Releases: projectdiscovery/nuclei
Releases · projectdiscovery/nuclei
v3.4.7
What's Changed
Other Changes
- Fixed issue with go install (
github.com/zmap/zgrab2
v0.2.0 => v0.1.8) by @dwisiswant0 in #6295
Full Changelog: v3.4.6...v3.4.7
v3.4.6
What's Changed
- Fixed context leak in flow by @tarunKoyalwar in #6282
Other Changes
- fixed log level mismatch by @knakul853 in #6271
- fixed hex dump issue by @knakul853 in #6273
- fix(headless): incorrect last navigated URL by @dwisiswant0 in #6278
- refactor: use the built-in max/min to simplify the code by @xiaoxiangirl in #6272
- test(nuclei): adds multiproto benchmark test by @dwisiswant0 in #6270
- chore: update goreleaser configurations by @emmanuel-ferdman in #6280
- fix(documentation): remove extra HTML table wrappers and periods in Korean README by @1223v in #6287
- build: bump all direct modules by @dwisiswant0 in #6290
New Contributors
- @xiaoxiangirl made their first contribution in #6272
- @emmanuel-ferdman made their first contribution in #6280
- @1223v made their first contribution in #6287
Full Changelog: v3.4.5...v3.4.6
v3.4.5
What’s Changed
Bug Fixes
- Fix memory blowup in multi-protocol templates by @dwisiswant0 #6258
- Fix JSON unmarshalling for dynamic auth type in
authx
by @dwisiswant0 #6268 - Use proxy settings in DNS and SSL templates by @ShubhamRasal #6255
- Fix ingress template in Helm chart by @23kbps #6206
- Improve headless engine startup and shutdown stability by @fourcube #6222
- Fix missing symbol in README documentation by @Jarro01X #6242
Enhancements
- Headless: Store responses for better debugging and analysis by @dwisiswant0 #6247
- Feature: Add
EnableMatcherStatus
to configure matcher behavior (SDK) by @egru #6191
Refactoring & Maintenance
- Increase file descriptor limits for better performance under load by @knakul853 #6230
- Refactor: simplify code using
slices.Contains
by @tongjicoder #6243 - Bump DSL package version by @dogancanbakir #6245
- CI: Add stale issue workflow to improve repo hygiene by @dwisiswant0 #6233
New Contributors
- @fourcube made their first contribution in #6222
- @23kbps made their first contribution in #6206
- @tongjicoder made their first contribution in #6243
- @egru made their first contribution in #6191
Full Changelog: v3.4.4...v3.4.5
v3.4.4
What's Changed
- Fixed issue with tls connection when socks proxied connection by @circleous in #6218
- Fixed nil schema panic & schema values by @dwisiswant0 in #6228
New Contributors
- @proabiral made their first contribution in #6223
- @circleous made their first contribution in #6218
Full Changelog: v3.4.3...v3.4.4
v3.4.3
What's Changed
- Fixed issue with max-host-error tracking logic by @Ice3man543 in #6193
- Fixed issue with stats counter tracking by @Ice3man543 in #6193
- Fixed issue to respect proxy for auto http probe by @dwisiswant0 in #6138
- Fixed issue in offlinehttp extractor without part to body like requests by @Marmelatze in #6167
- Fixed issue with unresolved
interactsh-url
for JS templates by @dogancanbakir in #6088 - Addded support for
SupportedLDAPVersion
in JS template by @pussycat0x in #6202 - Added support to mssql for execute query in JS template by @Ice3man543 in #6200
- Added verbose output in case of
-duc
by @dogancanbakir in #6195
New Contributors
- @pussycat0x made their first contribution in #6202
Full Changelog: v3.4.2...v3.4.3
v3.4.2
What's Changed
🎉 New Features
- Added bearer support to Jira reporting for self-hosted environments by @Ice3man543 in #6145
🐞 Bug Fixes
Other Changes
- Various improvements to the GitHub Actions by @dwisiswant0, including:
New Contributors
Full Changelog: v3.4.1...v3.4.2
v3.4.1
What's Changed
Other Changes
- Updated Docker image templates to fix release issues by @dwisiswant0 in #6119
Full Changelog: v3.4.0...v3.4.1
v3.4.0
What's Changed
🎉 New Features
- Added support for AWS_PROFILE in S3 loadConfig using ~/.aws/credentials by @alban-stourbe-wmx in #5680
Other Changes
- Updated wrong command example in docs by @leofvo in #6098
- Improved Docker workflow and build process by @dwisiswant0 in #6094
- Improved by adding setDialer function to TCP protocol by @ShubhamRasal in #6101
- Improved docgen by enhancing error handling and file operations by @Mehran-Seifalinia in #6103
- Improved comments by fixing some function names by @threehonor in #6112
New Contributors
- @leofvo made their first contribution in #6098
- @Mehran-Seifalinia made their first contribution in #6103
- @threehonor made their first contribution in #6112
Full Changelog: v3.3.10...v3.4.0
v3.3.10
What's Changed
Other Changes
- added support to generate CPU & PGO profiles by @dwisiswant0 in #6058
- added escape code blocks for markdown formatting by @Ice3man543 in #6089
- fixed auth validation on windows ox by @dogancanbakir in #6053
- fixed issue with secrets lookup logic by @dogancanbakir in #6059
- fixed race condition of the lastmatcherevent by @knakul853 in #6080
- fixed incorrect nil return value by @huochexizhan in #6079
- fixed issue with reporting close functionality by @Ice3man543 in #6066
- fixed nil pointer on context cancellation by @knakul853 in #6085
- fixed issue with setting headers in fuzzing template by @dogancanbakir in #5988
New Contributors
- @knakul853 made their first contribution in #6080
- @huochexizhan made their first contribution in #6079
Full Changelog: v3.3.9...v3.3.10
v3.3.9
What's Changed
🎉 New Features
- Added
-ai
option to generate and run nuclei templates on the fly in natural langauge by @parthmalhotra in #6041
$ nuclei -list h1.txt -ai "extract page titles"
[extract-page-titles] [http] [info] https://api.hackerone.com ["HackerOne API"]
More in docs at https://docs.projectdiscovery.io/tools/nuclei/running#ai-powered-template-generation
- Added initial Live DAST Server API implementation (experimental) by @Ice3man543 in #5772
$ nuclei -dts
__ _
____ __ _______/ /__ (_)
/ __ \/ / / / ___/ / _ \/ /
/ / / / /_/ / /__/ / __/ /
/_/ /_/\__,_/\___/_/\___/_/ v3.3.9
projectdiscovery.io
[INF] DAST Server API: http://localhost:9055/fuzz
[INF] DAST Server Stats URL: http://localhost:9055/stats
⇨ http server started on 127.0.0.1:9055
- Added support for DSL expression evaluation in headless args by @dwisiswant0 in #6017
🐞 Bug Fixes
- Fixed issue with hosterrorscache by @dwisiswant0 in #5984
- Fixed issue in multiproto for missing previous event by @dwisiswant0 in #5967
- Fixed issue with variable dump by @dogancanbakir in #5921
- Fixed missing event for multi protocol by @ShubhamRasal in #5995
- Fixed issue to handle removal of deleted templates during update by @dwisiswant0 in #5998
- Fixed issue with filename length with
-sr
/-srd
option by @Lercas in #5931 - Fixed issue with tcp dialer for MySQL by @doug-threatmate in #5681
- Fixed issue in headless protocol with flow variable access by @dogancanbakir in #6003
Other Changes
- Replaced
encoding/json
withsonic
orgo-json
(fallback) by @dwisiswant0 in #6019 - Removed the use of deprecated mholt/archiver by @AdallomRoy in #5951
- Added new
govulncheck
(CI) workflow by @dwisiswant0 in #5964 - Add flamegraph job (CI) by @dwisiswant0 in #5966
- Added
WithResponseReadSize
function for SDK usages by @meme-lord in #5961 - Added Portuguese translation of README by @Jarro01X in #6033
Issues closed in this release - https://github.com/projectdiscovery/nuclei/milestone/68?closed=1
New Contributors
- @1hehaq made their first contribution in #5974
- @piguagua made their first contribution in #5986
- @kilavvy made their first contribution in #6027
- @Jarro01X made their first contribution in #6033
- @Lercas made their first contribution in #5931
Full Changelog: v3.3.8...v3.3.9