Skip to content

Passive scanner rules version 65

Choose a tag to compare

@zapbot zapbot released this 20 Jun 10:37
· 2136 commits to main since this release
2979bfc

Added

  • All rules have been tagged of interest to Penetration Testers, as well as adding tags associated with DEV or QA applicability.

Changed

  • Depends on an updated version of the Common Library add-on.
  • Clarified details of the Viewstate scan rule alerts, in some instances they were misleading (containing colons suggesting further data).
  • The Open Redirect scan rule (ID: 10028) and its alerts have been renamed "Off-site Redirect" as this is a passive rule which compares the authority of the origin and destination and there is no assurance of a truly "open" redirect.