v2.3-stable
stasinopoulos
released this
07 Mar 05:42
·
1168 commits
to master
since this release
- Fixed: Multiple bug-fixes regarding several reported unhandled exceptions.
- Revised: Minor improvement regarding testing the Host HTTP header.
- Added: Support for Host HTTP header command injections.
- Revised: Minor improvement regarding testing SOAP/XML POST data.
- Added: Support for automatically creating a Github issue with unhandled exception information.
- Revised: Improvement for masking sensitive data in the detailed message about occurred unhandled exception.
- Added: Support for returning detailed message about occurred unhandled exception.
- Revised: The
--charset
option has been revised to force the usage of custom charset in order to speed-up the data retrieval process (during time-related injections). - Replaced: The
--charset
option has been replaced with--encoding
option. - Revised: Improvement regarding batch mode, for testing the payloads for both OS - if it's not able to identify the target OS.
- Added: Support for SOAP/XML POST data.
- Fixed: Bug-fix regarding the SSL implementation (via @td4b).
- Revised: Improvement regarding testing json-formated POST data with empty value(s).
- Revised: Minor improvement regarding verbose mode for removing the first and/or last line of the html content (in case there are/is empty).
Note: For more check the detailed changeset.