GithubStar/sqlmap
1
0
Fork 0
mirror of https://github.com/sqlmapproject/sqlmap.git synced 2026-10-16 20:50:56 +08:00
Code Issues Packages Projects Releases Wiki Activity
11,102 Commits 2 Branches 142 Tags
master
Commit Graph

1027 Commits

Author SHA1 Message Date
Miroslav Štampar 5b180533c1 Fixes #6143 2026-10-11 21:20:29 +02:00
Miroslav Štampar 2171eb123c Fixes CI/CD issues 2026-09-20 12:05:29 +02:00
Miroslav Štampar 31005fe4df Fixing an TypeError issue with a crypto.crypt() 2026-09-20 11:59:21 +02:00
Miroslav Štampar bda62dcf28 Fixes #6123 2026-09-18 00:41:57 +02:00
Ramachandran Thamarai Semmenian 3b8a8d3d09 Do not crash on a JWT with a non-base64url signature (fixes #6101) (#6102) 
JWT_REGEX accepts a signature segment of any length and parseJWT only
validates the header/payload, so a value that matches the JWT pattern but
carries a malformed/truncated signature (e.g. 41 base64url characters,
which is length % 4 == 1 and thus impossible base64) reached crackHMAC.
There decodeBase64(signature) let binascii.Error propagate, aborting the
whole run with an unhandled exception during checkJWT().

Guard the signature decode: a signature that is not valid base64url cannot
be an HMAC we could verify, so crackHMAC now treats it as not crackable
(returns None) instead of raising. The other auditJWT findings are
unaffected. Added a regression doctest.

Co-authored-by: chan770 <tsramachandran770@gmail.com>
 2026-09-01 10:24:58 +02:00
Miroslav Štampar 0ee19bdf3d Minor patch 2026-08-22 23:02:58 +02:00
Miroslav Štampar 76ddd7a1b9 Fixes #6097 2026-08-16 23:52:22 +02:00
Miroslav Štampar 7d2c33cd32 Minor patch 2026-08-08 01:07:07 +02:00
Miroslav Štampar 6acc970801 Improved mechanism for --proof 2026-08-07 17:04:32 +02:00
Miroslav Štampar 96fec6864e Minor patch 2026-08-04 22:46:04 +02:00
Miroslav Štampar cb8298d55a Couple of trivial bug fixes 2026-08-04 17:02:57 +02:00
Miroslav Štampar ac313f009e Minor patch 2026-07-29 14:30:50 +02:00
Miroslav Štampar 3a680be4eb Minor patches 2026-07-29 08:20:08 +02:00
Miroslav Štampar e75d75dbe6 Adding a minor comment 2026-07-28 21:58:51 +02:00
Miroslav Štampar 0a6dbd260f Fixing --openapi-only config file rejection and HAR export header-name casing 2026-07-28 21:27:58 +02:00
Miroslav Štampar 356984929f Fixing --common-columns for -T A,B 2026-07-28 16:42:37 +02:00
Miroslav Štampar 84f0ef8232 Minor corrected patch for MsSQL hash cracking 2026-07-28 13:18:07 +02:00
Miroslav Štampar 154adb1d4d Fixing keyset dump for some cases 2026-07-28 12:19:42 +02:00
Miroslav Štampar edbfca0b8e Adding switch --jwt 2026-07-25 22:40:12 +02:00
Miroslav Štampar b2f98b61ec Improved crawling 2026-07-25 19:10:58 +02:00
Miroslav Štampar 5a5aebfc6e Hardening Brotli/Zstandard decoding against hostile input 2026-07-25 09:59:53 +02:00
Miroslav Štampar a4c983ae06 Adding native Brotli (br) and Zstandard (zstd) response decoding 2026-07-25 00:42:27 +02:00
Miroslav Štampar 075d009bb7 Adding switch --mine-params 2026-07-24 14:27:05 +02:00
Miroslav Štampar 36ebce6935 Tons of stabilization of non-SQLi techniques 2026-07-23 12:15:45 +02:00
Miroslav Štampar 1db09d5a98 Improved --gui 2026-07-19 16:31:08 +02:00
Miroslav Štampar 267c20048d Minor patch 2026-07-19 14:46:23 +02:00
Miroslav Štampar d08e992ad6 Minor patch 2026-07-19 13:17:07 +02:00
Miroslav Štampar fabe4ce04d Minor fix 2026-07-19 12:22:23 +02:00
Miroslav Štampar 384ee1a91a Minor patch 2026-07-19 11:15:32 +02:00
Miroslav Štampar ab6ce22593 Add experimental gRPC-Web (text) support 2026-07-17 23:38:34 +02:00
Miroslav Štampar 76b75e95f0 Improving dialect checks 2026-07-17 14:46:52 +02:00
Miroslav Štampar da07c8756d Minor improvement for slow hash cracking algos 2026-07-13 09:03:03 +02:00
Miroslav Štampar 0338c13063 Minor update for SQLlinter 2026-07-12 20:27:37 +02:00
Miroslav Štampar 921870ccf0 Adding embedded dbwire library 2026-07-12 10:32:57 +02:00
Miroslav Štampar e23a91f6db Some more patches for -d 2026-07-11 15:51:04 +02:00
Miroslav Štampar ab59a4b72a Minor patches 2026-07-11 15:18:42 +02:00
Miroslav Štampar 97c8b45ccc Minor patches 2026-07-11 14:52:55 +02:00
Miroslav Štampar 40ccd801dc Fixing desync error from SLOW_ORDER_COUNT_THRESHOLD 2026-07-11 09:09:08 +02:00
Miroslav Štampar 52c742458b Adding support for Oracle 12C password hashes 2026-07-10 16:23:19 +02:00
Miroslav Štampar fc1ae6950e Adding native websocket support 2026-07-09 13:56:40 +02:00
Miroslav Štampar 4c12dda2f7 Fixing --eta 2026-07-09 13:25:50 +02:00
Miroslav Štampar 767feba3a7 Embedding the NTLM auth support (without the deprecated 3rd party lib) 2026-07-09 10:38:19 +02:00
Miroslav Štampar 478888b19e Minor patch 2026-07-09 09:57:08 +02:00
Miroslav Štampar c1363dd44c Minor refactoring 2026-07-09 09:56:51 +02:00
Miroslav Štampar fd009027f7 Adding --payload-lint to CI/CD 2026-07-08 17:51:37 +02:00
Miroslav Štampar 4504edaeb1 Switching from pickle to json for serialization 2026-07-08 12:13:49 +02:00
Miroslav Štampar f65dc92b1e Adding SQLlint for checking the sanity of queries 2026-07-08 02:00:04 +02:00
Miroslav Štampar 16c8909a0c Minor patch 2026-07-03 16:57:46 +02:00
Miroslav Štampar 2b9fd6cf82 Minor update of the references 2026-07-03 10:10:29 +02:00
Miroslav Štampar d60e95ede7 Some more stabilization of unittests 2026-07-02 22:52:02 +02:00