Version 1.4d to 2.4 developed by:
Xavier Mendez (xmendez@edge-security.com)
Version up to 1.4c developed by:
Christian Martorella (cmartorella@edge-security.com)
Carlos del ojo (deepbit@gmail.com)
Changelog 2.4:
New features
- JSON post data parsing
- Shodanp payload
- --filter-help: Filter language specification help usage.
- --no-cache: Disable plugins cache. Every request will be scanned by plugins.
- --zP, --zE and --zD: Payloads' parameters, encoders and default parameter arguments.
- --ip: Specify an IP to connect to instead of the URL's host in the format ip:port. (fixes #121 )
- --efield/field: Show the specified language expression together with the current payload.
- --recipe can be chained to combine different recipes.
- Bash auto-completion script (fixes #32 )
New filter operators
- plugins: Returns plugins result as a string.
- :=, =+ and =- assignment operators
- gre('exp'): Returns first regex group that matches in value
Bugs
- Trying various encodings when reading wordlists (fixes #128 #125 )
- Wrap line in output width (fixes #96 #76 #68 #56 #35 )
- Proxy type incorrectly specified HTML instead HTTP
- Incorrect URL parsing when specifying with port but without scheme.
- POST data is not correctly handled for all content types. (fixes #127 )
- Burplog payload Python 2 and 3 compatible
- HTTP Response was parsed two times when using proxy and SSL
- Fixed Python dependencies (thanks to @blshkv )
- Fixed typo in autorize plugin (thanks to @tkisason )