Skip to content

Goby Beta1.7.192

Compare
Choose a tag to compare
@gobysec gobysec released this 24 Aug 10:53
· 25 commits to master since this release
2938d2f

In this update

• New extensions: 1. SubDomainsBrute; 2. Deserialization vulnerability exploit tool and Deserialization the vulnerability Payload generator.
• Added cookie access: Unauthorized logins automatically set cookie access.
• Support for task naming: It helps to distinguish multiple tasks by naming them after the note task information.
• Support all ports display and export.
• New protocols: added dubbo, dtls, t3, htcpcp, etc.
• Enhanced protocol identification, enhanced SSH protocol and L2TP protocol for more information extraction.
• New vulnerabilities: CNNVD-202004-1959, CVE-2019-11510, CNVD-2019-32204, CNVD-2019-16798, CVE-2020-5902, CVE-2010-0219, Weaver e-cology OA Database config leakage, CVE-2020-3452, CNVD-2019-34241, CNVD-2019-29902.
• Fixed VPN unable scan problem such as Sangfor.
• Fixed smb and tomcat weak password are inaccurately reported.
• Optimized server performance to fix Shell service instability.
• Fixed some display problems.

SubDomainsBrute

• Preset 3000 dictionaries, after input root domain, Start cracking.
image

• Custom dictionary: Configure the full path of the dictionary, such as: E:\test\src\dict.txt.
Notice: Custom dictionary must be TXT file, newline split.↓
image

Cookie access

image

New vulnerabilities

image