Skip to content

v0.1.7

Choose a tag to compare

@github-actions github-actions released this 07 Sep 08:37
· 30 commits to main since this release

v0.1.7

Added

  • GET-to-POST method pivoting with dual query/body hidden-parameter discovery.
  • Automatic promotion of confirmed hidden POST parameters into scanner targets.
  • Surface-adaptive module budgeting with per-category probe quotas and starvation isolation.
  • Expanded high-impact parameter wordlists with context-aware prioritization for admin, cloud, upload and proxy routes.

Fixed

  • Preserve final scan status and avoid health-metrics nil pointer panics.
  • Count request budgets outside retry loops and preserve HTTP 429 evidence with Retry-After handling.
  • Use cryptographic randomness for WAF bypass headers and correct rate-limiter jitter.
  • Tighten preflight, scope expansion, non-standard port handling, proxy port allocation and UTF-8 truncation behavior.

Optimized

  • Scope TLS misconfiguration checks to root hosts.
  • Reduce noisy coverage notices in normal CLI output.
  • Run api_versioning once per host on root or base API endpoints.