Skip to content

Active scanner rules version 59

Choose a tag to compare

View all tags
@zapbot zapbot released this 07 Dec 12:51
· 4769 commits to main since this release
ascanrules-v59
8d45b7c
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Added

  • Support for mutations in reflected XSS rule.

Changed

  • Depend on newer version of Common Library add-on.

Fixed

  • Use high and low delays for linear regression time-based tests to fix false positives from delays that were smaller than normal variance in application response times, which affected Command Injection scan rule.
  • Improved SQL Injection - PostgreSQL (Time Based) scan rule by using time-based linear regression tests.
  • Catch correct context while analysing attributes instead of the last attribute where eyecatcher was reflected.
Assets 4
Loading