v0.6b-20160401
stasinopoulos
released this
01 Apr 06:39
·
1744 commits
to master
since this release
- Added: The ability to store valid (
Basic
) credentials into session files for current target. - Added: New option
--ignore-401
that ignores HTTP Error 401 (Unauthorized) and continues tests without providing valid credentials. - Added: Dictionary-based cracker for
Basic
HTTP authentication credentials. - Added: Identifier for HTTP authentication type (currently only
Basic
type is supported). - Added: New option
--skip-waf
that skips heuristic detection of WAF/IPS/IDS protection. - Added: Support for verbose mode in the "DNS exfiltration" injection technique (module).
- Added: New option
--dns-server
that supports the "DNS exfiltration" injection technique (module). - Added: New option
--dependencies
that checks (non-core) third party dependenices.
Note: For more check the detailed changeset.