Skip to content

v5.9.0

Choose a tag to compare

View all tags
@stanislav-web stanislav-web released this 26 Apr 20:39
· 129 commits to master since this release
v5.9.0
faf689e
  • (feature) added passive WAF / anti-bot recognition behind the opt-in --waf-detect flag
  • (feature) added vendor-aware WAF identification with confidence scoring in debug and reports
  • (feature) added support for Anubis, Cloudflare, Sucuri, Akamai, Imperva, Distil, F5 BIG-IP ASM, AWS WAF, Azure Front Door, Fastly, ModSecurity, DataDome, PerimeterX / HUMAN, Kasada, Barracuda, Radware, FortiWeb, Reblaze, NetScaler / Citrix WAF, AppTrana, and Huawei Cloud WAF
  • (enhancement) WAF detection remains strict opt-in and does not affect default scan behavior or performance without --waf-detect
  • (enhancement) WAF metadata is preserved in standard debug output and detailed reports while keeping the response status as blocked
  • (tests) expanded WAF coverage and stabilized passive recognition paths
Assets 2
Loading