Skip to content

v3.7-stable

Compare
Choose a tag to compare
@stasinopoulos stasinopoulos released this 17 Feb 07:30
· 229 commits to master since this release
  • Fixed: Multiple bug-fixes regarding several reported unhandled exceptions.
  • Added: Translation for README.md in Indonesian (via @galihap76)
  • Revised: Improvements regarding parsing HTTP requests through HTTP proxy (i.e. --proxy option).
  • Revised: Improvements regarding identifying injection marker (i.e. asterisk *) in provided parameter values (e.g. GET, POST or HTTP headers).
  • Added: New option --crawl-exclude regarding setting regular expression for excluding pages from crawling (e.g. logout).
  • Revised: Improvement regarding --crawl option, for skipping further tests involving target that an injection point has already been detected.
  • Added: Support regarding combining --crawl option with scanning multiple targets given from piped-input (i.e. stdin).
  • Revised: Minor improvement regarding adding PCRE /e modifier (i.e. dynamic code evaluation technique).
  • Revised: Minor bug-fix regarding logging all HTTP traffic into a textual file (i.e. -t option).

Note: For more check the detailed changeset.