Skip to content

v0.51.0: 8 New Security Tools (377 total)

Choose a tag to compare

View all tags
@chengganping-ship-it chengganping-ship-it released this 18 Aug 07:29
· 27 commits to main since this release
v0.51.0
d668f39

v0.51.0 - 8 New Security Analysis Tools (377 total)

New Tools:

  • crlf_injection_prevention - Analyze CRLF injection: header sanitization, log injection, response splitting
  • session_timeout_policy - Analyze session timeout: expiration, idle timeout, renewal limits
  • zip_slip_prevention - Analyze zip slip: archive extraction paths, entry names, traversal sequences
  • ssrf_detection - Analyze SSRF: user-controlled URLs, private IPs, dangerous protocols
  • process_env_leak - Analyze env var leaks: logs, stack traces, client responses
  • redos_complexity - Analyze ReDoS: nested quantifiers, greedy loops, exponential backtracking
  • null_byte_injection - Analyze null byte: file paths, extension bypass, include truncation
  • mime_type_spoofing - Analyze MIME spoofing: extension-only checks, magic bytes, Content-Type trust
Assets 2
Loading