Miroslav Štampar
|
fca694c327
|
Fixing CI/CD errors
|
2026-08-04 17:18:24 +02:00 |
|
Miroslav Štampar
|
cb8298d55a
|
Couple of trivial bug fixes
|
2026-08-04 17:02:57 +02:00 |
|
Miroslav Štampar
|
579e559c71
|
Adding one more data correctness patch
|
2026-07-30 19:06:40 +02:00 |
|
Miroslav Štampar
|
5be154b9e2
|
Fixes diplaying of non-ASCII chars on Windows OS
|
2026-07-30 18:04:49 +02:00 |
|
Miroslav Štampar
|
112356ac5c
|
Minor patch
|
2026-07-30 16:29:32 +02:00 |
|
Miroslav Štampar
|
15a39b6ee9
|
Minor style update
|
2026-07-29 18:05:59 +02:00 |
|
Miroslav Štampar
|
3186a4fa31
|
Fixing CI/CD errors
|
2026-07-29 17:40:02 +02:00 |
|
Miroslav Štampar
|
311bf7ce4d
|
Adding support for DNS OOB for H2 and ClickHouse
|
2026-07-29 16:52:34 +02:00 |
|
Miroslav Štampar
|
1f42f52980
|
Trivial just in case update
|
2026-07-29 16:00:04 +02:00 |
|
Miroslav Štampar
|
ac313f009e
|
Minor patch
|
2026-07-29 14:30:50 +02:00 |
|
Miroslav Štampar
|
5fb4b47378
|
Adding voting mechanism in heavy-jitter environment
|
2026-07-29 13:03:19 +02:00 |
|
Miroslav Štampar
|
e81a99c4f3
|
Renaming --murphy-rate to --jitter
|
2026-07-29 09:05:44 +02:00 |
|
Miroslav Štampar
|
3a680be4eb
|
Minor patches
|
2026-07-29 08:20:08 +02:00 |
|
Miroslav Štampar
|
39d22d26c3
|
Making boolean inference some more robust against jitter
|
2026-07-29 02:13:39 +02:00 |
|
Miroslav Štampar
|
306738539e
|
Making boolean inference more robust against jitter
|
2026-07-29 01:08:47 +02:00 |
|
Miroslav Štampar
|
023d85fba8
|
Minor update
|
2026-07-29 00:14:38 +02:00 |
|
Miroslav Štampar
|
2afa92451a
|
Adding new unit test
|
2026-07-28 23:58:07 +02:00 |
|
Miroslav Štampar
|
0630556826
|
Stripping time outliers from the time stats
|
2026-07-28 23:57:47 +02:00 |
|
Miroslav Štampar
|
2bf5bd1aa4
|
Minor improvement of test cases
|
2026-07-28 22:42:55 +02:00 |
|
Miroslav Štampar
|
e75d75dbe6
|
Adding a minor comment
|
2026-07-28 21:58:51 +02:00 |
|
Miroslav Štampar
|
aa42dc041d
|
Fixing if2case tamper corrupting arguments that contain a function call (e.g. IF(...,SLEEP(5),...))
|
2026-07-28 21:29:28 +02:00 |
|
Miroslav Štampar
|
0a6dbd260f
|
Fixing --openapi-only config file rejection and HAR export header-name casing
|
2026-07-28 21:27:58 +02:00 |
|
Miroslav Štampar
|
1c869b7430
|
Fixing core helpers (decodeStringEscape round-trip, joinValue on Python 3, parseUnionPage case-sensitive de-duplication)
|
2026-07-28 21:27:54 +02:00 |
|
Miroslav Štampar
|
f21a6ab88d
|
Fixing blind enumeration (MS Access listing only first table; MySQL --privileges user labeling)
|
2026-07-28 21:27:49 +02:00 |
|
Miroslav Štampar
|
1b09b028ba
|
Fixing tamper unicode/overlong encoding for characters beyond BMP/U+07FF
|
2026-07-28 21:27:38 +02:00 |
|
Miroslav Štampar
|
90fe32f386
|
Some more fixing of CI/CD errors
|
2026-07-28 18:43:18 +02:00 |
|
Miroslav Štampar
|
d7d06c088d
|
Some more fixing of CI/CD errors
|
2026-07-28 18:27:23 +02:00 |
|
Miroslav Štampar
|
b0afe6b8d4
|
Fixing CI/CD errors
|
2026-07-28 18:17:19 +02:00 |
|
Miroslav Štampar
|
1dcca2c862
|
Implementing automatic auto-recover on charset mismatch (E/U)
|
2026-07-28 18:01:27 +02:00 |
|
Miroslav Štampar
|
ffffe2d0b2
|
Fixing multi-column blind --search
|
2026-07-28 16:57:55 +02:00 |
|
Miroslav Štampar
|
356984929f
|
Fixing --common-columns for -T A,B
|
2026-07-28 16:42:37 +02:00 |
|
Miroslav Štampar
|
e8a2fc50e0
|
Fixing limitCondition double-LIMIT
|
2026-07-28 16:24:41 +02:00 |
|
Miroslav Štampar
|
f992e44fb5
|
Minor bug fix for --openapi
|
2026-07-28 14:39:44 +02:00 |
|
Miroslav Štampar
|
84f0ef8232
|
Minor corrected patch for MsSQL hash cracking
|
2026-07-28 13:18:07 +02:00 |
|
Miroslav Štampar
|
0079412fd2
|
Massive speed improvement of luanginxmore tamper script
|
2026-07-28 12:39:07 +02:00 |
|
Miroslav Štampar
|
154adb1d4d
|
Fixing keyset dump for some cases
|
2026-07-28 12:19:42 +02:00 |
|
Miroslav Štampar
|
18e06c6381
|
Fixing MsSQL FOR JSON handling of NULL values
|
2026-07-28 11:57:14 +02:00 |
|
Miroslav Štampar
|
0ab84074f7
|
Reducing number of requests for --hex in --technique=E
|
2026-07-28 11:43:24 +02:00 |
|
Miroslav Štampar
|
cd911acb24
|
Fixing --hex in boolean-based blind
|
2026-07-28 11:12:51 +02:00 |
|
Miroslav Štampar
|
5dd91ba8ca
|
Minor patch
|
2026-07-28 00:48:54 +02:00 |
|
Miroslav Štampar
|
9fdb704af7
|
Minor bug fix
|
2026-07-27 17:32:26 +02:00 |
|
Miroslav Štampar
|
bb9e5dbf44
|
Fixing bug with --lengths and --null-connection combined
|
2026-07-27 17:22:17 +02:00 |
|
Miroslav Štampar
|
f43dba3d34
|
Fixing retrieval of exotic coltypes on MySQL
|
2026-07-27 14:43:42 +02:00 |
|
Miroslav Štampar
|
fbc3704bf2
|
Fixing multi-byte corruption
|
2026-07-27 14:25:54 +02:00 |
|
Miroslav Štampar
|
762650db07
|
Fixing --dump for Derby
|
2026-07-27 14:03:19 +02:00 |
|
Miroslav Štampar
|
534f873660
|
Minor update
|
2026-07-27 13:49:41 +02:00 |
|
Miroslav Štampar
|
2aeb275ec9
|
Some more unicode retrieval patchin
|
2026-07-27 13:34:25 +02:00 |
|
Miroslav Štampar
|
d3cfad6a8d
|
Fixing DB2 boolean-based blind retrieval of non-ASCII chars
|
2026-07-27 12:52:08 +02:00 |
|
Miroslav Štampar
|
1d263f22c3
|
Adding --hex for ClickHouse
|
2026-07-27 12:05:49 +02:00 |
|
Miroslav Štampar
|
8b70a392a1
|
Minor bug fix for bug UTF codepoints retrieval in MsSQL
|
2026-07-27 11:49:41 +02:00 |
|
Miroslav Štampar
|
ec58f57fa9
|
Expanding capabilities of MySQL to correctly retrieve UTF8MB4 chars
|
2026-07-27 11:35:14 +02:00 |
|
Miroslav Štampar
|
69108bcf01
|
Minor patch
|
2026-07-26 23:58:52 +02:00 |
|
Miroslav Štampar
|
dcb2b513c0
|
Hardening MySQL time-based payloads to not work on Cubrid
|
2026-07-26 23:18:31 +02:00 |
|
Miroslav Štampar
|
13e956ca64
|
Adding Cubrid time-based payloads
|
2026-07-26 22:47:22 +02:00 |
|
Miroslav Štampar
|
ca608da2f1
|
Adding Virtuoso error-based payloads
|
2026-07-26 21:45:07 +02:00 |
|
Miroslav Štampar
|
c75df91eb7
|
Adding CUBRID error-based payloads
|
2026-07-26 21:32:26 +02:00 |
|
Miroslav Štampar
|
a1ed35cf3b
|
Adding error-based payloads for InterSystems Cache
|
2026-07-26 21:15:27 +02:00 |
|
Miroslav Štampar
|
2f56ad66f4
|
Making more DBMS specific error-based payloads for H2, Firebird and Vertica
|
2026-07-26 20:32:29 +02:00 |
|
Miroslav Štampar
|
07d8d5f731
|
Fixing MonetDB error-based payload
|
2026-07-26 18:45:11 +02:00 |
|
Miroslav Štampar
|
523cdd8d9e
|
Fixing chunked error-based responses for Firebird
|
2026-07-26 18:03:54 +02:00 |
|
Miroslav Štampar
|
57dee852e4
|
Some more fixing CI/CD errors
|
2026-07-26 14:39:49 +02:00 |
|
Miroslav Štampar
|
bf138e800a
|
Fixing CI/CD errors
|
2026-07-26 14:35:35 +02:00 |
|
Miroslav Štampar
|
d2bcb39763
|
Improvement of error-based vectors (e.g. SQLite error vector added)
|
2026-07-26 14:23:14 +02:00 |
|
Miroslav Štampar
|
edbfca0b8e
|
Adding switch --jwt
|
2026-07-25 22:40:12 +02:00 |
|
Miroslav Štampar
|
b2f98b61ec
|
Improved crawling
|
2026-07-25 19:10:58 +02:00 |
|
Miroslav Štampar
|
5a5aebfc6e
|
Hardening Brotli/Zstandard decoding against hostile input
|
2026-07-25 09:59:53 +02:00 |
|
Miroslav Štampar
|
a4c983ae06
|
Adding native Brotli (br) and Zstandard (zstd) response decoding
|
2026-07-25 00:42:27 +02:00 |
|
Miroslav Štampar
|
ab881132b8
|
Hardening Negotiate/Kerberos authentication (#3404)
|
2026-07-25 00:24:52 +02:00 |
|
Miroslav Štampar
|
1bd1b457d7
|
Adding Negotiate/Kerberos authentication (#3404)
|
2026-07-24 22:26:43 +02:00 |
|
Miroslav Štampar
|
2d9e9ed959
|
Implementing support for 429 (rate limit)
|
2026-07-24 15:17:05 +02:00 |
|
Miroslav Štampar
|
075d009bb7
|
Adding switch --mine-params
|
2026-07-24 14:27:05 +02:00 |
|
Miroslav Štampar
|
ffe124f3e0
|
Some more fixing CI/CD errors
|
2026-07-23 13:08:18 +02:00 |
|
Miroslav Štampar
|
fcec8ef89e
|
Fixing CI/CD errors
|
2026-07-23 12:56:24 +02:00 |
|
Miroslav Štampar
|
f129d3ac76
|
Fixing CI/CD errors
|
2026-07-23 12:21:10 +02:00 |
|
Miroslav Štampar
|
36ebce6935
|
Tons of stabilization of non-SQLi techniques
|
2026-07-23 12:15:45 +02:00 |
|
Miroslav Štampar
|
e6a5e8ff05
|
More style changes for Esperanto DBMS engine
|
2026-07-22 01:48:54 +02:00 |
|
Miroslav Štampar
|
c294098cc1
|
Minor style changes for Esperanto DBMS engine
|
2026-07-22 01:31:11 +02:00 |
|
Miroslav Štampar
|
272d1447d7
|
Fixing CI/CD errors
|
2026-07-22 01:10:06 +02:00 |
|
Miroslav Štampar
|
a5a7f7203a
|
Tons of improvements for Esperanto engine
|
2026-07-22 01:06:57 +02:00 |
|
Miroslav Štampar
|
bdf1901a43
|
Minor update
|
2026-07-21 15:00:09 +02:00 |
|
Miroslav Štampar
|
016c388a13
|
Expanding Esperanto engine with more log2 comparators
|
2026-07-21 14:04:30 +02:00 |
|
Miroslav Štampar
|
e8512c8c13
|
Expanding Esperanto engine with SIGN
|
2026-07-21 13:53:45 +02:00 |
|
Miroslav Štampar
|
9925adf799
|
Adding tamper script sign
|
2026-07-21 13:33:53 +02:00 |
|
Miroslav Štampar
|
0cf4c641a1
|
Adding auto-between on > filtering
|
2026-07-21 13:16:40 +02:00 |
|
Miroslav Štampar
|
a7c63afdd8
|
Fixing H2 file write
|
2026-07-21 12:34:18 +02:00 |
|
Miroslav Štampar
|
99ec51f86d
|
Minor bug fix
|
2026-07-21 12:23:02 +02:00 |
|
Miroslav Štampar
|
d381a32c94
|
Fixing Sybase queries
|
2026-07-21 11:54:57 +02:00 |
|
Miroslav Štampar
|
721c9d9d70
|
Fixing Derby queries
|
2026-07-21 11:44:37 +02:00 |
|
Miroslav Štampar
|
a22f782db5
|
Fixing DB2 truncation
|
2026-07-21 11:35:40 +02:00 |
|
Miroslav Štampar
|
26e13122ca
|
Fixing #6087
|
2026-07-21 11:34:18 +02:00 |
|
Miroslav Štampar
|
002828a734
|
Some more fixing of query workflow
|
2026-07-21 11:19:18 +02:00 |
|
Miroslav Štampar
|
6b8de6704c
|
Some more fixing of queries
|
2026-07-21 10:50:13 +02:00 |
|
Miroslav Štampar
|
4a0308dd8d
|
Fixing some Altibase and Sybase queries
|
2026-07-21 10:25:25 +02:00 |
|
Miroslav Štampar
|
6a4ae1fa96
|
Fixing some MsSQL enumeration bugs
|
2026-07-21 10:09:54 +02:00 |
|
Miroslav Štampar
|
5848fa4f1a
|
Bug fix for MsSQL (removing it from PLUS_ONE_DBMSES)
|
2026-07-21 09:56:00 +02:00 |
|
Miroslav Štampar
|
6d9322bc74
|
Trivial patch
|
2026-07-21 09:06:10 +02:00 |
|
Miroslav Štampar
|
e589936982
|
Adding some guard blocks when people fool around with their environment
|
2026-07-20 22:19:57 +02:00 |
|
Miroslav Štampar
|
37771f0d25
|
Minor update
|
2026-07-20 17:39:52 +02:00 |
|
Miroslav Štampar
|
2626e50190
|
Adding boundarycheck tool
|
2026-07-20 17:19:28 +02:00 |
|
Miroslav Štampar
|
3238415d48
|
Removing some junk boundaries
|
2026-07-20 17:02:29 +02:00 |
|