Version 1.1.0 - Hybrid Approach and Raw HTTP Request Files
TInjA now uses the "hybrid approach"
Polyglots enable efficient scanning, but may be susceptible to false positives. For this reason, a verification request is sent after a template injection has been detected and the template engine has been identified. This verification request contains a template expression tailored to the template engine.
Raw Read Function
TInjA can now read raw HTTP request files. So you can, for example, save a HTTP request from your favorite proxy tool and import it with TInjA using tinja raw -R "/path/to/file".
Thanks @n00b-bot for this feature! PR 1
Miscellaneous
- smaller bugfixes
- improved the report and output
- upgraded dependencies
- fixed typos