Skip to content

v2.6-stable

Choose a tag to compare

@stasinopoulos stasinopoulos released this 21 Sep 04:36
· 1491 commits to master since this release
  • Fixed: Multiple bug-fixes regarding several reported unhandled exceptions.
  • Revised: Minor improvement in session handler regarding IPv6 targets.
  • Added: New option --list-tampers for listing available tamper scripts.
  • Revised: Minor improvement regarding resolving target hostname.
  • Added: Support for "Ncat" on "reverse_tcp" and "bind_tcp" shell options.
  • Added: Support for "Bash" (via /dev/tcp) on "reverse_tcp" shell option.
  • Added: Support for "Netcat-Openbsd" (i.e. nc without -e) on "reverse_tcp" and "bind_tcp" shell options.
  • Added: Support for "Socat" on "reverse_tcp" and "bind_tcp" shell options.
  • Revised: Minor improvement regarding counting the total of HTTP(S) requests, for the identified injection point(s) during the detection phase.
  • Fixed: Minor bug-fix regarding providing the target host's root directory.
  • Added: New tamper script "sleep2timeout.py" that uses "timeout" function for time-based attacks.
  • Added: New tamper script "sleep2usleep.py" that replaces sleep with usleep command in the time-related generated payloads.
  • Replaced: The --purge-output option has been replaced with --purge option.
  • Fixed: Minor bug-fix regarding performing injections through cookie parameters.
  • Revised: Minor improvement regarding ignoring the Google Analytics cookie in all scanning attempts.
  • Fixed: Minor bug-fix regarding "bind_tcp" shell option.

Note: For more check the detailed changeset.