Files
Arjun/CHANGELOG.md

116 lines
3.4 KiB
Markdown
Raw Normal View History

2024-11-04 01:59:30 +05:30
#### 2.2.7
- Added `--casing` option for casing style enforcement
- Added `--ratelimit` option for explicitly defining requests/second
- Fixed "decrease chunk size/use --stable" type errors in some cases
- Fixed a bug in anamoly detection
2024-04-13 10:27:04 +05:30
#### 2.2.6
- Fixed Arjun getting infinitely stuck on some webpages
2024-04-01 09:21:47 +05:30
#### 2.2.5
- Skip scanning of non-webpage urls
- Various bug fixes
2023-11-16 18:00:17 +05:30
#### 2.2.2
- Probing improvements
- Fix "target is misbehaving" errors
- Variable chunk size depending on HTTP method
- Improved heuristics
- Allow up to 20 "server fault" errors
2022-09-11 14:36:51 +05:30
#### 2.2.0
- Ability to detect parameters that respond to a certain value e.g. "?debug=yes"
- Added "required parameter" detection
- Heuristic can now extract words out of json/text responses
- Fixed -oB option description
2022-09-11 02:57:13 +05:30
#### 2.1.6
2022-09-11 03:04:43 +05:30
- Fixed multiple breaking bugs
2022-09-11 02:57:13 +05:30
- Export results as they come in multi-target mode
2022-09-11 03:04:43 +05:30
- Various improvements to output in multi-target mode
- changed default chunk size 300->500 and threads to 2->5
2022-09-11 02:57:13 +05:30
2022-04-09 22:13:57 +05:30
#### 2.1.5
- Fixed header comparison (will fix infinite bruteforce on some targets)
- Fixed catastrophic backtracking in some regexes (arjun used to get stuck)
- New logic for handling redirections
- `--disable-redirects` option
2021-06-15 22:17:51 +05:30
#### 2.1.4
2021-06-15 22:19:56 +05:30
- Fixed file-paths not being windows compatible
- Fixed and improved JavaScript heuristics scanning
2021-06-15 22:17:51 +05:30
- Fixed missing ampersands in `-oT` output
- Refactoring of help options and code
2021-05-17 19:51:15 +05:30
#### 2.1.3
- Fixed memory exhaustion bug
- Fixed parsing of raw HTTP files
- Added new detection factor: `number of lines`
- Failed retries are now handled properly
2021-03-11 23:14:19 +05:30
#### 2.1.2
- Minor code cleanup
- Fixed `--headers` option
2021-03-11 06:29:10 +05:30
#### 2.1.1
- Fixed circular import
- Fixed BurpSuite export
- Fixed not working headers
- Better response type checking
- Fixed wordlist error on Windows
- Fixed `Content-Type` header bug
2021-02-07 19:43:30 +05:30
#### 2.1.0
- Added `XML` method
- `-q` option for quiet mode
- New wordlists backed by research
- `-oT` option for txt export
- `-oB` option for BurpSuite export
- `-oJ` alias for JSON export
- Added support for custom injection point in `XML` and `JSON`
- pypi package
2020-12-06 15:28:59 +05:30
#### 2.0-beta
2021-07-13 14:18:21 +02:00
- Added an anomaly detection algorithm with 9 factors
2020-12-06 15:28:59 +05:30
- Added a HTTP response analyzer for handling errors and retrying requests
- Significantly improved heuristic scanner
- `--passive` option for collecting parameters from otx, commoncrawl and archive.org
- `-c` option to define number of parameters to be sent at once
- import via `-i` options now supports: BurpSuite log, raw request file, text file with urls
- `-T` option to specify HTTP connection timeout
- combined `-m` option for specifying HTTP request method
2020-12-06 15:28:59 +05:30
- Various bug fixes and better output
2019-10-23 13:15:41 +05:30
#### 1.6
2019-10-23 13:15:27 +05:30
- `--stable` switch for handling rate limits
- Include empty JS variables for testing
- Various optimizations and bug fixes
- Handle keyboard interruption
- Removed redundant code
2019-07-02 13:59:59 +05:30
#### 1.5
- Ignore dynamic content
- Detect int-only parameters
- Include URL in json output
- Track each reflection separately
- Improved error handling
2019-04-12 19:45:55 +05:30
#### 1.4
2019-04-12 19:20:02 +05:30
- Added `JSON` support
- Fixed a major bug in detection logic
- `-o` option to save result to a file
- `--urls` option to scan list of URLs
- Ability to supply HTTP headers from CLI
#### 1.3
- improved logic
- detection by plain-text content matching
- `--include` switch to include persistent data
- fixed a bug that caused user supplied HTTP headers to have no effect
#### 1.2-beta
- Drastic performance improvement (x50 faster)
#### 1.1
Initial stable release