What's Changed
- fixed bug in auto-tune
- extensions now accept values with leading period, i.e.
-x .phpand-x phpbehave identically (leading period gets stripped) - if no url scheme is given,
httpsis prepended to the target (-u hackerone.combecomeshttps://hackerone.com) - support for secondary default wordlist location added (
/usr/local/share/seclists...)
🎉 Special thanks to @jhaddix, @IppSec, @postmodern, and @DonatoReis for their reports / ideas 🎉
Full Changelog: 2.7.0...2.7.1