Changelog

• v1.0 2023/10/09

  • updated Dockerfile to ubuntu-22.04
  • fixed bugs

• v0.9 2020/07/26

  • fixed encoding bugs
  • new Dockerfile
  • new --groups and --auto-progress options
  • fixed various issues reported on Github
  • new testing env with docker-compose

• v0.8 2020/03/22

  • new switches (-R, --csv, --xml, --hits)
  • new pathasis option for http_fuzz
  • new rdp_gateway module
  • fixed various issues reported on Github

• v0.7 2017/12/14

  • added Python3 support
  • added Windows support
  • new --timeout and --allow-ignore-failures options
  • switched to multiprocesses instead of threads (for --timeout to work on Windows)
  • new modules: ike_enum, rdp_login, ajp_fuzz, sqlcipher_pass
  • more info added to XML output
  • fixed many bugs

• v0.6 2014/08/25

  • added CSV and XML output formats
  • added module execution time column
  • improved RANGE keyword
  • new modules: rlogin_login, umbrack_crack
  • minor bug fixes/improvements in http_fuzz and smb_login
  • added more TLDs to dns_forward

• v0.5 2013/07/05

  • new modules: mysql_query, tcp_fuzz
  • new RANGE and PROG keywords (supersedes the reading from stdin feature)
  • switched to impacket for mssql_login
  • output more intuitive
  • fixed connection cache
  • minor bug fixes

• v0.4 2012/11/02

  • new modules: smb_lookupsid, finger_lookup, pop_login, imap_login, vmauthd_login
  • improved connection cache
  • improved usage, user can now act upon specific responses (eg. stop brute-forcing host if down, or stop testing login if password found)
  • improved dns brute-forcing presentation
  • switched to dnspython which is not limited to the IN class (eg. can now scan for {hostname,version}.bind)
  • rewrote itertools.product to avoid memory over-consumption when using large wordlists
  • can now read wordlist from stdin
  • added timeout option to most of the network brute-forcing modules
  • added SSL and/or TLS support to a few modules
  • before_egrep now allows more than one expression (ie. useful when more than one random nonce needs to be submitted)
  • fixed numerous bugs

• v0.3 2011/12/16

  • minor bugs fixed in http_fuzz
  • option -e better implemented
  • better warnings about missing dependencies

• v0.2 2011/12/01

  • new smtp_login module
  • several bugs fixed

• v0.1 2011/11/25 : Public release