github wapiti-scanner/wapiti 3.3.1

5 hours ago

What's Changed

  • chore(tests): pylint cleanup pass on test suite (10/10) by @devl00p in #781
  • fix(passive): cut false positives in redirection & path-disclosure by @devl00p in #783
  • Feature/passive stacktrace disclosure by @devl00p in #782
  • fix: misc small fixes (root URL crash, dead reference links, cookie domain, XXE skip crash) by @devl00p in #784
  • Fix inconsistent_redirection false positive on directory (trailing-slash) redirects by @devl00p in #788
  • Silence bs4 XMLParsedAsHTMLWarning when parsing XML responses during crawl by @devl00p in #789
  • Improve passive CSP module: unknown directives, frame-ancestors & form-action by @devl00p in #787
  • fix(explorer): cap repeated parameter occurrences in crawled URLs (#252) by @devl00p in #790
  • feat(sql): make boolean-based detection robust to dynamic pages and r… by @devl00p in #791
  • Report timeout/500 anomalies in mod_ssrf and harden finish() by @devl00p in #792
  • Improve Log4Shell DNS verification performance by @hbenazha in #772
  • fix(headless): run host-level modules (ssl, http_headers) against hosts the MITM proxy filters out by @devl00p in #793
  • fix(methods): log tested path and stop emitting empty findings by @devl00p in #796
  • fix(buster): stop reporting soft 404s, catch-all redirects and 5xx as pages by @devl00p in #795
  • fix(crawler): apply a read timeout so a stalled response can't hang the scan (#797) by @devl00p in #798
  • fix(report): HTML-escape all template expressions in the HTML report by @devl00p in #799
  • Report distinct passive postures per host + shared PassiveModule base (#617) by @devl00p in #800
  • chore(deps): update dependencies and dev tooling by @devl00p in #801
  • fix(cli): don't hang on Ctrl+C during an attack (#802) by @devl00p in #804
  • Improve passive report readability: colored suppression summary + per-page cleartext-password dedup by @devl00p in #805
  • feat(passive): surface suppressed passive alerts in reports by @devl00p in #806
  • Prepare release 3.3.1: changelog and version bump by @devl00p in #807

Full Changelog: 3.3.0...3.3.1

Don't miss a new wapiti release

NewReleases is sending notifications on new releases.