Miroslav Štampar
|
057e614500
|
Fix for --safe-url carrying injected cookie payload and --safe-req getting target's GET parameters
|
2026-11-12 14:51:29 +01:00 |
|
Miroslav Štampar
|
3ab05cade0
|
Fix for anti-CSRF tokens in JSON (spaced), header names with dashes and header values with special chars
|
2026-11-12 14:50:11 +01:00 |
|
Miroslav Štampar
|
f1c718c01c
|
Fix for --oob-token being sent to public OOB servers
|
2026-11-12 14:48:17 +01:00 |
|
Miroslav Štampar
|
445516b151
|
Fix for retried requests (e.g. timeout, 429, dead proxy) losing the response page
|
2026-11-12 14:44:08 +01:00 |
|
Miroslav Štampar
|
fec03cf662
|
Fix for --param-del being URL encoded in GET requests
|
2026-11-12 14:28:47 +01:00 |
|
Miroslav Štampar
|
da5c2c66c6
|
Fix for Set-Cookie merge overwriting other cookies (e.g. id vs x-id)
|
2026-11-12 14:28:46 +01:00 |
|
Miroslav Štampar
|
a7a9d7a8fe
|
Fix for --eval dropping parameters after an empty one
|
2026-11-12 11:50:32 +01:00 |
|
Miroslav Štampar
|
f9e53443ed
|
Fix for anti-CSRF tokens containing '+' (and GET token not found with -p)
|
2026-11-12 11:50:32 +01:00 |
|
Miroslav Štampar
|
3c2384525c
|
Fix for --param-del being URL encoded in POST payload requests
|
2026-11-12 11:49:07 +01:00 |
|
Miroslav Štampar
|
161af41c9c
|
Fix for chained tamper hints (e.g. luanginx,space2comment)
|
2026-11-12 11:49:07 +01:00 |
|
Miroslav Štampar
|
f65de0e890
|
Minor update
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
|
2026-11-04 10:20:01 +01:00 |
|
cuteNBD
|
b333a14d8b
|
Keep WebSocket responses on normal closure (#6173)
Co-authored-by: cuteNBD <206630735+bingdongni@users.noreply.github.com>
|
2026-11-04 10:18:29 +01:00 |
|
cuteNBD
|
74f50122fb
|
Preserve custom Host headers for WebSocket requests (#6172)
Co-authored-by: cuteNBD <206630735+bingdongni@users.noreply.github.com>
|
2026-11-04 10:18:06 +01:00 |
|
Miroslav Štampar
|
8476cf4d09
|
Fix related to the #6171 (WebSocket Host port)
|
2026-11-03 22:04:01 +01:00 |
|
Miroslav Štampar
|
11afdcb026
|
Fixes #6152
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
|
2026-10-21 13:51:35 +02:00 |
|
Miroslav Štampar
|
6530184e2c
|
Implements #4271
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
|
2026-10-19 11:46:27 +02:00 |
|
Miroslav Štampar
|
2c6e4d85b5
|
Fixes #6142
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
|
2026-10-10 12:00:33 +02:00 |
|
Miroslav Štampar
|
a6e832bb8e
|
Fixes #6131
|
2026-09-28 08:54:38 +02:00 |
|
Miroslav Štampar
|
0974a0d859
|
Fixes CI/CD errors
|
2026-09-28 00:43:00 +02:00 |
|
Miroslav Štampar
|
2e3e4385ca
|
Added shared Interactsh poller with DNS/HTTP OOB support
|
2026-09-28 00:38:03 +02:00 |
|
Miroslav Štampar
|
92b652177b
|
Fixes #6129
|
2026-09-25 11:00:58 +02:00 |
|
Miroslav Štampar
|
d486742eec
|
Fixes #6106
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
|
2026-09-07 12:06:22 +02:00 |
|
Miroslav Štampar
|
529fc7aebb
|
Adding gadget fallback for non-query statement execution without stacked queries (PostgreSQL dblink)
|
2026-08-18 11:35:54 +02:00 |
|
Miroslav Štampar
|
7b8bf447a0
|
Stabilization of --timeless
|
2026-08-07 13:13:48 +02:00 |
|
Miroslav Štampar
|
776643e3bd
|
Stabilization of http2.py module
|
2026-08-06 21:38:26 +02:00 |
|
Miroslav Štampar
|
fca694c327
|
Fixing CI/CD errors
|
2026-08-04 17:18:24 +02:00 |
|
Miroslav Štampar
|
cb8298d55a
|
Couple of trivial bug fixes
|
2026-08-04 17:02:57 +02:00 |
|
Miroslav Štampar
|
579e559c71
|
Adding one more data correctness patch
/ build (macos-latest, 3.8) (push) Has been cancelled
/ build (ubuntu-latest, pypy-2.7) (push) Has been cancelled
/ build (windows-latest, 3.14) (push) Has been cancelled
|
2026-07-30 19:06:40 +02:00 |
|
Miroslav Štampar
|
1f42f52980
|
Trivial just in case update
|
2026-07-29 16:00:04 +02:00 |
|
Miroslav Štampar
|
e81a99c4f3
|
Renaming --murphy-rate to --jitter
|
2026-07-29 09:05:44 +02:00 |
|
Miroslav Štampar
|
3a680be4eb
|
Minor patches
|
2026-07-29 08:20:08 +02:00 |
|
Miroslav Štampar
|
1dcca2c862
|
Implementing automatic auto-recover on charset mismatch (E/U)
|
2026-07-28 18:01:27 +02:00 |
|
Miroslav Štampar
|
5dd91ba8ca
|
Minor patch
|
2026-07-28 00:48:54 +02:00 |
|
Miroslav Štampar
|
bb9e5dbf44
|
Fixing bug with --lengths and --null-connection combined
|
2026-07-27 17:22:17 +02:00 |
|
Miroslav Štampar
|
b2f98b61ec
|
Improved crawling
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
|
2026-07-25 19:10:58 +02:00 |
|
Miroslav Štampar
|
5a5aebfc6e
|
Hardening Brotli/Zstandard decoding against hostile input
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
|
2026-07-25 09:59:53 +02:00 |
|
Miroslav Štampar
|
a4c983ae06
|
Adding native Brotli (br) and Zstandard (zstd) response decoding
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
|
2026-07-25 00:42:27 +02:00 |
|
Miroslav Štampar
|
ab881132b8
|
Hardening Negotiate/Kerberos authentication (#3404)
|
2026-07-25 00:24:52 +02:00 |
|
Miroslav Štampar
|
1bd1b457d7
|
Adding Negotiate/Kerberos authentication (#3404)
|
2026-07-24 22:26:43 +02:00 |
|
Miroslav Štampar
|
2d9e9ed959
|
Implementing support for 429 (rate limit)
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
|
2026-07-24 15:17:05 +02:00 |
|
Miroslav Štampar
|
26e13122ca
|
Fixing #6087
|
2026-07-21 11:34:18 +02:00 |
|
Miroslav Štampar
|
6d9322bc74
|
Trivial patch
|
2026-07-21 09:06:10 +02:00 |
|
Miroslav Štampar
|
2e28b70975
|
Minor patch
|
2026-07-19 18:43:16 +02:00 |
|
Miroslav Štampar
|
d2a9db2aba
|
Minor patch
|
2026-07-19 18:27:04 +02:00 |
|
Miroslav Štampar
|
69c8a94be4
|
Adding support for domain cookies
|
2026-07-19 17:55:45 +02:00 |
|
Miroslav Štampar
|
47e98a02d0
|
Minor patch
|
2026-07-19 17:39:30 +02:00 |
|
Miroslav Štampar
|
ab6ce22593
|
Add experimental gRPC-Web (text) support
|
2026-07-17 23:38:34 +02:00 |
|
Miroslav Štampar
|
57f8485279
|
Adding Esperanto DBMS agnostic engine
|
2026-07-16 18:13:32 +02:00 |
|
Miroslav Štampar
|
71afbf0711
|
Fixes #6083
/ build (macos-latest, 3.8) (push) Waiting to run
/ build (ubuntu-latest, pypy-2.7) (push) Waiting to run
/ build (windows-latest, 3.14) (push) Waiting to run
|
2026-07-13 03:20:07 +02:00 |
|
Miroslav Štampar
|
16cd9425ae
|
Introducing detection switch --lengths
|
2026-07-12 14:42:34 +02:00 |
|