2024-04-01 09:21:47 +05:30
|
|
|
#### 2.2.5
|
|
|
|
|
- Skip scanning of non-webpage urls
|
|
|
|
|
- Various bug fixes
|
|
|
|
|
|
2023-11-16 18:00:17 +05:30
|
|
|
#### 2.2.2
|
|
|
|
|
- Probing improvements
|
|
|
|
|
- Fix "target is misbehaving" errors
|
|
|
|
|
- Variable chunk size depending on HTTP method
|
|
|
|
|
- Improved heuristics
|
|
|
|
|
- Allow up to 20 "server fault" errors
|
|
|
|
|
|
2022-09-11 14:36:51 +05:30
|
|
|
#### 2.2.0
|
|
|
|
|
- Ability to detect parameters that respond to a certain value e.g. "?debug=yes"
|
|
|
|
|
- Added "required parameter" detection
|
|
|
|
|
- Heuristic can now extract words out of json/text responses
|
|
|
|
|
- Fixed -oB option description
|
|
|
|
|
|
2022-09-11 02:57:13 +05:30
|
|
|
#### 2.1.6
|
2022-09-11 03:04:43 +05:30
|
|
|
- Fixed multiple breaking bugs
|
2022-09-11 02:57:13 +05:30
|
|
|
- Export results as they come in multi-target mode
|
2022-09-11 03:04:43 +05:30
|
|
|
- Various improvements to output in multi-target mode
|
|
|
|
|
- changed default chunk size 300->500 and threads to 2->5
|
2022-09-11 02:57:13 +05:30
|
|
|
|
2022-04-09 22:13:57 +05:30
|
|
|
#### 2.1.5
|
|
|
|
|
- Fixed header comparison (will fix infinite bruteforce on some targets)
|
|
|
|
|
- Fixed catastrophic backtracking in some regexes (arjun used to get stuck)
|
|
|
|
|
- New logic for handling redirections
|
|
|
|
|
- `--disable-redirects` option
|
|
|
|
|
|
2021-06-15 22:17:51 +05:30
|
|
|
#### 2.1.4
|
2021-06-15 22:19:56 +05:30
|
|
|
- Fixed file-paths not being windows compatible
|
|
|
|
|
- Fixed and improved JavaScript heuristics scanning
|
2021-06-15 22:17:51 +05:30
|
|
|
- Fixed missing ampersands in `-oT` output
|
|
|
|
|
- Refactoring of help options and code
|
|
|
|
|
|
2021-05-17 19:51:15 +05:30
|
|
|
#### 2.1.3
|
|
|
|
|
- Fixed memory exhaustion bug
|
|
|
|
|
- Fixed parsing of raw HTTP files
|
|
|
|
|
- Added new detection factor: `number of lines`
|
|
|
|
|
- Failed retries are now handled properly
|
|
|
|
|
|
2021-03-11 23:14:19 +05:30
|
|
|
#### 2.1.2
|
|
|
|
|
- Minor code cleanup
|
|
|
|
|
- Fixed `--headers` option
|
|
|
|
|
|
2021-03-11 06:29:10 +05:30
|
|
|
#### 2.1.1
|
|
|
|
|
- Fixed circular import
|
|
|
|
|
- Fixed BurpSuite export
|
|
|
|
|
- Fixed not working headers
|
|
|
|
|
- Better response type checking
|
|
|
|
|
- Fixed wordlist error on Windows
|
|
|
|
|
- Fixed `Content-Type` header bug
|
|
|
|
|
|
2021-02-07 19:43:30 +05:30
|
|
|
#### 2.1.0
|
|
|
|
|
- Added `XML` method
|
|
|
|
|
- `-q` option for quiet mode
|
|
|
|
|
- New wordlists backed by research
|
|
|
|
|
- `-oT` option for txt export
|
|
|
|
|
- `-oB` option for BurpSuite export
|
|
|
|
|
- `-oJ` alias for JSON export
|
|
|
|
|
- Added support for custom injection point in `XML` and `JSON`
|
|
|
|
|
- pypi package
|
|
|
|
|
|
2020-12-06 15:28:59 +05:30
|
|
|
#### 2.0-beta
|
2021-07-13 14:18:21 +02:00
|
|
|
- Added an anomaly detection algorithm with 9 factors
|
2020-12-06 15:28:59 +05:30
|
|
|
- Added a HTTP response analyzer for handling errors and retrying requests
|
|
|
|
|
- Significantly improved heuristic scanner
|
|
|
|
|
- `--passive` option for collecting parameters from otx, commoncrawl and archive.org
|
|
|
|
|
- `-c` option to define number of parameters to be sent at once
|
|
|
|
|
- import via `-i` options now supports: BurpSuite log, raw request file, text file with urls
|
|
|
|
|
- `-T` option to specify HTTP connection timeout
|
2022-09-29 22:22:17 +08:00
|
|
|
- combined `-m` option for specifying HTTP request method
|
2020-12-06 15:28:59 +05:30
|
|
|
- Various bug fixes and better output
|
|
|
|
|
|
2019-10-23 13:15:41 +05:30
|
|
|
#### 1.6
|
2019-10-23 13:15:27 +05:30
|
|
|
- `--stable` switch for handling rate limits
|
|
|
|
|
- Include empty JS variables for testing
|
|
|
|
|
- Various optimizations and bug fixes
|
|
|
|
|
- Handle keyboard interruption
|
|
|
|
|
- Removed redundant code
|
|
|
|
|
|
2019-07-02 13:59:59 +05:30
|
|
|
#### 1.5
|
|
|
|
|
- Ignore dynamic content
|
|
|
|
|
- Detect int-only parameters
|
|
|
|
|
- Include URL in json output
|
|
|
|
|
- Track each reflection separately
|
|
|
|
|
- Improved error handling
|
|
|
|
|
|
2019-04-12 19:45:55 +05:30
|
|
|
#### 1.4
|
2019-04-12 19:20:02 +05:30
|
|
|
- Added `JSON` support
|
|
|
|
|
- Fixed a major bug in detection logic
|
|
|
|
|
- `-o` option to save result to a file
|
|
|
|
|
- `--urls` option to scan list of URLs
|
|
|
|
|
- Ability to supply HTTP headers from CLI
|
|
|
|
|
|
|
|
|
|
#### 1.3
|
|
|
|
|
- improved logic
|
|
|
|
|
- detection by plain-text content matching
|
|
|
|
|
- `--include` switch to include persistent data
|
|
|
|
|
- fixed a bug that caused user supplied HTTP headers to have no effect
|
|
|
|
|
|
|
|
|
|
#### 1.2-beta
|
|
|
|
|
- Drastic performance improvement (x50 faster)
|
|
|
|
|
|
|
|
|
|
#### 1.1
|
|
|
|
|
Initial stable release
|
