Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
529 commits
Select commit Hold shift + click to select a range
60d145a
Implementing support for v2.x for H2
stamparm Dec 25, 2025
1a7538a
Minor patch for Apache Derby
stamparm Dec 25, 2025
870e11a
Minor optimization
stamparm Dec 25, 2025
7a21109
Bug fix for fingerprinting MySQL
stamparm Dec 25, 2025
bcabe55
Minor optimizations
stamparm Dec 25, 2025
e0ae530
Minor improvements
stamparm Dec 25, 2025
868536d
Minor update
stamparm Dec 25, 2025
6d49b5a
Minor update
stamparm Dec 25, 2025
137687e
Minor refactoring
stamparm Dec 25, 2025
2b44aa1
Implementing compat function codecs_open
stamparm Dec 25, 2025
d79af7d
Dropping mention of Python 2.6 from docus
stamparm Dec 25, 2025
eb5c1e0
Fixes #5997
stamparm Dec 27, 2025
9b3ed89
Minor patch
stamparm Dec 27, 2025
22dc46c
Minor improvement
stamparm Dec 27, 2025
e4960ce
Minor patch
stamparm Dec 27, 2025
673a7a5
Minor patches
stamparm Dec 28, 2025
c95f67c
Minor improvements
stamparm Dec 28, 2025
8be94b4
Minor Python2 bug fix
stamparm Dec 28, 2025
d1d9c7c
Fixes #5998
stamparm Dec 29, 2025
3787750
Minor improvement of smalldict
stamparm Dec 29, 2025
0a6b5fb
Minor improvement of common-tables
stamparm Dec 29, 2025
f256077
Minor update
stamparm Dec 29, 2025
201f5e8
Couple of bug fixes for BigArray
stamparm Dec 30, 2025
0e74e43
Minor update
stamparm Dec 30, 2025
bf2d3a5
Minor fine tuning
stamparm Dec 30, 2025
1330198
Minor improvements in HashDB
stamparm Dec 30, 2025
1614084
Minor improvement
stamparm Dec 30, 2025
503c7b6
Some improvements in cachedmethods
stamparm Dec 30, 2025
ea622b8
Fixes latest CI/CD error
stamparm Dec 30, 2025
63cecb6
Minor optimization in HashDB
stamparm Dec 30, 2025
866fc5d
Minor thread-safety fix
stamparm Dec 30, 2025
53aafe9
Minor bug fix
stamparm Dec 30, 2025
5cc4691
Minor update
stamparm Dec 30, 2025
bb73c60
Doing recloacking
stamparm Dec 30, 2025
95bd377
Minor patch
stamparm Dec 30, 2025
9da2bde
Minor fixes
stamparm Dec 30, 2025
6f97e8c
Minor update
stamparm Dec 30, 2025
6e1a40d
Minor improvements
stamparm Dec 30, 2025
905e541
Minor update
stamparm Dec 30, 2025
e92a383
Minor update
stamparm Dec 30, 2025
60a306b
Minor bug fix
stamparm Dec 30, 2025
d7be168
Minor update
stamparm Dec 30, 2025
33cd5d5
Implements #116
stamparm Dec 30, 2025
db512c7
Fixes #5961
stamparm Dec 30, 2025
883bd23
Minor refactoring
stamparm Dec 31, 2025
ba05bb6
Minor refactoring
stamparm Dec 31, 2025
09fadc4
Minor improvement of stdoutEncode
stamparm Dec 31, 2025
49902fe
Minor patch
stamparm Dec 31, 2025
66983d3
Minor update
stamparm Dec 31, 2025
ac2bd50
Add ncurses GUI support with command line integration (#5965)
tanaydin Dec 31, 2025
e1a509e
Minor refactoring (#5965)
stamparm Dec 31, 2025
894bed9
More refactoring (#5965)
stamparm Dec 31, 2025
70c3c12
More refactoring (#5965)
stamparm Dec 31, 2025
1c3f2dc
More patching (#5965)
stamparm Dec 31, 2025
f69a63b
Year bump
stamparm Jan 1, 2026
dd3780d
Version bump
stamparm Jan 1, 2026
1a3fca5
Update of changelog
stamparm Jan 1, 2026
ea8c6bd
Update of checksums
stamparm Jan 1, 2026
4a40101
Dummy update
stamparm Jan 1, 2026
737f227
Adding credits for --tui (#5965)
stamparm Jan 2, 2026
ec123ba
Fix broken GitHub downloads URL in update message (#6001)
fxrhan Jan 4, 2026
8c9e704
Proper patch for #6000
stamparm Jan 4, 2026
6ef62d0
Minor improvement of PKI handler
stamparm Jan 4, 2026
15c65d0
Minor patch
stamparm Jan 4, 2026
760fac5
Minor patch of max connection total size
stamparm Jan 4, 2026
9e436ef
Minor update
stamparm Jan 4, 2026
58ebc41
Minor update
stamparm Jan 4, 2026
4af6dad
Minor patch
stamparm Jan 4, 2026
dc30e60
Minor patches
stamparm Jan 4, 2026
5864dd4
Minor patching
stamparm Jan 4, 2026
69eca57
Minor update
stamparm Jan 4, 2026
69a613e
Minor improvement
stamparm Jan 7, 2026
603295e
Minor update of vulnserver testing
stamparm Jan 8, 2026
2e00154
Fixing thread-safety in getHeuristicCharEncoding
stamparm Jan 8, 2026
65ce6ba
Implementing CSRF case into vuln testing
stamparm Jan 8, 2026
e2534b3
Adding test check for --titles
stamparm Jan 8, 2026
363a405
Minor update
stamparm Jan 8, 2026
7bc3741
Minor patch
stamparm Jan 8, 2026
bc0d2a1
Minor update
stamparm Jan 9, 2026
a995e1a
Minor update of vuln testing
stamparm Jan 10, 2026
e9a9d90
Minor patch to MsSQL fingerprinting
stamparm Jan 11, 2026
279a9b3
Added "Snowflake" DBMS support (#5980)
GoonTools Jan 12, 2026
fd9045c
Fixing python2 compatibility issue (#5980)
stamparm Jan 12, 2026
29c5117
Bump some years in headers
stamparm Jan 12, 2026
b0feb2a
Minor update (#5980)
stamparm Jan 12, 2026
b5a1f6f
Lots of fixes for Snowflake implementation (#5980)
stamparm Jan 12, 2026
1da33b9
Some more fixes for Snowflake implementation (#5980)
stamparm Jan 12, 2026
04bf68f
Fixes #6005
stamparm Jan 12, 2026
3d70e25
Trivial update
stamparm Jan 12, 2026
88f22c3
Heuristic checks for Snowflake implementation (#5980)
stamparm Jan 12, 2026
9e29d7a
Fixing a typo for Snowflake implementation (#5980)
stamparm Jan 12, 2026
07aa7f9
Adding support for --hostname to Snowflake implementation (#5980)
stamparm Jan 12, 2026
ef6c3d4
Adding support for --statements to Snowflake implementation (#5980)
stamparm Jan 12, 2026
f36d040
Adding support for --privileges to Snowflake implementation (#5980)
stamparm Jan 12, 2026
8c63d4c
Minor patch for Snowflake implementation (#5980)
stamparm Jan 12, 2026
7c4e424
Minor update of years
stamparm Jan 12, 2026
38f3f16
Minor update of common-outputs.txt
stamparm Jan 12, 2026
89d4789
Minor patch
stamparm Jan 13, 2026
d4349a8
Minor patch
stamparm Jan 13, 2026
ab7ce92
Minor update
stamparm Jan 13, 2026
636c12b
Adding missing alias for DM8 (#5894)
stamparm Jan 14, 2026
05f2e17
Fixes #6006
stamparm Jan 16, 2026
d5cd281
Minor patch
stamparm Jan 16, 2026
9d18c81
Implementing lazy load for connector modules
stamparm Jan 16, 2026
c57f461
Minor update
stamparm Jan 16, 2026
5224a3a
Update of Bottle version
stamparm Jan 16, 2026
264095a
Removing some dead code
stamparm Jan 16, 2026
648752c
Couple of patches
stamparm Jan 17, 2026
568e9f0
Bug fix
stamparm Jan 17, 2026
57047ba
Minor update
stamparm Jan 17, 2026
e62e8c6
Minor patch
stamparm Jan 17, 2026
d9102e0
Moving binary to textual file openings
stamparm Jan 17, 2026
9063c21
Fixes #6007
stamparm Jan 18, 2026
21d0c67
Minor update
stamparm Jan 18, 2026
876f141
Update of tests' workflow
stamparm Jan 23, 2026
e6e1bdc
Minor improvement
stamparm Jan 26, 2026
657eb46
Minor update
stamparm Jan 26, 2026
f31ea1e
Minor improvement of BigArray's iter
stamparm Jan 27, 2026
51b5682
Minor improvement of getRevisionNumber logic
stamparm Jan 27, 2026
72fcb66
Minor improvement of AttribDict logic
stamparm Jan 27, 2026
1a97d9e
Removing some deprecated components
stamparm Jan 28, 2026
caccfe8
Minor patch for DNS cache
stamparm Jan 28, 2026
e9e0b6a
Minor optimization of headersParser logic
stamparm Jan 28, 2026
683c258
Trivial optimization of BigArray
stamparm Jan 28, 2026
600823f
Minor improvement of BigArray
stamparm Jan 28, 2026
362f7aa
Minor optimization of findMultipartPostBoundary
stamparm Jan 28, 2026
fbee649
Minor optimization of chunkSplitPostData
stamparm Jan 28, 2026
cd6e2f1
Minor optimization of randomizeParameterValue
stamparm Jan 28, 2026
0ce9d4a
Minor update
stamparm Jan 28, 2026
fcd3eae
Fixing checkSameHost to work with IPv6 addresses
stamparm Jan 28, 2026
b54929a
Minor optimization of prioritySortColumns
stamparm Jan 28, 2026
ebfc481
Removing some dummy blanks
stamparm Jan 28, 2026
cb36ff7
Minor optimization of _setSocketPreConnect
stamparm Jan 28, 2026
7767999
Minor improvement
stamparm Jan 28, 2026
8a97346
Bug fix
stamparm Jan 28, 2026
2172aea
Speed up of HashDB related operations
stamparm Jan 28, 2026
a4c1afa
Speed optimization of HashDB
stamparm Jan 28, 2026
c871a37
Demotion of MySQL/FLOOR payloads
stamparm Jan 28, 2026
7be7240
Promotion of MySQL/GTID_SUBSET payloads
stamparm Jan 28, 2026
60950bc
Changing order of MySQL error-based payloads
stamparm Jan 28, 2026
360dc47
Normalization of CRLF inside checkSums
stamparm Jan 28, 2026
f7fb153
Adding some better heuristics into the checkSums
stamparm Jan 28, 2026
00ca27c
Adding back a removed break
stamparm Jan 28, 2026
914b449
Fixing CI/CD issues
stamparm Jan 29, 2026
c8ccc31
Simplifying cachedmethod
stamparm Jan 30, 2026
d54907d
Improving keep-alive support
stamparm Feb 1, 2026
5640ba7
Fixing AttribDict/pickle issue
stamparm Feb 1, 2026
f08f860
Minor patch
stamparm Feb 1, 2026
96645de
Minor patch for sitemap parsing
stamparm Feb 1, 2026
4af3195
Fixing CI/CD issues with keep-alive
stamparm Feb 2, 2026
4a913d2
Minor update
stamparm Feb 2, 2026
ea0783d
Minor update of PostgreSQL aggregate payload
stamparm Feb 2, 2026
9785187
Minor optimization
stamparm Feb 3, 2026
be07aea
Minor patch
stamparm Feb 3, 2026
49ef9d6
Releasing the pressure on CI/CD
stamparm Feb 3, 2026
f00e8f5
Minor optimization
stamparm Feb 3, 2026
2e6820f
Doing some fine tuning for WAF detection
stamparm Feb 3, 2026
2b6115c
Minor optimization of socket preconnect
stamparm Feb 3, 2026
9312d26
Make XML/HTML encoding in SOAP requests optional (#6015)
soffensive Feb 5, 2026
b1e36c6
Minor update for #6015
stamparm Feb 5, 2026
5a097c7
Minor refresh of cloaked files
stamparm Feb 5, 2026
0b5eb37
Fixes #6017
stamparm Feb 17, 2026
dbe45a4
Minor patch
stamparm Feb 17, 2026
d2106f2
fix: close when throw exception (#6019)
cuiweixie Feb 21, 2026
959ba63
Minor update
stamparm Feb 21, 2026
c2f8697
Fixes #6022
stamparm Feb 26, 2026
b93bc51
Minor improvement of ERROR_PARSING_REGEXES
stamparm Mar 10, 2026
bbadc0d
Dummy update
stamparm Mar 10, 2026
083f54b
Minor refactoring
stamparm Mar 10, 2026
56f02e5
Fixes #6029
stamparm Mar 11, 2026
3fe094a
Minor patch related to #6029
stamparm Mar 11, 2026
7ad4d67
Fixes #6033
stamparm Mar 13, 2026
79c9db1
Adding support for Spanner DBMS (#6025)
stamparm Mar 14, 2026
3c16bfd
Dummy update
stamparm Mar 14, 2026
eeb16d1
Adding missing Spanner directory (#6025)
stamparm Mar 15, 2026
4bb7644
Changing the dubious CoC
stamparm Mar 17, 2026
e433332
Minor update
stamparm Mar 18, 2026
0ed5cd2
Fixes #6037
stamparm Mar 20, 2026
c310c69
Fixes #6040
stamparm Mar 30, 2026
3ae174a
Fixes #6043
stamparm Apr 9, 2026
c20c718
Minor refactoring
stamparm Apr 15, 2026
6084129
Implementing safe(r) pickle loads
stamparm Apr 15, 2026
93cbbc2
Hiding --alert behind SQLMAP_UNSAFE_ALERT
stamparm Apr 15, 2026
39b8ff4
Patch for #6049
stamparm Apr 17, 2026
fdf6673
Dealing with some pesky issues
stamparm Apr 23, 2026
3cec18f
Expanding RESTAPI_UNSUPPORTED_OPTIONS
stamparm Apr 23, 2026
2b2796d
Minor expansion of blacklisted pickle methods
stamparm Apr 23, 2026
5e5629c
Revert of last commit
stamparm Apr 23, 2026
dec5a82
Adding 'safe string cmp' to API
stamparm Apr 23, 2026
09aaa9b
Implementing SQLMAP_UNSAFE_EVAL
stamparm Apr 23, 2026
e40a9a3
Fixing the CI/CD
stamparm Apr 23, 2026
cc74bdf
Update of settings for exception reporting
stamparm Apr 24, 2026
41330aa
Making stuff boring for P3 lurkers
stamparm Apr 24, 2026
4489b2c
fix: add missing import in lib.utils.api (#6055)
p-l- May 2, 2026
026e5d0
Fix stdoutEncode mangling non-string values used by REST API (#6054) …
ChrisJr404 May 2, 2026
dfbba62
Minor update
stamparm May 2, 2026
1a6a5b1
Fixes #6059
stamparm May 8, 2026
d77e925
Minor update
stamparm May 8, 2026
e659543
Fixing a potential deflate issues
stamparm May 15, 2026
5a12bd2
Fix WebSocket request traffic logging
stamparm Jun 2, 2026
220a75b
Support colon character in direct DBMS passwords
stamparm Jun 2, 2026
c07b156
Fix retry-on check on empty response
stamparm Jun 2, 2026
36c55a3
Handle unknown WebSocket status codes
stamparm Jun 2, 2026
aa0fb23
Normalize default WebSocket ports
stamparm Jun 2, 2026
bc252ef
Handle unicode strings in color stripping
stamparm Jun 2, 2026
8258d6d
Strip Brotli from Accept-Encoding header
stamparm Jun 2, 2026
fadf5bb
Honor injected Host header value
stamparm Jun 2, 2026
bfe39d0
Fix WebSocket request header formatting
stamparm Jun 2, 2026
8cac5fd
Fix forced SSL port rewrite
stamparm Jun 2, 2026
4caeff9
Preserve equals signs in answer values
stamparm Jun 2, 2026
b30c169
Avoid eval processing crash on JSON arrays
stamparm Jun 2, 2026
762037e
Fix ineffective chardet MINIMUM_THRESHOLD patch (#6024)
potato-20 Jun 4, 2026
d373eea
Fixing shitty concat2concatws tamper script
stamparm Jun 4, 2026
ae851d9
Fixing versioned tamper scripts
stamparm Jun 4, 2026
06b74f9
Minor update of random tamper scripts
stamparm Jun 4, 2026
f564db0
Minor correction of quote mechanism in tamper scripts
stamparm Jun 4, 2026
2c356ed
Minor fix of space2 tamper scripts
stamparm Jun 4, 2026
2f4ff0d
Minor patches to tamper scripts
stamparm Jun 4, 2026
0d4aff7
Fixing MySQL stacked file reading
stamparm Jun 4, 2026
a20f930
Fixing MsSQL stacked file write
stamparm Jun 4, 2026
6d1382f
Minor patch for MaxDB and Sybase enumeration
stamparm Jun 4, 2026
46ba1d1
Fixing stacked writing for PgSQL
stamparm Jun 4, 2026
4f42579
Fixing Java-based connectors
stamparm Jun 4, 2026
244d283
Minor patch for stacked file writing in HSQLDB
stamparm Jun 4, 2026
3d0932c
Minor patch for MsSQL stacked file reading
stamparm Jun 4, 2026
b3f3405
Minor patch for Oracle's readFile
stamparm Jun 4, 2026
8d91c65
Minor patch for --parse-errors logic
stamparm Jun 4, 2026
10282a3
Fixing Set-Cookie handling in redirection responses
stamparm Jun 4, 2026
249d2a6
Fixing mime-type recognition in dumped values
stamparm Jun 4, 2026
195c4be
Further improving Set-Cookie logic in redirections
stamparm Jun 4, 2026
b67ea8f
Minor fix
stamparm Jun 4, 2026
3e8a69c
Minor patch
stamparm Jun 4, 2026
cfd9309
Minor patch
stamparm Jun 4, 2026
85a71c2
Minor patch
stamparm Jun 4, 2026
89d6b94
Patches #6068
stamparm Jun 5, 2026
5e4ddcc
Minor patch
stamparm Jun 5, 2026
8110ccb
Bug fix for xp_cmdshell in boolean techniques
stamparm Jun 5, 2026
69efd62
Couple of small fixes
stamparm Jun 5, 2026
7dc414b
Minor update for sqlmap API task_delete
stamparm Jun 5, 2026
b702cba
Implementing MAX_CONNECTION_TOTAL_SIZE check for websocket responses
stamparm Jun 5, 2026
c6d272b
Minor patch for HTTP/2 connections (with error responses)
stamparm Jun 5, 2026
d96ac7c
Minor patch
stamparm Jun 5, 2026
5708696
Bug fix for cracking of Base64 hashes on DREI
stamparm Jun 5, 2026
dca0bb6
Patching some more unsafe unpickling
stamparm Jun 5, 2026
0ac9883
Minor patch
stamparm Jun 5, 2026
5a4a8ee
Minor patch
stamparm Jun 5, 2026
8a19966
Minor patch for parsePasswordHash
stamparm Jun 5, 2026
899447f
Improvement of compat/LooseVersion
stamparm Jun 5, 2026
430399c
Minor improvement of BigArray/pop()
stamparm Jun 5, 2026
e48cce3
Minor just in case patch for BigArray
stamparm Jun 5, 2026
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
The table of contents is too big for display.
Diff view
Diff view
  •  
  •  
  •  
8 changes: 8 additions & 0 deletions .gitattributes
Original file line number Diff line number Diff line change
@@ -1,8 +1,16 @@
*.conf text eol=lf
*.json text eol=lf
*.html text eol=lf
*.md text eol=lf
*.md5 text eol=lf
*.pl text eol=lf
*.py text eol=lf
*.sh text eol=lf
*.sql text eol=lf
*.txt text eol=lf
*.xml text eol=lf
*.yaml text eol=lf
*.yml text eol=lf
LICENSE text eol=lf
COMMITMENT text eol=lf

Expand Down
48 changes: 12 additions & 36 deletions .github/CODE_OF_CONDUCT.md
Original file line number Diff line number Diff line change
@@ -1,46 +1,22 @@
# Contributor Covenant Code of Conduct
# Code of Conduct

## Our Pledge
## Our Goal

In the interest of fostering an open and welcoming environment, we as contributors and maintainers pledge to making participation in our project and our community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
The sqlmap project provides a professional, technical environment for contributors. We prioritize technical excellence and respectful collaboration.

## Our Standards
## Standards

Examples of behavior that contributes to creating a positive environment include:
Contributors are expected to:

* Using welcoming and inclusive language
* Being respectful of differing viewpoints and experiences
* Gracefully accepting constructive criticism
* Focusing on what is best for the community
* Showing empathy towards other community members
* Be respectful and professional in all communications.
* Focus on the technical merits of the project.
* Gracefully accept constructive criticism.

Examples of unacceptable behavior by participants include:
Unacceptable behavior includes:

* The use of sexualized language or imagery and unwelcome sexual attention or advances
* Trolling, insulting/derogatory comments, and personal or political attacks
* Public or private harassment
* Publishing others' private information, such as a physical or electronic address, without explicit permission
* Other conduct which could reasonably be considered inappropriate in a professional setting

## Our Responsibilities

Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.

Project maintainers have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, or to ban temporarily or permanently any contributor for other behaviors that they deem inappropriate, threatening, offensive, or harmful.

## Scope

This Code of Conduct applies both within project spaces and in public spaces when an individual is representing the project or its community. Examples of representing a project or community include using an official project e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event. Representation of a project may be further defined and clarified by project maintainers.
* Harassment, personal attacks, or doxxing.
* Any behavior that disrupts the technical progress of the project.

## Enforcement

Instances of abusive, harassing, or otherwise unacceptable behavior may be reported by contacting the project team at dev@sqlmap.org. The project team will review and investigate all complaints, and will respond in a way that it deems appropriate to the circumstances. The project team is obligated to maintain confidentiality with regard to the reporter of an incident. Further details of specific enforcement policies may be posted separately.

Project maintainers who do not follow or enforce the Code of Conduct in good faith may face temporary or permanent repercussions as determined by other members of the project's leadership.

## Attribution

This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4, available at [http://contributor-covenant.org/version/1/4][version]

[homepage]: http://contributor-covenant.org
[version]: http://contributor-covenant.org/version/1/4/
The project maintainers have sole authority to moderate discussions and contributions. Decisions are made at the maintainers' discretion to ensure the project remains a focused and productive environment. Reports can be sent to `dev@sqlmap.org`.
23 changes: 18 additions & 5 deletions .github/workflows/tests.yml
Original file line number Diff line number Diff line change
Expand Up @@ -9,17 +9,30 @@ jobs:
runs-on: ${{ matrix.os }}
strategy:
matrix:
os: [ubuntu-latest, macos-latest, windows-latest]
python-version: [ '2.x', '3.11', 'pypy-2.7', 'pypy-3.7' ]
include:
- os: ubuntu-latest
python-version: "pypy-2.7"
- os: macos-latest
python-version: "3.8"
- os: windows-latest
python-version: "3.14"

steps:
- uses: actions/checkout@v2
- name: Set up Python
uses: actions/setup-python@v2
- name: Checkout code
uses: actions/checkout@v4
with:
fetch-depth: 1

- name: Set up Python ${{ matrix.python-version }}
uses: actions/setup-python@v5
with:
python-version: ${{ matrix.python-version }}

- name: Basic import test
run: python -c "import sqlmap; import sqlmapapi"

- name: Smoke test
run: python sqlmap.py --smoke

- name: Vuln test
run: python sqlmap.py --vuln
3 changes: 2 additions & 1 deletion .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -5,4 +5,5 @@ __pycache__/
traffic.txt
*~
req*.txt
.idea/
.idea/
.aider*
Loading