2021-06-15 22:17:51 +05:30
|
|
|
#### 2.1.4
|
2021-06-15 22:19:56 +05:30
|
|
|
- Fixed file-paths not being windows compatible
|
|
|
|
|
- Fixed and improved JavaScript heuristics scanning
|
2021-06-15 22:17:51 +05:30
|
|
|
- Fixed missing ampersands in `-oT` output
|
|
|
|
|
- Refactoring of help options and code
|
|
|
|
|
|
2021-05-17 19:51:15 +05:30
|
|
|
#### 2.1.3
|
|
|
|
|
- Fixed memory exhaustion bug
|
|
|
|
|
- Fixed parsing of raw HTTP files
|
|
|
|
|
- Added new detection factor: `number of lines`
|
|
|
|
|
- Failed retries are now handled properly
|
|
|
|
|
|
2021-03-11 23:14:19 +05:30
|
|
|
#### 2.1.2
|
|
|
|
|
- Minor code cleanup
|
|
|
|
|
- Fixed `--headers` option
|
|
|
|
|
|
2021-03-11 06:29:10 +05:30
|
|
|
#### 2.1.1
|
|
|
|
|
- Fixed circular import
|
|
|
|
|
- Fixed BurpSuite export
|
|
|
|
|
- Fixed not working headers
|
|
|
|
|
- Better response type checking
|
|
|
|
|
- Fixed wordlist error on Windows
|
|
|
|
|
- Fixed `Content-Type` header bug
|
|
|
|
|
|
2021-02-07 19:43:30 +05:30
|
|
|
#### 2.1.0
|
|
|
|
|
- Added `XML` method
|
|
|
|
|
- `-q` option for quiet mode
|
|
|
|
|
- New wordlists backed by research
|
|
|
|
|
- `-oT` option for txt export
|
|
|
|
|
- `-oB` option for BurpSuite export
|
|
|
|
|
- `-oJ` alias for JSON export
|
|
|
|
|
- Added support for custom injection point in `XML` and `JSON`
|
|
|
|
|
- pypi package
|
|
|
|
|
|
2020-12-06 15:28:59 +05:30
|
|
|
#### 2.0-beta
|
|
|
|
|
- Added an anamoly detection algorithm with 9 factors
|
|
|
|
|
- Added a HTTP response analyzer for handling errors and retrying requests
|
|
|
|
|
- Significantly improved heuristic scanner
|
|
|
|
|
- `--passive` option for collecting parameters from otx, commoncrawl and archive.org
|
|
|
|
|
- `-c` option to define number of parameters to be sent at once
|
|
|
|
|
- import via `-i` options now supports: BurpSuite log, raw request file, text file with urls
|
|
|
|
|
- `-T` option to specify HTTP connection timeout
|
|
|
|
|
- combined `-m` option for specifiying HTTP request method
|
|
|
|
|
- Various bug fixes and better output
|
|
|
|
|
|
2019-10-23 13:15:41 +05:30
|
|
|
#### 1.6
|
2019-10-23 13:15:27 +05:30
|
|
|
- `--stable` switch for handling rate limits
|
|
|
|
|
- Include empty JS variables for testing
|
|
|
|
|
- Various optimizations and bug fixes
|
|
|
|
|
- Handle keyboard interruption
|
|
|
|
|
- Removed redundant code
|
|
|
|
|
|
2019-07-02 13:59:59 +05:30
|
|
|
#### 1.5
|
|
|
|
|
- Ignore dynamic content
|
|
|
|
|
- Detect int-only parameters
|
|
|
|
|
- Include URL in json output
|
|
|
|
|
- Track each reflection separately
|
|
|
|
|
- Improved error handling
|
|
|
|
|
|
2019-04-12 19:45:55 +05:30
|
|
|
#### 1.4
|
2019-04-12 19:20:02 +05:30
|
|
|
- Added `JSON` support
|
|
|
|
|
- Fixed a major bug in detection logic
|
|
|
|
|
- `-o` option to save result to a file
|
|
|
|
|
- `--urls` option to scan list of URLs
|
|
|
|
|
- Ability to supply HTTP headers from CLI
|
|
|
|
|
|
|
|
|
|
#### 1.3
|
|
|
|
|
- improved logic
|
|
|
|
|
- detection by plain-text content matching
|
|
|
|
|
- `--include` switch to include persistent data
|
|
|
|
|
- fixed a bug that caused user supplied HTTP headers to have no effect
|
|
|
|
|
|
|
|
|
|
#### 1.2-beta
|
|
|
|
|
- Drastic performance improvement (x50 faster)
|
|
|
|
|
|
|
|
|
|
#### 1.1
|
|
|
|
|
Initial stable release
|
