Skip to content

v2.1-stable

Compare
Choose a tag to compare
@stasinopoulos stasinopoulos released this 03 Oct 05:15
· 1287 commits to master since this release
  • Added: New option --header for providing a single extra HTTP header (e.g. X-Forwarded-For: 127.0.0.1).
  • Added: New option --check-internet that checks internet connection before assessing the target.
  • Fixed: Minor bug-fix regarding performing injections through HTTP Headers (i.e. Cookie, User-Agent, Referer).
  • Revised: Minor improvement regarding checking stored payloads and enabling appropriate tamper scripts during the exploitation phase.
  • Added: New tamper script "space2vtab.py" that replaces every space (%20) with vertical tab (%0b).
  • Replaced: The tamper script "space2tab.py" has been replaced with "space2htab.py".
  • Fixed: Minor bug-fix regarding checking for similarity in provided parameter name and value (GET, POST).
  • Added: New option --backticks that uses backticks instead of $(), for commands substitution.
  • Revised: Minor improvement in Netcat shells, for giving to the end-user the choice of using the /bin standard subdirectory.
  • Added: New option --disable-coloring that disables console output coloring.
  • Added: New option --check-tor that checks if Tor is used properly.
  • Fixed: Minor improvement for fetching random HTTP User-Agent header in initial request, when --random-agent is used.
  • Revised: Minor improvement regarding options --purge-output and --wizard, were added in the mandatory options list.
  • Fixed: Major bug-fix regarding connection problem over HTTPS.
  • Added: New option --purge-output to turn on safe removal of all content(s) from output directory.

Note: For more check the detailed changeset.