Skip to content

v0.3b-20160115

Choose a tag to compare

@stasinopoulos stasinopoulos released this 15 Jan 13:17
· 2284 commits to master since this release
  • Added: Time-relative false-positive identification, which identifies unexpected time delays due to unstable requests.
  • Added: New option -l, that parses target and data from HTTP proxy log file (i.e. Burp or WebScarab).
  • Added: Check if Powershell is enabled in target host, if the applied option's payload is requiring the use of PowerShell.
  • Added: New option --ps-version, that checks PowerShell's version number.
  • Replaced: Some powershell-based payloads, have been replaced by new (more solid) ones, so to avoid "Microsoft-IIS" server's incompatibilities.
  • Added: Support (in MacOSX platforms) for a tab completion in shell options.
  • Added: Undocumented parameter -InputFormat none so to avoid "Microsoft-IIS" server's hang.
  • Added: Ability for identification of "Microsoft-IIS" servers.
  • Added: Statistical checks for time-related techniques (i.e. "time-based", "tempfile-based").
  • Added: Support for Windows-based (cmd / powershell) payloads for every injection technique.