Skip to content

Releases: Sh1Yo/x8

v3.1.0

04 Oct 13:32
Compare
Choose a tag to compare

JSON output now includes "reason" field for every found parameter.

v3.0.2

11 Aug 15:47
Compare
Choose a tag to compare

Removed url at the start of the request output.

v3.0.1

11 Aug 13:52
Compare
Choose a tag to compare

Added raw request output.

v3.0.0

28 Jul 16:07
Compare
Choose a tag to compare

Now it is possible to discover new headers and header values!

Improved --test flag
Improved the calculating of the optimal number of parameters per request
Changed output format when no parameters found
Added --verify flag
Some other fixes

v3.0.0-beta.1

22 Jul 10:30
Compare
Choose a tag to compare
v3.0.0-beta.1 Pre-release
Pre-release

Improved --test flag
Improved the calculating of the optimal number of parameters per request
Some other fixes

Now x8 can work with headers as well!

Discover header values:

x8 -u https://example.com -w wordlist.txt -H "Cookie: %s"

By default the parameter template is "%k=%v; "

Discover new headers:

x8 -u https://example.com -w wordlist.txt --headers

v2.5.0

20 Jul 15:44
Compare
Choose a tag to compare

Improved the parsing of request files.
Added the --keep-newlines flag that allows using newlines in body and parameter template.
Fixed guessing body type logic.

v2.4.0

13 Jul 07:59
Compare
Choose a tag to compare

Added gzip support
Improved error messages
Optimized heuristic
--insecure now replaced with --proto
Fixed --test and --encode options

v2.3.4

11 Jul 16:35
Compare
Choose a tag to compare

Fixed parameter discovering in the json body (this bug was introduced in v2.3.3).
Fixed default parameter template when json body is present and parameters are sent via query.
Removed unnecessary pieces of code.
Clarified --help.
Also, now the tool collects body from several lines when request file is used.

v2.3.2

10 Jul 15:51
Compare
Choose a tag to compare

Fix raw requests with HTTP/2

v2.3.1

09 Jul 14:12
Compare
Choose a tag to compare

Add new lines to output files.
Fix json body detection in raw requests.