Skip to content

summit v0.6.2 - time-based SQLi, GraphQL introspection, expanded mining

Choose a tag to compare

View all tags
@incr3d1ble incr3d1ble released this 16 Oct 03:49
· 7 commits to main since this release
v0.6.2
84e24d2

Two new detection families and two expanded surfaces:

  • time-based blind SQL injection (CWE-89): MySQL/PostgreSQL/MSSQL delay payloads, baseline measured twice, every probe repeated, all probes must exceed the calibrated threshold. Always potential - network jitter can fake a delay and we say so. Measured on the demo: baseline 0.005s -> probes 0.25s, detected with a 0.2s threshold.
  • GraphQL introspection (CWE-200): common paths probed with a minimal __schema query (POST first, GET fallback); confirmed only when a real schema payload comes back. Measured: POST /graphql -> HTTP 200 with __schema.
  • param miner expanded: ~120 candidate parameter names from bug-bounty writeups and framework source.
  • sensitive paths expanded: /.git/HEAD and /.aws/credentials join the content-signature checks.

The concurrency evidence claim is now best-of-3 on each side - CI runners share CPUs and one noisy run must not fail a valid claim.

64 tests, evidence 21/21. CI green.

Assets 2
Loading