v0.4.2

bespokelabsai/nimblev0.4.2Sep 13, 2021by maurosoria

Upgrading?

AI Summary

This update enhances accuracy and security, adding features like URL injection from STDIN, raw request support, and various authentication types, while fixing a CSV injection vulnerability.

Key Highlights

  • Security fix for CSV Injection vulnerability
  • Support for raw requests and URLs from STDIN
  • Multiple authentication types and advanced recursion options
  • HTML report format
  • Configuration options for max runtime and request rate

New Features

  • More accurate
  • Exclude responses by redirects
  • URLs from STDIN
  • Fixed the CSV Injection vulnerability
  • Raw request supported
  • Can setup the default URL scheme
  • Added max runtime option
  • Recursion on specified status codes
  • Max request rate
  • Support several authentication types
  • Deep/forced recursive scan
  • HTML report format
  • Option to skip target by specified status codes

Full Release Notes

- More accurate
- Exclude responses by redirects
- URLs from STDIN
- Fixed the CSV Injection vulnerability (https://www.exploit-db.com/exploits/49370)
- Raw request supported
- Can setup the default URL scheme (will be used when there is no scheme in the URL)
- Added max runtime option
- Recursion on specified status codes
- Max request rate
- Support several authentication types
- Deep/forced recursive scan
- HTML report format
- Option to skip target by specified status codes
- Bug fixes

Special thanks to @shelld3v for his contributions!

Related Repositories