2019-04-08 13:48:44 +05:30
|
|
|
### 3.1.4
|
2019-04-08 13:52:52 +05:30
|
|
|
- Negligible DOM XSS false positives
|
|
|
|
|
- x10 Faster crawling by
|
|
|
|
|
- Removing additional request for detecting DOM XSS
|
|
|
|
|
- Skipping testing of a parameter multiple times
|
2019-04-08 13:48:44 +05:30
|
|
|
|
2019-04-06 21:58:26 +05:30
|
|
|
### 3.1.3
|
|
|
|
|
- Removed browser engine emulation
|
|
|
|
|
- Fixed a few bugs
|
|
|
|
|
- Added a plugin to scan for outdated JS libraries
|
|
|
|
|
- Improved crawling and DOM scanning
|
|
|
|
|
|
2018-12-31 04:43:38 +05:30
|
|
|
### 3.1.2
|
|
|
|
|
- Fixed POST data handling
|
|
|
|
|
- Support for JSON POST data
|
|
|
|
|
- Support for URL rewriting
|
|
|
|
|
- Cleaner crawling dashboard
|
|
|
|
|
- No more weird characters while scanning DOM
|
|
|
|
|
- Better DOM XSS scanning
|
|
|
|
|
- Handle unicode while writing to file
|
|
|
|
|
- Handle connection reset
|
|
|
|
|
- Added ability to add headers from command line
|
|
|
|
|
- Fixed issue which caused `foundParams` to not be tested
|
|
|
|
|
|
2018-11-21 20:37:48 +05:30
|
|
|
### 3.1.1
|
|
|
|
|
- Fixed a build breaking typo
|
|
|
|
|
|
2018-11-21 19:59:15 +05:30
|
|
|
### 3.1.0
|
|
|
|
|
- Various minor enhancements and bug fixes
|
|
|
|
|
- Browser engine integration for zero false positives
|
|
|
|
|
- Coverage of event handler context
|
|
|
|
|
|
2018-11-17 23:47:33 +05:30
|
|
|
### 3.0.5
|
|
|
|
|
|
|
|
|
|
- Fixed a bug in HTML Parser
|
|
|
|
|
- Ability to add urls from file
|
|
|
|
|
- More modular structure
|
|
|
|
|
- Show parameter name while bruteforcing
|
|
|
|
|
- Fix payload display while using POST method
|
|
|
|
|
|
2018-11-16 01:42:03 +05:30
|
|
|
### 3.0.4
|
|
|
|
|
|
|
|
|
|
- Fixed a bug in bruteforcer
|
|
|
|
|
- Fixed a major bug in HTML Parser
|
|
|
|
|
- Added progress bar for bruteforcer
|
|
|
|
|
- Code refactor
|
|
|
|
|
- Updated signature for Fortiweb WAF
|
|
|
|
|
|
2018-11-15 00:05:57 +05:30
|
|
|
### 3.0.3
|
|
|
|
|
|
|
|
|
|
- Minor bug fixes
|
|
|
|
|
- Proxy Support
|
|
|
|
|
- Blind XSS support
|
|
|
|
|
- Detection of up to 66 WAFs
|
|
|
|
|
|
|
|
|
|
### 3.0.2
|
|
|
|
|
|
|
|
|
|
- Ability to bruteforce payloads from a file
|
|
|
|
|
- Verbose output toggle
|
|
|
|
|
- Payload encoding: base64
|
|
|
|
|
- Handle MemoryError in DOM scanner
|
|
|
|
|
- Fixed a bug in bruteforcer
|
|
|
|
|
|
|
|
|
|
### 3.0.1
|
|
|
|
|
|
|
|
|
|
- Fixed poc generation
|
|
|
|
|
- Better multi js context injection
|
|
|
|
|
- Better wrong content type handling
|
|
|
|
|
- Handle high variance of context breakers
|
|
|
|
|
- Better efficiency check
|
|
|
|
|
- Fixed update mechanism
|
|
|
|
|
- Added license
|
|
|
|
|
- Added --skip switch
|
|
|
|
|
- Ignore SSL certificates
|
|
|
|
|
|
|
|
|
|
### 3.0.0
|
|
|
|
|
|
|
|
|
|
Production ready stable release with no known bugs
|
|
|
|
|
|
|
|
|
|
### 3.0-rc-1
|
|
|
|
|
|
|
|
|
|
- Removed redundant code & imports
|
|
|
|
|
- Disable colors in windows and mac
|
|
|
|
|
- Fixed user-agent overriding
|
|
|
|
|
- Handle wrong content type
|
|
|
|
|
- Multi-thread scanning
|
|
|
|
|
- Rewritten JavaScript parser to be more accurate
|
|
|
|
|
- Handle dynamic number of reflections
|
|
|
|
|
- Better regex for locating DOM sources
|
|
|
|
|
- Fixed a bug in DOM scanning while crawling
|
|
|
|
|
- Flexible crawling with ability to specify threads, depth
|
|
|
|
|
- Treat html entity and slash escaping differently
|
|
|
|
|
- Other minor bug fixes
|
|
|
|
|
|
|
|
|
|
### 3.0-beta
|
|
|
|
|
|
|
|
|
|
Intial beta release for public testing
|
