Commit Graph

63 Commits (59305d7570c8fbbb04a324e869ec9a196c150936)

Author SHA1 Message Date
Swissky 59305d7570 Fix parameters order in requester + batching queries 2023-03-11 23:34:56 +01:00
Swissky e4eeaa372a
Merge pull request #44 from schoobydrew/arg-fix
update exec_advanced call to use self.url attr instead of func args value
2023-01-24 12:47:36 +01:00
Swissky eb38a151e4
Merge pull request #45 from adindrabkin/mutation_args-fstring
mutation_args f-string to prevent TypeError
2023-01-24 12:36:46 +01:00
Swissky 3a6bb8c03d
Merge pull request #43 from fabaff/patch-1
Remove argparse
2023-01-24 12:34:54 +01:00
Swissky 344a00210e
Merge pull request #40 from arthur4ires/patch-4
fix: KeyError: 'data'
2023-01-24 12:34:33 +01:00
Swissky 4beaab344e
Merge pull request #48 from InfoSec-Le/master
fix: small error
2023-01-24 12:30:38 +01:00
0xflotus a0334aa1d0
Merge pull request #1 from InfoSec-Le/0xflotus-patch-1
fix: small error
2023-01-16 23:04:44 +01:00
0xflotus 81c6631d54
fix: small error 2023-01-16 23:04:33 +01:00
adindrabkin 145970261b
Skip args where args_ttype is None
The try-catch block at line 62 allows args_ttype to be None. Line 74 was updated to an f-string to convert None to str(None) to prevent the program from crashing.

Recently ran into this issue when testing a development environment which caused a None type to appear. Changing to an f-string mitigated this issue and allowed for enumeration to continue.
2022-07-24 16:44:33 -04:00
schoobydrew 5a3fa0c86a
update exec_advanced call to use self.url attr instead of func args value 2022-06-27 15:55:10 -05:00
Fabian Affolter 36beddc9e4
Remove argparse 2022-06-14 22:59:46 +02:00
Arthur A 2a559778e5
fix: KeyError: 'data'
In some cases it is not possible to download the schema, in this case I added a condition to not return an error.
2022-02-21 02:07:19 -03:00
Swissky 98997bd7cf Query suggestion for GraphQL mutations 2022-01-17 20:46:40 +01:00
Swissky 08413ed409 GraphQLmap Package 2022-01-17 16:22:22 +01:00
Swissky 7df7ae26a8
Merge pull request #28 from m-veljkovic/patch-1
Update utils.py
2022-01-17 16:08:28 +01:00
Swissky 26eb9758c4 Fix #29 - Time Import 2022-01-17 16:05:40 +01:00
Swissky 41d779b998 GraphQL Docker link + README update + Proxy support 2022-01-17 14:42:18 +01:00
Milan Veljkovic ba4869b777
Update utils.py 2021-03-17 16:49:57 +01:00
Swissky b77bf7339a
Update FUNDING.yml 2021-01-08 20:51:33 +01:00
Swissky 87b56264a6
Merge pull request #24 from onSec-fr/master
Update utils.py
2020-10-05 20:32:19 +02:00
Swissky 88dd1c240a
Merge pull request #20 from orangecms/feature/json
JSON payload support
2020-10-05 20:31:34 +02:00
Swissky d2d4b156ba
Merge pull request #19 from orangecms/master
use env in shebang
2020-10-05 20:26:04 +02:00
Antoine.L f303286b90
Update utils.py
Fix : missing headers for GET requests.
2020-05-22 15:13:13 +02:00
Daniel Maslowski b98ccd0edd support sending JSON-encoded payloads 2020-05-14 20:31:55 +02:00
Daniel Maslowski f46864899e use env in shebang 2020-05-14 00:55:51 +02:00
Swissky 8beca5922b
Merge pull request #17 from onSec-fr/master
Update attacks.py
2020-04-25 21:13:48 +02:00
onSec-fr 6176bd3afc Update attacks.py
#Change : blind_nosql
#Benefits : It can find the full value without knowing its length + Avoid infinite loops.
-Removed the "data_size" parameter. Now it stops searching as soon as it no longer finds valid characters.
-Add : Ability to set a custom charset.
2020-04-22 11:32:48 +02:00
Swissky 181b05e222
Merge pull request #13 from garanews/patch-1
fix github link
2020-04-08 10:24:48 +02:00
garanews 51ce067259
fix github link
fix github link, otherwise copy paste would not work.
2020-02-13 15:58:10 +01:00
Swissky 1b674c2ad0
Merge pull request #12 from fuomag9/windows-support
Added experimental windows support and requirements.txt
2020-02-07 14:57:28 +01:00
fuomag9 3445646bcc Update dump command to dump_new in documentation 2020-02-07 14:24:48 +01:00
fuomag9 32d639a09f Added requirements.txt 2020-02-07 14:24:03 +01:00
fuomag9 15c1afa5ec Add windows support (experimental) 2020-02-07 14:23:57 +01:00
Swissky f0b190a86e
Merge pull request #9 from Naategh/master
Disable InsecureRequestWarning
2020-02-07 14:16:57 +01:00
Swissky c6c8242957
Merge pull request #11 from fuomag9/refractoring
Refractored code, removed unused variables and optimized imports
2020-02-07 14:16:24 +01:00
fuomag9 450f9d4aca Optimized imports 2020-02-05 13:22:13 +01:00
fuomag9 3256a11bad Refractored another URL to url 2020-02-05 13:19:57 +01:00
fuomag9 287d94cf3c Avoid shadowing args argument from outer scope 2020-02-05 13:18:50 +01:00
fuomag9 c46724ea5e changed except to except a generic Exception (more info needed on which exceptions to catch) 2020-02-05 13:17:28 +01:00
fuomag9 8e010abb9a Refractor not in 2020-02-05 13:16:32 +01:00
fuomag9 43bedb6ca6 Removed unused variables 2020-02-05 13:15:54 +01:00
fuomag9 6b24a5c2cb Removed unused r variable and refractored one more URL I forgot to refractor 2020-02-05 13:14:01 +01:00
fuomag9 0701262cde Refractored various URL to url 2020-02-05 13:12:24 +01:00
fuomag9 7bda3f8097 Renamed GRAPHQL_CHARSET variable to lowercase 2020-02-05 13:11:04 +01:00
fuomag9 7e54b1e1a6 Refractored headers parameter and renamed URL to url in exec_graphql 2020-02-05 13:09:42 +01:00
fuomag9 ff54061234 Formatted attacks.py and renamed URL parameter of dump_schema to url 2020-02-05 13:06:53 +01:00
fuomag9 e9d51be625 Formatted utils.py 2020-02-05 13:06:13 +01:00
fuomag9 7348c93588 Formatted graphqlmap 2020-02-05 13:05:56 +01:00
fuomag9 fdb86fc609 Update .gitignore 2020-02-05 13:05:29 +01:00
Swissky 1231334c74
Merge pull request #10 from waristea/add_header_1
Add option to add header to requests made
2020-02-04 10:21:17 +01:00