Skip to content

Commit 1a41f27

Browse files
authored
Merge pull request #172 from thc202/update-changelog
Update changelog
2 parents 6f04a86 + bfe1a27 commit 1a41f27

File tree

1 file changed

+20
-4
lines changed

1 file changed

+20
-4
lines changed

CHANGELOG.md

Lines changed: 20 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,22 +7,38 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
77

88
### Added
99
- active/cve-2019-5418.js > An active scanner for Ruby on Rails Accept header content disclosure issue.
10+
- active/JWT None Exploit.js > Checks if the application's JWT implementation allows the usage of the 'none' algorithm.
1011
- authentication/DjangoAuthentication.js > Django authentication script.
11-
- standalone/scan_rule_list.js > Lists details from both active and passive scan rules.
12-
- standalone/Split download extract.rb > Add script to concatenate split file downloads
13-
- extender/ZAP onEvent Handler.js > An example for how to listen for internal ZAP events
12+
- authentication/GetsWithRedirectThenPost.js > An authentication script that follows GET redirects and then submits a POST with the authentication credentials.
13+
- extender/Simple Reverse Proxy.js > Adds a simple reverse proxy.
14+
- extender/ZAP onEvent Handler.js > An example for how to listen for internal ZAP events.
1415
- httpsender/add-extra-headers.js > Adds encountered 'extra' headers to all requests.
16+
- httpsender/aws-signing-for-owasp-zap.py > Signs requests to AWS.
1517
- httpsender/fingerprinter.js > Logs MD5s of responses.
1618
- httpsender/greenbone-maintain-auth.js > An auth helper script for OpenVAS Greenbone web interface.
1719
- httpsender/inject-xss.js > Injects XSS payloads into JSON responses.
1820
- httpsender/juice-shop-maintain-auth.js > An auth helper script for OWASP JuiceShop.
1921
- httpsender/keep-cookies-going.js > An auth helper script.
2022
- httpsender/maintain-jwt.js > Tracks JWTs and updates Authorization bearer headers.
23+
- passive/Find IBANs.js > Finds IBANs in HTTP response bodies.
24+
- passive/HUNT.py > Merge of existing HUNT scripts.
25+
- proxy/Drop requests by response code.js > Drops requests that have a given response code.
26+
- standalone/scan_rule_list.js > Lists details from both active and passive scan rules.
27+
- standalone/Split download extract.rb > Concatenates split file downloads.
2128

2229
### Changed
23-
- Misc maintenance changes.
2430
- Maintenance changes to target ZAP 2.8.
2531

32+
### Removed
33+
- The following scripts were merged into a new script `HUNT.py`:
34+
- passive/HUNT - Debug & Logic Parameters.py
35+
- passive/HUNT - File Inclusion.py
36+
- passive/HUNT - IDOR.py
37+
- passive/HUNT - RCE.py
38+
- passive/HUNT - SQLi.py
39+
- passive/HUNT - SSRF.py
40+
- passive/HUNT - SSTI.py
41+
2642
### Fixed
2743
- Fix links to source files in zaproxy repo.
2844

0 commit comments

Comments
 (0)