch Miroslav Štampar 2026-07-28 00:48:54 +02:00
• 9fdb704af7 Minor bug fix Miroslav Štampar 2026-07-27 17:32:26 +02:00
• bb9e5dbf44 Fixing bug with --lengths and --null-connection combined Miroslav Štampar 2026-07-27 17:22:17 +02:00
• f43dba3d34 Fixing retrieval of exotic coltypes on MySQL Miroslav Štampar 2026-07-27 14:43:42 +02:00
• fbc3704bf2 Fixing multi-byte corruption Miroslav Štampar 2026-07-27 14:25:54 +02:00
• 762650db07 Fixing --dump for Derby Miroslav Štampar 2026-07-27 14:03:19 +02:00
• 534f873660 Minor update Miroslav Štampar 2026-07-27 13:49:41 +02:00
• 2aeb275ec9 Some more unicode retrieval patchin Miroslav Štampar 2026-07-27 13:34:25 +02:00
• d3cfad6a8d Fixing DB2 boolean-based blind retrieval of non-ASCII chars Miroslav Štampar 2026-07-27 12:52:08 +02:00
• 1d263f22c3 Adding --hex for ClickHouse Miroslav Štampar 2026-07-27 12:05:49 +02:00
• 8b70a392a1 Minor bug fix for bug UTF codepoints retrieval in MsSQL Miroslav Štampar 2026-07-27 11:49:41 +02:00
• ec58f57fa9 Expanding capabilities of MySQL to correctly retrieve UTF8MB4 chars Miroslav Štampar 2026-07-27 11:35:14 +02:00
• 69108bcf01 Minor patch Miroslav Štampar 2026-07-26 23:58:52 +02:00
• dcb2b513c0 Hardening MySQL time-based payloads to not work on Cubrid Miroslav Štampar 2026-07-26 23:18:31 +02:00
• 13e956ca64 Adding Cubrid time-based payloads Miroslav Štampar 2026-07-26 22:47:22 +02:00
• ca608da2f1 Adding Virtuoso error-based payloads Miroslav Štampar 2026-07-26 21:45:07 +02:00
• c75df91eb7 Adding CUBRID error-based payloads Miroslav Štampar 2026-07-26 21:32:26 +02:00
• a1ed35cf3b Adding error-based payloads for InterSystems Cache Miroslav Štampar 2026-07-26 21:15:27 +02:00
• 2f56ad66f4 Making more DBMS specific error-based payloads for H2, Firebird and Vertica Miroslav Štampar 2026-07-26 20:32:29 +02:00
• 07d8d5f731 Fixing MonetDB error-based payload Miroslav Štampar 2026-07-26 18:45:11 +02:00
• 523cdd8d9e Fixing chunked error-based responses for Firebird Miroslav Štampar 2026-07-26 18:03:54 +02:00
• 57dee852e4 Some more fixing CI/CD errors Miroslav Štampar 2026-07-26 14:39:49 +02:00
• bf138e800a Fixing CI/CD errors Miroslav Štampar 2026-07-26 14:35:35 +02:00
• d2bcb39763 Improvement of error-based vectors (e.g. SQLite error vector added) Miroslav Štampar 2026-07-26 14:23:14 +02:00
• 929dc581ce
  Merge 4d259790cd into edbfca0b8e Jason Juntunen 2026-07-26 00:12:18 -04:00
• edbfca0b8e Adding switch --jwt Miroslav Štampar 2026-07-25 22:40:12 +02:00
• b2f98b61ec Improved crawling Miroslav Štampar 2026-07-25 19:10:58 +02:00
• 5a5aebfc6e Hardening Brotli/Zstandard decoding against hostile input Miroslav Štampar 2026-07-25 09:59:53 +02:00
• a4c983ae06 Adding native Brotli (br) and Zstandard (zstd) response decoding Miroslav Štampar 2026-07-25 00:37:19 +02:00
• ab881132b8 Hardening Negotiate/Kerberos authentication (#3404) Miroslav Štampar 2026-07-25 00:24:52 +02:00
• 1bd1b457d7 Adding Negotiate/Kerberos authentication (#3404) Miroslav Štampar 2026-07-24 22:26:43 +02:00
• 2d9e9ed959 Implementing support for 429 (rate limit) Miroslav Štampar 2026-07-24 15:17:05 +02:00
• 075d009bb7 Adding switch --mine-params Miroslav Štampar 2026-07-24 14:27:05 +02:00
• ffe124f3e0 Some more fixing CI/CD errors Miroslav Štampar 2026-07-23 13:08:18 +02:00
• fcec8ef89e Fixing CI/CD errors Miroslav Štampar 2026-07-23 12:56:24 +02:00
• f129d3ac76 Fixing CI/CD errors Miroslav Štampar 2026-07-23 12:21:10 +02:00
• 36ebce6935 Tons of stabilization of non-SQLi techniques Miroslav Štampar 2026-07-23 12:15:45 +02:00
• e6a5e8ff05 More style changes for Esperanto DBMS engine Miroslav Štampar 2026-07-22 01:48:54 +02:00
• c294098cc1 Minor style changes for Esperanto DBMS engine Miroslav Štampar 2026-07-22 01:31:11 +02:00
• 272d1447d7 Fixing CI/CD errors Miroslav Štampar 2026-07-22 01:10:06 +02:00
• a5a7f7203a Tons of improvements for Esperanto engine Miroslav Štampar 2026-07-22 01:06:57 +02:00
• bdf1901a43 Minor update Miroslav Štampar 2026-07-21 15:00:09 +02:00
• 016c388a13 Expanding Esperanto engine with more log2 comparators Miroslav Štampar 2026-07-21 14:04:30 +02:00
• e8512c8c13 Expanding Esperanto engine with SIGN Miroslav Štampar 2026-07-21 13:53:45 +02:00
• 9925adf799 Adding tamper script sign Miroslav Štampar 2026-07-21 13:33:53 +02:00
• 0cf4c641a1 Adding auto-between on > filtering Miroslav Štampar 2026-07-21 13:16:40 +02:00
• a7c63afdd8 Fixing H2 file write Miroslav Štampar 2026-07-21 12:34:18 +02:00
• 99ec51f86d Minor bug fix Miroslav Štampar 2026-07-21 12:23:02 +02:00
• d381a32c94 Fixing Sybase queries Miroslav Štampar 2026-07-21 11:54:57 +02:00
• 721c9d9d70 Fixing Derby queries Miroslav Štampar 2026-07-21 11:44:37 +02:00
• a22f782db5 Fixing DB2 truncation Miroslav Štampar 2026-07-21 11:35:40 +02:00
• 26e13122ca Fixing #6087 Miroslav Štampar 2026-07-21 11:34:18 +02:00
• 002828a734 Some more fixing of query workflow Miroslav Štampar 2026-07-21 11:19:18 +02:00
• 6b8de6704c Some more fixing of queries Miroslav Štampar 2026-07-21 10:50:13 +02:00
• 4a0308dd8d Fixing some Altibase and Sybase queries Miroslav Štampar 2026-07-21 10:25:25 +02:00
• 6a4ae1fa96 Fixing some MsSQL enumeration bugs Miroslav Štampar 2026-07-21 10:09:54 +02:00
• 5848fa4f1a Bug fix for MsSQL (removing it from PLUS_ONE_DBMSES) Miroslav Štampar 2026-07-21 09:56:00 +02:00
• 6d9322bc74 Trivial patch Miroslav Štampar 2026-07-21 09:06:10 +02:00