release v3.2.8
relax dependencies
tag 3.2.7
bump some dependencies
Pass headers specified by swagger files to generated requests
Rework HTTP headers management
fix mod_unsecure_password tests
fix mod_unsecure_password and revert some changes on mod_exec that produced longer processing for no gain
fix dns related test
lint
add NS takeover checking in mod_takeover
Release 3.2.5
Implement passive modules
more unit tests
more unit test
refactor wapiti_main: group attack_options logic in a single function
test case for URL with invalid port number
refactor and tests
refactoring on wapiti_main function
add test for apache cve findings
adapt to Apache branding used my Wappalyzer
fix some tests
fix some tests
make `parameter` optional on add_payload with None default value
Fix mod_csrf test
Remove the original request object from the Payload namedtuple
Remove the original request ID previously kept on payloads in sqlite3 db
Style improvements
Add a new intermediate class for iter_forms
Improve mod_nikto support
Upgrade httpcore and mitmproxy
remove `requests` dependency in tests
upgrade httpx
Move attack management to a new ActiveScanner class
fix mod_ssl
fix lint
fix wappalyzer user warnings and deprecation warnings in other modules
fix pyproject.toml to remove 3.10 and 3.11 support
wapiti 3.2.4: support Python 3.13
Remove pylint-ignore which is old and block dependencies on CI
fix mod crlf integration test
release 3.2.3 to support python 3.12
Mention Python 3.12 in README.rst
fix: Use python 3.12 for integration tests
Use python 3.12 for integration tests
fix tls webserver used for tests
build: support Python 3.12
tests fpr more unusual swagger requests
do not mutate JSON requests missing a body
Replace the prance dependency for parsing Swagger/OpenAPI files in favor of wapiti-swagger
Bump aiohttp from 3.10.2 to 3.10.11
Use a modified arsenic packaged under another name to pass pypi restrictions
Release 3.2.2
use an arsenic wheel fixed for python 3.12
Improvements for Windows compatibility
Prepare v3.2.1
fix a step of the dns endpoint dockerfile for integration tests
Remove the need for the asyncio stop Event on attacks, refactor attack module to a single function that can be cancelled on ctrl+c, use a finally block to persist attacked_ids in case of interruption
doc: fix wiki link in readme file
documentation: add missing options in ronn file, put back trimmed trailing whitespaces, add editorconfig, fix `-h`, generate manpage and html help file
integration tests: since there is now a NVD cleanup step, use static versions of the files
crawler: put back header tuple type check
crawler: remove async_post, now handled by async_request directly
crawler: fix empty enctype case
reformat some code + warnings
reformat some code
Bump aiohttp from 3.9.4 to 3.10.2
Updated ChangeLog_Wapit, README.rst, etc for v3.2.0
Use HTTPArchive/wappalyzer project for mod_wapp
Use webappanalyzer project for mod_wapp
Add CVE findings (missing files)
Add CVE findings
Support more usual cases for string_without_payload
Use a lower severity level for potential ldap vulns
more coverage
improve coverage
add detection of false positives + coverage
styling
Add specific module for LDAP injection
Styling
Remove some unnecessary import
Replace assertions on on_info by assertions on add_payload
Reformat and styling
Move definitions to "finding" classes as a way to enforce their declaration and usage
mod_ssl: Use sslscan in place of sslyze
Add swagger option in wapiti doc
ignore JSON requests in mod_csrf
Attack JSON body of HTTP requests through a new part of the default mutator + modified the mutate() function so mod_ssrf can now use it too
Adding Swagger Scanner
JSON Mutator
removed the preg_replace heuristic
just update pipenv lock
Bump aiohttp from 3.8.5 to 3.8.6
fix wp version detection when root.findtext returns None
fix #459
Version 3.1.8
Update changelog
Set name attribute on spring4shell module
Fix pyproject.toml to exclude tests directory from builds. Add "release" target in Makefile. Prepare for Wapiti 3.1.8
mod_exec: Skip time based payloads if no timeout occurred