Skip to content

v1.4.0

Latest
Latest

Choose a tag to compare

View all tags
@0xSteph 0xSteph released this 02 Sep 03:27
· 7 commits to main since this release
v1.4.0
bdf48f9

Juice Shop HTTP harvest follow-through that sat unpublished on 1.3.1. Same detect-and-prove product; the web probes actually finish what they already found.

Highlights

  • web.spa_hash_routes, race_condition oracle, mass_assignment recipes, ptai browser
  • Harvest follow-through (schema dump, Cookie+Bearer, zip-slip, CSP, UNION/TOTP/OAuth, coupons, XXE DoS)
  • get_evidence path join closed (id is a single component, stays inside the evidence root)
  • README star history is a link, not a third-party SVG

Install: pip install ptai==1.4.0

Assets 2
Loading