Skip to content

v1.4 Release

Latest

Choose a tag to compare

@vladko312 vladko312 released this 25 Aug 23:06
1c27fdb
  • Detected vulnerabilities can now be saved to file and loaded later
  • Python-based plugins now use time.sleep() in time-based blind command execution
  • New plugin to detect GHSA-5hrj-7fc3-cmx9 in Mustache (exploitation would be released later)
  • New plugin for Pybars3 and Pybars4 template engines
  • New plugin for fuzzing uncommon/legacy evaluating templates
  • Crawling and form detection now use provided headers and cookies
  • Fixed some bugs