BishopFox/sj
1
0 Fork 0
mirror of https://github.com/BishopFox/sj.git synced 2026-11-07 10:26:01 -10:00
Code Issues Packages Projects Releases 1 Wiki Activity
176 Commits 1 Branch 68 Tags
main
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Tony West e1aea16c6e Incremented version string 2026-10-29 21:26:40 -04:00
Tony West e5796ed66a Merge pull request #60 from BishopFox/dependabot/go_modules/github.com/getkin/kin-openapi-0.149.0 
chore(deps): bump github.com/getkin/kin-openapi from 0.144.0 to 0.149.0
 2026-10-29 21:25:55 -04:00
Tony West 9111e90a20 Updated release section to include mention of joro 2026-10-02 16:56:27 -04:00
Tony West 04e0b22c47 Added release section to enable draft releases 2026-10-02 16:49:02 -04:00
Tony West 3c8a2d3c3a Incremented version string 2026-10-02 16:44:16 -04:00
Tony West 64470d1995 fix: Degrade instead of dying on multiple/relative servers; remove package die() 2026-10-02 00:06:21 -04:00
Tony West 4e9ae71caa fix: Derive command mode from cobra instead of os.Args[1] 2026-10-01 23:39:31 -04:00
Tony West 85c4a44421 fix: Read per-operation security requirements, ignored until now 2026-10-01 23:02:59 -04:00
Tony West 023e210b75 fix: Apply bearer auth from spec-compliant http/bearer schemes 2026-10-01 20:53:08 -04:00
Tony West 5f83f1cb26 fix: Read Swagger 2.0 securityDefinitions and apply apiKey query params 2026-10-01 20:41:21 -04:00
Tony West 6d262a369d fix: Keep all declared request body content types instead of last-wins 2026-10-01 20:29:13 -04:00
Tony West 97eab8c4ba Updated documentation 2026-09-29 18:16:03 -04:00
Tony West 6c7ee7d7da fix: Send declared request bodies on every method, not just POST 2026-09-29 18:15:57 -04:00
Tony West f2b722ca55 fix: Send in:header, in:cookie, and in:formData parameters, not just render them in curl 2026-09-29 17:34:12 -04:00
Tony West b0a281ccf1 Updated documentation 2026-09-29 16:58:39 -04:00
Tony West c9f4472553 fix: Escape parameter values in URLs and generated curl commands 2026-09-29 16:58:32 -04:00
Tony West 001f8f16b1 fix: Scope the schema cycle guard to the current ref path so sibling expand 2026-09-29 14:50:45 -04:00
Tony West 31aa3b3f2f fix: Merge allOf subschemas into the schema node instead of replacing it 2026-09-29 14:32:20 -04:00
Tony West 186841c2ba fix: Omit the API title and description from output when -q is used 2026-09-29 13:47:59 -04:00
Tony West 7db065923a fix: Honor lowercase -H keys and never send an empty parameter value 2026-09-29 12:46:21 -04:00
Tony West 4f256efca6 Incremented version string 2026-09-11 21:44:23 -04:00
Tony West 48c4d83f54 fix: Moved remaining diagnostic output to stderr so stdout stays pipeable 2026-09-11 21:44:15 -04:00
Tony West 365f68696f Merge pull request #59 from emilloc/fix/auth-stderr 
fix: send authentication diagnostics to stderr
 2026-09-11 21:36:58 -04:00
Tony West bc708d69f8 Incremented version string 2026-08-24 17:34:11 -04:00
Tony West 56346e759e Merge pull request #58 from BishopFox/dependabot/go_modules/github.com/getkin/kin-openapi-0.144.0 
Bump github.com/getkin/kin-openapi from 0.132.0 to 0.144.0
 2026-08-24 17:33:38 -04:00
Tony West 7d9fa54a58 Incremented version string 2026-07-22 08:52:23 -04:00
Tony West 09a1183e6f Added more discoverability features and basic WAF detection to the brute command 2026-07-22 08:52:05 -04:00
Tony West 90e9c78d9a Incremented version string 2026-07-09 11:30:07 -04:00
Tony West 3f99ffb48c Added docker support for releases 2026-07-09 11:29:51 -04:00
Tony West 331bb1a05c Incremented version string 2026-05-13 19:31:55 -04:00
Tony West 3c2a3b807d added fix to auto-extract JS-wrapped specs in automate/endpoints/prepare; fixed POST body leak, Content-Type carryover, and multipart boundary issues 2026-05-13 19:31:22 -04:00
Tony West 7ef8abdb8e Incremented version string 2026-05-13 14:47:17 -04:00
Tony West f1f9e19422 Improved detection for JS specs wrapped in swaggerDoc/spec/openapi 2026-05-13 14:46:47 -04:00
Tony West 0d6776b758 Incremented version string 2026-03-24 16:00:16 -04:00
Tony West 8f4e4a5d9f Fixes #55 2026-03-24 16:00:07 -04:00
Tony West 55baa79785 Incremented version string 2026-03-20 11:37:19 -04:00
Tony West 5bdafb64d8 Merge pull request #54 from bsysop/main 
Adds new features from pull request
 2026-03-20 11:35:58 -04:00
Tony West 1eda960182 Fixed bug where custom headers were not sent with the brute command 2026-03-13 00:13:54 -04:00
Tony West e805a7d190 Incremented version string 2026-02-27 22:11:10 -05:00
Tony West 18b20ad476 Merge pull request #52 from aringo-bf/feature/ref-resolution-hardening 
Added several features/tests/bug fixes.
 2026-02-27 22:10:01 -05:00
Tony West 5115b3cba3 Apply suggestions from code review 2026-02-27 22:06:13 -05:00
Tony West 122d9d0114 Fixed sorting to ensure output is consistent across runs 2026-02-26 11:34:23 -05:00
Tony West ac50c4da75 Fixed typo in usage example 2026-02-26 11:14:19 -05:00
Tony West 6eea0f8a77 Improved output and removed logrus dependency 2026-02-26 11:10:04 -05:00
Tony West bdea5822e8 Incremented version string 2026-02-26 10:34:50 -05:00
Tony West 7bb228d81c Fixed infinite loop when encountering circular redirects 2026-02-26 10:18:37 -05:00
Tony West 3258ca341f Fixed missing length check issue 2026-02-26 10:12:36 -05:00
Tony West 58d4e91760 Fixed variable shadowing issue 2026-02-26 10:05:56 -05:00
Tony West 1f5a946011 Converted status code logic to switch for readability 2026-02-26 10:02:32 -05:00
Tony West 143fdfda1b Merge pull request #50 from aringo-bf/fix/httpbasic-segfault-and-quiet-flag 
Fix HTTPBasic segfault and --quiet flag issues
 2026-02-26 09:10:36 -05:00
Tony West 4c466112ee Added custom date, email, and URL flags 2026-02-03 17:10:52 -05:00
Tony West 1195ff7fbf Incremented version string 2026-02-03 13:09:21 -05:00
Tony West bd3265d0a4 Improved handling of schema references 2026-02-03 13:08:53 -05:00
Tony West d9fac2e9fe Updated version string 2026-01-28 14:30:49 -05:00
Tony West 10fe0376c0 Added the ability to customize the value used for testing identified string parameters 2026-01-28 14:30:25 -05:00
Tony West baf4ef6c51 Added prioritized list of endpoints for the brute command and fixed base path handling for v2 2026-01-15 18:37:16 -05:00
Tony West 8e2e5fbebc Fixed improper handling of base path 2026-01-15 10:54:22 -05:00
Tony West a77f9f46bb Merge pull request #49 from altperfect/main 
Prevent header-processing logic from dropping custom headers in 'automate' mode
 2026-01-15 10:37:28 -05:00
Tony West 09c460e768 Fixed issue that occurred when running against subdomains that contain '-d' in the subdomain name 2025-11-25 16:36:39 -05:00
Tony West ba45c6da26 Removed duplicate base path from output, minor changes to value type handling 2025-11-21 17:17:50 -05:00
Tony West 7417f9f917 Fixed bug where the base path was sometimes applied to the URL multiple times 2025-09-19 17:24:33 -04:00
Tony West 70a3d0b8c2 Updated the documentation 2025-09-16 21:40:16 -04:00
Tony West 77b11f40e6 Made some improvements for greater flexibility when encountering improperly defined API specifications 2025-09-16 21:40:04 -04:00
Tony West fd602b9ca8 Fixed a bug that prevented use of header values containing a colon 2025-04-15 13:24:23 -04:00
Tony West 83d1b57aef Merge pull request #41 from altperfect/fix/enforce-single-content-type 
Fix EnforceSingleContentType function to not remove all custom headers
 2025-03-18 16:06:26 -04:00
Tony West 6f903a7f78 Merge pull request #42 from altperfect/feat/add-curl-command-to-verbose-output 
Add curl command in verbose output for 'automate' mode
 2025-03-18 16:03:33 -04:00
Tony West 0d59e6c34f Additional fix to output format check 2025-03-18 15:57:32 -04:00
Tony West ceb99e4ddd Fixed insufficient output format check when displaying rate limit information 2025-03-18 15:54:55 -04:00
Tony West 585100037a Updated documentation 2024-11-15 16:30:15 -05:00
Tony West f4b2634f42 Fixed improper handling of parameter values in the URL path 2024-11-15 16:28:29 -05:00
Tony West 2e9da2e810 Merge pull request #38 from six2dez/patch-1 
Added failsafe check for files with no security definitions
 2024-11-15 15:48:15 -05:00
Tony West 0fd8b6e6ec Updated documentation 2024-11-15 15:37:39 -05:00
Tony West 8acc15aad1 Added rate limit functionality to the automate and brute commands 2024-11-15 15:37:24 -05:00
Tony West a9f907e2f1 Modified convert command to enable saved output even when definition file is already v3 2024-10-16 14:27:48 -04:00
Tony West 3b3fed2c99 Merge branch 'main' of https://github.com/BishopFox/sj 2024-10-09 18:07:14 -04:00
Tony West 1571b14873 Updated version string 2024-10-09 18:06:38 -04:00
Tony West 94e65fd96f Fixed missing check for 'formData' in the 'in' parameter object value 2024-10-09 18:06:26 -04:00
Tony West 5274b1b0ab Fixed null pointer bug 2024-10-09 13:06:50 -04:00
Tony West 49d6867ebf Now requires Go >= 1.21 2024-10-04 18:44:51 -04:00
Tony West 65d424c6a7 Added support for 'oneOf', 'anyOf', and 'allOf' schema keywords. 2024-10-03 22:47:27 -04:00
Tony West d7b34598d2 Fixed bug in verbose JSON output 2024-10-03 14:52:47 -04:00
Tony West 4526ddbf23 Fixed improper JSON output structure 2024-10-01 13:37:23 -04:00
Tony West 31e286235b Merge pull request #27 from mr-pmillz/main 
Resolved nil pointer dereference
 2024-09-20 15:27:05 -04:00
Tony West c84e679ac4 Merge branch 'main' into main 2024-09-20 15:26:18 -04:00
Tony West 41ba000755 Updated the version string. 2024-09-20 15:24:30 -04:00
Tony West cc99aef9ae Adds automatic sorting of results when output to the console 2024-09-20 15:13:14 -04:00
Tony West 530143b4ee Fixed bug that caused improperly formatted JSON output 2024-09-13 18:29:02 -04:00
Tony West 69de3abbf1 Merge pull request #26 from idanya/fix-param-condition-check 
Fix parameter handling bug in AddParametersToRequest() function
 2024-09-13 11:49:58 -04:00
Tony West 9fd1b78081 Modified version number to reflect bug fix 2024-09-13 11:46:03 -04:00
Tony West 2877384d54 Updated issue templates 2024-08-26 22:03:33 -04:00
Tony West cb3e0bb16e Updated issue templates 2024-08-26 22:02:39 -04:00
Tony West 291edfe60c Added the 'convert' subcommand 2024-08-26 14:08:07 -04:00
Tony West 69b316e7bc Fixed bug in the '--get-accessible-endpoints' flag 2024-08-23 19:07:41 -04:00
Tony West 615f0c7a26 Fixed bug where output file would close pre-emptively 2024-08-23 13:27:38 -04:00
Tony West 5bbf0453a5 Fixed missing preview response for JSON output when the verbose flag is applied 2024-08-21 19:16:15 -04:00
Tony West a39028b463 Fixed bug in handling variations of schema references 2024-08-19 15:58:51 -04:00
Tony West e22c11c118 Added verbose output option for the automate command 2024-08-14 23:03:13 -04:00
Tony West 528a771c87 Fixed improper handling of defined XML content 2024-08-12 18:21:17 -04:00
Tony West c85512dfe0 Improved handling of nested schema references 2024-08-07 22:20:15 -04:00
Tony West 6a01afb367 Fixed bug that occurred when referencing non-existent schema values 2024-08-02 10:57:41 -04:00