v2.1-stable
stasinopoulos
released this
03 Oct 05:15
·
1287 commits
to master
since this release
- Added: New option
--header
for providing a single extra HTTP header (e.g.X-Forwarded-For: 127.0.0.1
). - Added: New option
--check-internet
that checks internet connection before assessing the target. - Fixed: Minor bug-fix regarding performing injections through HTTP Headers (i.e. Cookie, User-Agent, Referer).
- Revised: Minor improvement regarding checking stored payloads and enabling appropriate tamper scripts during the exploitation phase.
- Added: New tamper script "space2vtab.py" that replaces every space (
%20
) with vertical tab (%0b
). - Replaced: The tamper script "space2tab.py" has been replaced with "space2htab.py".
- Fixed: Minor bug-fix regarding checking for similarity in provided parameter name and value (GET, POST).
- Added: New option
--backticks
that uses backticks instead of$()
, for commands substitution. - Revised: Minor improvement in Netcat shells, for giving to the end-user the choice of using the
/bin
standard subdirectory. - Added: New option
--disable-coloring
that disables console output coloring. - Added: New option
--check-tor
that checks if Tor is used properly. - Fixed: Minor improvement for fetching random HTTP User-Agent header in initial request, when
--random-agent
is used. - Revised: Minor improvement regarding options
--purge-output
and--wizard
, were added in the mandatory options list. - Fixed: Major bug-fix regarding connection problem over HTTPS.
- Added: New option
--purge-output
to turn on safe removal of all content(s) from output directory.
Note: For more check the detailed changeset.