Skip to content

0.1.5

Compare
Choose a tag to compare
@postmodern postmodern released this 20 Jun 05:35
· 64 commits to main since this release
v0.1.5
  • Improve the accuracy of Ronin::Vulns::OpenRedirect#vulnerable? when detecting open redirects in meta-refresh HTML tags.
    • Match the test URL when it ends with ?..., &..., or &....
    • Detect when the test URL has an additional string appended to it (ex: .html). The appended string can easily be bypassed by adding a ?, &, or # character to the end of the test URL.