Repository navigation
v2.6-stable
·
1491 commits
to master
since this release
- Fixed: Multiple bug-fixes regarding several reported unhandled exceptions.
- Revised: Minor improvement in session handler regarding IPv6 targets.
- Added: New option
--list-tampersfor listing available tamper scripts. - Revised: Minor improvement regarding resolving target hostname.
- Added: Support for "Ncat" on "reverse_tcp" and "bind_tcp" shell options.
- Added: Support for "Bash" (via
/dev/tcp) on "reverse_tcp" shell option. - Added: Support for "Netcat-Openbsd" (i.e. nc without -e) on "reverse_tcp" and "bind_tcp" shell options.
- Added: Support for "Socat" on "reverse_tcp" and "bind_tcp" shell options.
- Revised: Minor improvement regarding counting the total of HTTP(S) requests, for the identified injection point(s) during the detection phase.
- Fixed: Minor bug-fix regarding providing the target host's root directory.
- Added: New tamper script "sleep2timeout.py" that uses "timeout" function for time-based attacks.
- Added: New tamper script "sleep2usleep.py" that replaces
sleepwithusleepcommand in the time-related generated payloads. - Replaced: The
--purge-outputoption has been replaced with--purgeoption. - Fixed: Minor bug-fix regarding performing injections through cookie parameters.
- Revised: Minor improvement regarding ignoring the Google Analytics cookie in all scanning attempts.
- Fixed: Minor bug-fix regarding "bind_tcp" shell option.
Note: For more check the detailed changeset.