v3.11.1
Added 7
- Improve lua script with args and values
- Add gRPC JavaScript library
- Render element locators before lookup in headless protocol
- Add duration fields to other events in protocols
- Add DNSSEC DNS record types
- Add per-execution result callback for thread-safe engine in SDK
- Add nuclei/http JavaScript client
Changed 6
- Reuse metadata cache across thread-safe scans
- Improve MySQL JavaScript fingerprint with native handshake parsing
- Improve MSSQL JavaScript fingerprint via TDS prelogin
- Replace Split in loops with more efficient SplitSeq
- Wire -max-time soft termination via goflags
- Bind JavaScript execution to verified content in templates
Fixed 7
- Avoid deprecated ECDSA coordinate access in signer
- Guard against negative regex extractor group to avoid index-out-of-range panic
- Preserve form parameters with shared prefixes in fuzz protocol
- Fix raw HTTP parser panic on single-LF request body
- Avoid panic for disabled stats interval in progress
- Fix case-insensitive word matcher missing dynamic rendered values
- Stop busy-spinning hang monitor
What's Changed
🎉 New Features
- Improving lua script with args and values by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/6561
🐞 Bug Fixes
- feat(lib): reuse metadata cache across thread-safe scans by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/7608
🔨 Maintenance
- chore(deps): bump the modules group with 5 updates by @dependabot[bot] in https://github.com/projectdiscovery/nuclei/pull/7528
- chore(deps): bump the modules group with 5 updates by @dependabot[bot] in https://github.com/projectdiscovery/nuclei/pull/7532
- chore(deps): bump crate-ci/typos from 1.47.2 to 1.48.0 in the workflows group across 1 directory by @dependabot[bot] in https://github.com/projectdiscovery/nuclei/pull/7529
- chore(deps): bump the modules group with 3 updates by @dependabot[bot] in https://github.com/projectdiscovery/nuclei/pull/7554
- chore(deps): bump the modules group with 5 updates by @dependabot[bot] in https://github.com/projectdiscovery/nuclei/pull/7615
- chore(deps): bump the modules group with 3 updates by @dependabot[bot] in https://github.com/projectdiscovery/nuclei/pull/7634
- chore(deps): bump actions/stale from 10 to 11 in the workflows group by @dependabot[bot] in https://github.com/projectdiscovery/nuclei/pull/7635
Other Changes
- gRPC JavaScript library by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7527
- chore(deps): bump the go_modules group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/projectdiscovery/nuclei/pull/7533
- fix(signer): avoid deprecated ECDSA coordinate access by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/7537
- feat(headless): render element locators before lookup by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/7549
- Guard against a negative regex extractor group to avoid an index-out-of-range panic by @arpitjain099 in https://github.com/projectdiscovery/nuclei/pull/7531
- fix(fuzz): preserve form parameters with shared prefixes by @james-yusuke in https://github.com/projectdiscovery/nuclei/pull/7515
- Fix raw HTTP parser panic on single-LF request body by @zainnadeem786 in https://github.com/projectdiscovery/nuclei/pull/7525
- chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in the go_modules group across 1 directory by @dependabot[bot] in https://github.com/projectdiscovery/nuclei/pull/7555
- fix(progress): avoid panic for disabled stats interval by @james-yusuke in https://github.com/projectdiscovery/nuclei/pull/7557
- Fix case-insensitive
wordmatcher missing dynamic (rendered) values by @Synvoya in https://github.com/projectdiscovery/nuclei/pull/7523 - fix: stop busy-spinning hang monitor by @james-yusuke in https://github.com/projectdiscovery/nuclei/pull/7559
- feat(protocols): add duration fields to other events by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/7428
- refactor: replace Split in loops with more efficient SplitSeq by @stringsbuilder in https://github.com/projectdiscovery/nuclei/pull/7278
- fix(index): limit include-tags to matching tag exclusions by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/7536
- Add DNSSEC DNS record types by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7564
- chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in the go_modules group across 1 directory by @dependabot[bot] in https://github.com/projectdiscovery/nuclei/pull/7594
- sdk: per-execution result callback for thread-safe engine by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7587
- docs: missing CLI flags in README by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7596
- cli: wire -max-time soft termination via goflags by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7589
- http tlsmeta by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7586
- chore(deps): bump github.com/getkin/kin-openapi from 0.132.0 to 0.144.0 in the go_modules group across 1 directory by @dependabot[bot] in https://github.com/projectdiscovery/nuclei/pull/7609
- fix: avoid panic in BuildRequest when request response has no request by @DPS0340 in https://github.com/projectdiscovery/nuclei/pull/7601
- Add CLI runner goroutine leak test by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7582
- Print config directories in -hc and verbose modes by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7578
- extend js smb for #4707 by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7565
- Improve MySQL JS fingerprint with native handshake parsing by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7575
- Improve MSSQL JS fingerprint via TDS prelogin by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7577
- rawhttp bump by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7593
- add nuclei/http js client by @Mzack9999 in https://github.com/projectdiscovery/nuclei/pull/7568
- fix(loader): compile requests during validation by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/7616
- chore(deps): bump modules with known advisories by @dogancanbakir in https://github.com/projectdiscovery/nuclei/pull/7632
- feat(templates): bind js execution to verified content by @dwisiswant0 in https://github.com/projectdiscovery/nuclei/pull/7636
- release prep by @ehsandeep in https://github.com/projectdiscovery/nuclei/pull/7641
New Contributors
- @arpitjain099 made their first contribution in https://github.com/projectdiscovery/nuclei/pull/7531
- @james-yusuke made their first contribution in https://github.com/projectdiscovery/nuclei/pull/7515
- @zainnadeem786 made their first contribution in https://github.com/projectdiscovery/nuclei/pull/7525
- @Synvoya made their first contribution in https://github.com/projectdiscovery/nuclei/pull/7523
- @stringsbuilder made their first contribution in https://github.com/projectdiscovery/nuclei/pull/7278
- @DPS0340 made their first contribution in https://github.com/projectdiscovery/nuclei/pull/7601
Full Changelog: https://github.com/projectdiscovery/nuclei/compare/v3.11.0...v3.11.1