Skip to content

v2.3-stable

Compare
Choose a tag to compare
@stasinopoulos stasinopoulos released this 07 Mar 05:42
· 1168 commits to master since this release
  • Fixed: Multiple bug-fixes regarding several reported unhandled exceptions.
  • Revised: Minor improvement regarding testing the Host HTTP header.
  • Added: Support for Host HTTP header command injections.
  • Revised: Minor improvement regarding testing SOAP/XML POST data.
  • Added: Support for automatically creating a Github issue with unhandled exception information.
  • Revised: Improvement for masking sensitive data in the detailed message about occurred unhandled exception.
  • Added: Support for returning detailed message about occurred unhandled exception.
  • Revised: The --charset option has been revised to force the usage of custom charset in order to speed-up the data retrieval process (during time-related injections).
  • Replaced: The --charset option has been replaced with --encoding option.
  • Revised: Improvement regarding batch mode, for testing the payloads for both OS - if it's not able to identify the target OS.
  • Added: Support for SOAP/XML POST data.
  • Fixed: Bug-fix regarding the SSL implementation (via @td4b).
  • Revised: Improvement regarding testing json-formated POST data with empty value(s).
  • Revised: Minor improvement regarding verbose mode for removing the first and/or last line of the html content (in case there are/is empty).

Note: For more check the detailed changeset.