Skip to content

Tags: KleKlai/jsql-injection

Tags

v0.81

Toggle v0.81's commit message
Fix multi-params injection and various bugs

- Vendor MemSQL: change ending comment to empty
- New i18n language: Korean (ko)
- Add new payload paths
- Joined UML class diagram
- Change Chinese fonts to Ubuntu Regular
- Change while:readLine() to while:read(buffer) to read page sources
- Fix bug preventing multi-params injection (* erased)
- Test ErrorStream for null before using it

- Fix ron190#53774: null SimpleEntry parameters replaced by empty String
- Fix ron190#53778: Catch any Exception on getSource() from a connection
- Fix ron190#53776: Remove decoding character %xy in URL parameters
- Fix ron190#54320: Update i18n for French
- Fix ron190#53699, Fix ron190#53637, Fix ron190#53632: adding new items to Scan List
using context menu 'New Value(s)'
- Fix ron190#53736: ArrayIndexOutOfBoundsException on setText()
- Fix ron190#54575: NullPointerException on setSelectedIndex()
- Fix ron190#54573: NullPointerException on setText()
- Fix ron190#54572: NullPointerException on setText()

v0.80

Toggle v0.80's commit message
Pre-release of v0.80: i18n, global improvement on GUI and injection

- New Blind Strategy for SQLite drived by recent PHP PDO >= 3.8
- Fix: incorrect regex match on SQL Engine Field with multiple lines
- Fix GROUPBY::floor_rand failure if source contains 'mysqli_query()'
- Each URL segment is checked during Shell location test
- Detect boolean false positives for Ascii code 0 as well as 255

- Externalize constants to properties
- Console Tabs can be maximized
- Color of Tab's name matches color of event (red/green)
- Shell was not giving back control to GUI when command takes time
- User's selected vendor's name is no more reset between 2 injections
- Add margin on shells' bottom for scrollbar to not hide the prompt
- Display Boolean strategy applicability message when injectable
- Force 'http://' in URL if protocol is undefined
- Action deleting next char was deleting prev char in Encode manager
- Fix duplication name of Strategy in Scan list

- I18n of headers on Tab and Table in Network tab
- Add font Ubuntu Regular to display Chinese text in consoles
- Change Console font to Ubuntu Regular when Chinese is selected
- I18n of tree's context menus Load/Stop Pause/Resume Check/Uncheck
- Fix i18n tooltip on Console tabs
- I18n of Bruteforce results
- I18n of start/stop button in managers
- I18n of tree empty root

v0.79

Toggle v0.79's commit message
Bug fix and wider injection

- Execute Coder on menu hover and on keyboard, better error handling
- MySQL Error: various injections compatible with Order/Group By
- Loop detection when same result is fetched over and over (non-standard
encoding)
- Reset strategy correctly when starting new injection
- Wider range of Character insertion including Multibyte injection to
evade escape quote by addslashes()
- Replace quote in ifnull() by ${TRAIL_HEX} for MySQL
- Fix ron190#35352: EmptyStackException on setText()
- Fix ron190#33930: ClassCastException on showConfirmDialog()
- Fix ron190#4731: ClassCastException on paintTriangle()
- Fix ron190#4081: SocketTimeoutException on get()
- Fix ron190#2154: NoClassDefFoundError on read()
- Fix ron190#2124: NullPointerException on addRequestProperty()
- Fix ron190#1896: NullPointerException on showOpenDialog()
- Fix ron190#1860: Multiple Exceptions on setRowCount()

v0.78

Toggle v0.78's commit message
Release v0.78

- Update README and Web Services metadata
- i18n anticipation for SQL Engine and Preferences panels
- Fix Database Vendor XML for ${RESULT_RANGE} candidates

v0.77

Toggle v0.77's commit message
Multithreading, bugs fix and JUnit tests

- JUnit tests for Cubrid, Informix and Ingres
- Fix nullable result on MySQL newer version
- Database vendor selection is now exclusive
- Fix URL decode in Coder manager
- Fix opened thread when selecting database
- Optimize multithreading of reading file: process partial result
- Explicit naming of threads Callable
- Fix ron190#4062
- Fix ron190#2943
- Fix ron190#4386
- Code design and SonarQube cleaning

v0.76

Toggle v0.76's commit message
Release v0.76

- New Czech translation
- New database SQLite
- Fix language detection
- Fix ron190#1654
- Fix ron190#4301
- Upgrade to SonarQube 6.0

v0.75

Toggle v0.75's commit message
v0.75

- Translation and language detection
- Clean code design and Ui
- Better multi-threading and multiple injection
- Fix different injection strategies and SQL vendors
- Upgrade to Java 7 and compatibility up to Java 9
- Fix jcifs timeout

v0.74

Toggle v0.74's commit message
Bugs fixes and Code quality

- Fix ron190#1500, Fix ron190#1544, Fix ron190#1571, Fix ron190#1617, Fix ron190#1670, Fix ron190#1671, Fix
ron190#1683
- Database vendors as Enum
- Tests cleaning
- SonarQube code quality cleaning

v0.73

Toggle v0.73's commit message
Authentication Basic Digest Negotiate NTLM and Kerberos.

Database type selection.
Remove Cookie (use Header instead).
Fix MySQL error based.
- Fix ron190#1368
- Fix ron190#223
- Fix ron190#218
- Fix ron190#138
- Fix ron190#135
- Fix ron190#133

v0.72

Toggle v0.72's commit message
Fix broken blind and time and some issues : fix ron190#83, fix ron190#82

, fix ron190#67,

fix ron190#60, fix ron190#46