Afrog releases a new version, release 1.3.5. I really miss you

afrog It is a high-performance 、 Fast and steady 、PoC Customizable vulnerability scanning tool ,PoC contain CVE、CNVD、 Default password 、 Information disclosure 、 fingerprint identification 、 Unauthorized access 、 Arbitrary file reading 、 Command execution and other vulnerability types , Help network security practitioners quickly verify and repair vulnerabilities in time .

newly added

• Support go Language PoC Development
• newly added Refreshing skin in summer Vulnerability report template
• console print The vulnerability will show complete URL
• newly added 72 individual PoC, common 626 individual PoC

BUG

• Repair tongda-insert-sql-inject.yaml False positives BUG
• Repair landray-oa-syssearchmain-rce.yaml False positives BUG

Loophole 72

• Redis Unauthorized access
• MongoDB Unauthorized access
• Memcache Unauthorized access
• ZooKeeper Unauthorized access
• Rsync Unauthorized access
• Docker Remote Api Unauthorized access
• ClickHouse Api Unauthorized access
• Apache Tomcat AJP File read and contain vulnerability
• Git / SVN Code escrow leak
• CVE / CNVD / Disclosure / Unauthorized / Vulnerability …
  wait , See ：https://github.com/zan8in/afrog/blob/main/POCLIST.md

download

https://github.com/zan8in/afrog/releases/tag/v1.3.5