sqlmapproject/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-12 02:22:55 +00:00
Code Issues Packages Projects Releases Wiki Activity
11,052 Commits 2 Branches 142 Tags
77ee160875b0d5b5535c7854a11d25e94050dd62
Commit Graph
273 Commits
Author SHA1 Message Date
Miroslav Štampar 49a774035f Fixing some of WAF bypass bugs 2026-08-17 16:41:49 +02:00
Miroslav Štampar dc42edc19f Improving the auto WAF bypass feature 2026-08-17 15:24:18 +02:00
Miroslav Štampar 0ba9df2589 Adding new tamper scripts 2026-08-17 14:28:48 +02:00
Miroslav Štampar 6770b2847b Refresh of tamper docu 2026-08-14 23:21:00 +02:00
Miroslav Štampar 319910ccd8 Adding two new tamper scripts 2026-08-14 22:56:50 +02:00
Miroslav Štampar aa42dc041d Fixing if2case tamper corrupting arguments that contain a function call (e.g. IF(...,SLEEP(5),...)) 2026-07-28 21:29:28 +02:00
Miroslav Štampar 1b09b028ba Fixing tamper unicode/overlong encoding for characters beyond BMP/U+07FF 2026-07-28 21:27:38 +02:00
Miroslav Štampar 0079412fd2 Massive speed improvement of luanginxmore tamper script 2026-07-28 12:39:07 +02:00
Miroslav Štampar 9925adf799 Adding tamper script sign 2026-07-21 13:33:53 +02:00
Miroslav Štampar 620f3a77a1 Fixing charunicodeencode tamper script 2026-07-20 10:16:57 +02:00
Miroslav Štampar 97c8b45ccc Minor patches 2026-07-11 14:52:55 +02:00
Miroslav Štampar 827ec0a06c Minor update for Oracle support 2026-07-10 15:07:16 +02:00
Miroslav Štampar 1404133538 Add --prove, opt-in --auto-tamper WAF bypass, and blindbinary/infoschema2innodb tampers 2026-06-17 15:58:08 +02:00
Miroslav Štampar d42e50367e Fixing some tamper script bugs 2026-06-15 00:41:38 +02:00
Miroslav Štampar 4b08aaffd6 Minor patch 2026-06-12 12:16:14 +02:00
Miroslav Štampar 2e892102b7 Minor patch for between tamper script 2026-06-12 12:14:02 +02:00
Miroslav Štampar 1d1725f920 Minor update 2026-06-12 11:32:01 +02:00
Miroslav Štampar fc16a8e120 Minor improvement to equal tamper scripts 2026-06-12 11:22:51 +02:00
Miroslav Štampar 994292edec Re-evaluating tamper priorities 2026-06-12 11:07:14 +02:00
Miroslav Štampar 2f4ff0d430 Minor patches to tamper scripts 2026-06-04 20:06:07 +02:00
Miroslav Štampar 2c356ed22a Minor fix of space2 tamper scripts 2026-06-04 20:00:38 +02:00
Miroslav Štampar f564db0d56 Minor correction of quote mechanism in tamper scripts 2026-06-04 19:54:53 +02:00
Miroslav Štampar 06b74f9390 Minor update of random tamper scripts 2026-06-04 19:52:38 +02:00
Miroslav Štampar ae851d9511 Fixing versioned tamper scripts 2026-06-04 19:50:06 +02:00
Miroslav Štampar d373eeaea5 Fixing shitty concat2concatws tamper script 2026-06-04 19:40:58 +02:00
Miroslav Stampar f69a63b2b6 Year bump 2026-01-01 19:12:07 +01:00
Miroslav Stampar 1d7493d243 Patch for #5897 2025-05-08 23:54:39 +02:00
Miroslav Stampar ad1266a080 Minor style updates 2025-05-08 22:30:54 +02:00
Miroslav Stampar 04b293d44f Fix related to #5881 2025-03-28 10:11:43 +01:00
Kenny Strawn 1b4fb3a86d Add luanginxmore tamper script (#5881) 
* Add luanginxmore tamper script

POST requests can accept far more parameters than GET requests, so for additional evasion, it's nice to have something capable of overwhelming a WAF with millions of parameters, not just hundreds.

Tested against public bug bounty programs with great success.

* Fix syntax error

Oops, forgot an extra closing parenthesis

* Fix missing imports
 2025-03-28 10:09:42 +01:00
Miroslav Stampar fa9dc20c6e Minor update 2025-02-19 14:11:03 +01:00
Miroslav Stampar ed4fc46217 Year bump 2025-01-02 00:51:30 +01:00
Miroslav Stampar c84f141b89 Bumping copyright year 2024-01-03 23:11:52 +01:00
Miroslav Stampar 3d244ea9c3 Fixes #5549 2023-10-20 15:24:41 +02:00
Miroslav Stampar 4585243175 Implements tamper script if2case (#5301) 2023-02-01 13:53:19 +01:00
Miroslav Stampar 05293e01a4 Year and version bump 2023-01-02 23:24:59 +01:00
Miroslav Stampar 5592f55cae Revert "JSON WAF bypass tamper scripts (#5260)" (#5273) 
This reverts commit 12e3ed14ae.
 2022-12-23 15:59:12 +01:00
noamiscool 12e3ed14ae JSON WAF bypass tamper scripts (#5260) 
* added JSON waf bypass techniques

* added a link for WAF evasion technique blog

* Added generic JSON WAF bypass
 2022-12-23 15:52:49 +01:00
Miroslav Stampar 2ace4ef471 Implements tamper script 'scientific' (#5205) 2022-10-21 19:07:20 +02:00
Miroslav Stampar 02dcf2a926 Fixes #5203 2022-10-17 12:21:56 +02:00
Víctor García 7f62572f43 Add files via upload (#5189) 2022-10-06 11:32:31 +02:00
Miroslav Stampar e393e1b80e Minor update for #4992 2022-02-23 12:13:30 +01:00
Jeffrey Bencteux a4cf25c97d add ord2ascii tamper script (#4992) 
Changes occurrences of ORD() function to equivalent ASCII() ones.
 2022-02-23 12:11:27 +01:00
Miroslav Stampar 6276db1d80 Copyright year bump 2022-01-03 11:30:34 +01:00
Miroslav Stampar d95406016c Update regarding #4795 2021-09-08 21:01:41 +02:00
Miroslav Stampar 31fe3453a2 Copyright year bump 2020-12-31 11:46:27 +01:00
Miroslav Stampar 5bf52c3f9c Trivial patches 2020-12-10 14:22:44 +01:00
Miroslav Stampar 4d2b890a0a Silent bug fix 2020-11-09 23:02:48 +01:00
Miroslav Stampar 13a2ab3fa3 Minor update (drei) 2020-10-05 21:36:30 +02:00
Miroslav Stampar c2b9e539ae Update for #4351 2020-09-21 17:04:54 +02:00