New features
- JSON post data parsing
- Shodanp payload
- --filter-help: Filter language specification help usage.
- --no-cache: Disable plugins cache. Every request will be scanned by plugins.
- --zP, --zE and --zD: Payloads' parameters, encoders and default parameter arguments.
- --ip: Specify an IP to connect to instead of the URL's host in the format ip:port. (fixes 121 )
- --efield/field: Show the specified language expression together with the current payload.
- --recipe can be chained to combine different recipes.
- Bash auto-completion script (fixes 32 )
New filter operators
- plugins: Returns plugins result as a string.
- :=, =+ and =- assignment operators
- gre('exp'): Returns first regex group that matches in value
Bugs
- Trying various encodings when reading wordlists (fixes 128 125 )
- Wrap line in output width (fixes 96 76 68 56 35 )
- Proxy type incorrectly specified HTML instead HTTP
- Incorrect URL parsing when specifying with port but without scheme.
- POST data is not correctly handled for all content types. (fixes 127 )
- Burplog payload Python 2 and 3 compatible
- HTTP Response was parsed two times when using proxy and SSL
- Fixed Python dependencies (thanks to blshkv )
- Fixed typo in autorize plugin (thanks to tkisason )