Files
Typo3Scan/doc/CHANGELOG.md
2020-01-31 23:38:50 +01:00

157 lines
4.4 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
## Version 0.6
* Added version regex for composer installations
* Output bugfix
## Version 0.5.2
* Removed 'interesting header' output
* Added output of extension state
* Bugfixes
* Cosmetic output changes
## Version 0.5.1
* Output and version detection fix
## Version 0.5
* Rename to Typo3Scan
* Code cleanup
* Many improvements
* Using Database to store extensions, version info and vulnerabilities (Core and Extensions)
* TOR support dropped
* *--top* parameter support dropped. Can not be used anymore, because download counter is not used anymore.
Instead *--vuln* parameter can be used to check for extensions with known vulnerabilities.
## Version 0.4.5.2
* Fixed error on update
* Fixed version search
* Path to version file(s) is printed
* Support for HTTP Basic Auth is now added (--auth)
## Version 0.4.5.1
* Fixed error on launch when launching from different directory
* IP address restriction for backend login is now shown
* Code cleanup
* Suppress InsecureRequestWarning
## Version 0.4.5
* Version search for Typo3 v8
* Updated Extensions
## Version 0.4.4
* Added support for Typo3 version 8
* Clean-up
* Updated extension download URL
## Version 0.4.3
* Added --threads
* Added --user-agent
* Added --timeout
* Added help message (-h, --help)
* No support for privoxy anymore
## Version 0.4.2
* Added new algorithms for Typo3 installation and used path
* Bugfixes
## Version 0.4.1
* Fixed link to socksipy for python 3
* Fixed bug in versionsearch
* Fixed TOR issues
* Bugfixes
## Version 0.4
* Using Python 3 now!
* Using classes and objects
* Better searching algorithm
* Better threading (fixed local network DOS when cheking a lot of extensions)
* Clearer output
* Version search for extensions is unreliable and not used atm. Isead a link to the changelog/readme will be given
* Used threads are now always 6
## Version 0.3.3
* Extensions are now saved into different files, separated by state (experimental | alpha | beta | stable | outdated | all). This makes it possible to check more specific ones.
## Version 0.3.2
* Added support for Windows and Red Hat systems
## Version 0.3.1
* It is now possible to check for specific extensions (-e or --extension).
* Domains must be specified with 'http://' or 'https://' (for example: https://127.0.0.1).
* Login page redirections can be followed or not.
* Fixed the 'all extensions are installed' bug in the summary when using verbose mode.
* Set sleep between threads to 0.5 to fix time out errors when checking a huge amount of extensions.
## Version 0.3
* Using modules instead of one class
* Accepting now strg+c when in multi-threaded mode
* Update function will now generate a list with extensions instead of an xml. This list is sorted by default (download count). Loading this file is much faster than parsing the xml everytime.
* It is now possible to use only TOR, Privoxy, or TOR with Privoxy (in order to prevent DNS leakage).
* Max. threads are set to 10 to prevent connection issues and DoS, default threads are now 7.
* Connection timeout can be set with '--timeout VALUE'. Default is 20.
* Verbose mode lists also not installed extensions (but trust me, you don´t want to scroll through over 6400 entries).
* Typo3 version search is more accurate
* If the backend login page could not be found, but Typo3 is used, the user is asked, if he want to proceed. This will mostly lead to "no extensions are installed".
## Version 0.2.1
* Fixed some bugs
* It is now possible to specifiy threads.<br>
Default is 10.<br>
I strongly recommend to use only 2 or even 1 thread when using TOR!<br>
This is because TOR is (extremely) slow and will produce connection errors if too many threads are used.
## Version 0.2
* Added support for Privoxy and TOR
* It is now possible to use Typo-Enumerator with Privoxy and TOR (--tor)<br>
Privoxy is used to prevent dns leakage ;)<br>
Please make sure the Privoxy config (/etc/privoxy/config) is set to something like:
- listen-address 127.0.0.1:8118
- forward-socks5 / 127.0.0.1:9150 .<br>
These are the standart ports for Privoxy and TOR<br>
If TOR is used, threads will be set to 2 in order to minimize errors
* Version search for extensions is now more reliable
## Version 0.1.6
* Added version search for extensions
## Version 0.1.5
* Added extension search
## Version 0.1.4
* Added support for Typo v6.X
## Version 0.1.3
* Optimized requests
## Version 0.1.2
* Added version guessing
## Version 0.1.1
* Added version search for Typo3
## Version 0.1
* Prototype