tag:github.com,2008:https://github.com/Hackmanit/TInjA/releases 2025-05-08T21:15:44Z tag:github.com,2008:Repository/691006749/1.2.0 2025-05-08T21:26:31Z <h2>Changelog</h2> <ul> <li>added "handlebars with context" to the supported template engines <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/Hackmanit/TInjA/commit/a434f525798cdc942427b22894608a5d9181037b/hovercard" href="https://github.com/Hackmanit/TInjA/commit/a434f525798cdc942427b22894608a5d9181037b"><tt>a434f52</tt></a> (Thanks <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/nappolitane/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/nappolitane">@nappolitane</a> for pointing this out: <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2779721474" data-permission-text="Title is private" data-url="https://github.com/Hackmanit/TInjA/issues/12" data-hovercard-type="issue" data-hovercard-url="/Hackmanit/TInjA/issues/12/hovercard" href="https://github.com/Hackmanit/TInjA/issues/12">#12</a>)</li> <li>upgraded go and dependencies <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/Hackmanit/TInjA/commit/10ff120c5cda63d9acead78176d9e25a6a9f538e/hovercard" href="https://github.com/Hackmanit/TInjA/commit/10ff120c5cda63d9acead78176d9e25a6a9f538e"><tt>10ff120</tt></a></li> <li>updated the user agent <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/Hackmanit/TInjA/commit/1b0821a69f15c530bd31d550eeef9e924c05e88c/hovercard" href="https://github.com/Hackmanit/TInjA/commit/1b0821a69f15c530bd31d550eeef9e924c05e88c"><tt>1b0821a</tt></a></li> </ul> m10x tag:github.com,2008:Repository/691006749/1.1.4 2024-05-02T09:13:18Z <h1>Changelog</h1> <ul> <li>Body Parameter Concatenation Fix by @CrispyJonesDev (PR <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2267993217" data-permission-text="Title is private" data-url="https://github.com/Hackmanit/TInjA/issues/11" data-hovercard-type="pull_request" data-hovercard-url="/Hackmanit/TInjA/pull/11/hovercard" href="https://github.com/Hackmanit/TInjA/pull/11">#11</a>)</li> <li>Upgraded deps <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/Hackmanit/TInjA/commit/afb572544a402b72f2b1f5aedfc94d78af135372/hovercard" href="https://github.com/Hackmanit/TInjA/commit/afb572544a402b72f2b1f5aedfc94d78af135372"><tt>afb5725</tt></a></li> </ul> m10x tag:github.com,2008:Repository/691006749/1.1.3 2024-03-21T06:07:10Z <h2>Changelog</h2> <ul> <li>TInjA now prefers scheme/host from the http request's path, if specified <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/Hackmanit/TInjA/commit/8c8391119bad0a3a485586df3e5e6930ba0c54e4/hovercard" href="https://github.com/Hackmanit/TInjA/commit/8c8391119bad0a3a485586df3e5e6930ba0c54e4"><tt>8c83911</tt></a> (Thanks <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/double16/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/double16">@double16</a> for pointing this out <a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2167146079" data-permission-text="Title is private" data-url="https://github.com/Hackmanit/TInjA/issues/9" data-hovercard-type="issue" data-hovercard-url="/Hackmanit/TInjA/issues/9/hovercard" href="https://github.com/Hackmanit/TInjA/issues/9">#9</a>)</li> <li>fixed http flag <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/Hackmanit/TInjA/commit/8c8391119bad0a3a485586df3e5e6930ba0c54e4/hovercard" href="https://github.com/Hackmanit/TInjA/commit/8c8391119bad0a3a485586df3e5e6930ba0c54e4"><tt>8c83911</tt></a></li> <li>updated deps <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/Hackmanit/TInjA/commit/dd8fbb4d0ebc93e7a9d4f9b64ec6c05b3173e12d/hovercard" href="https://github.com/Hackmanit/TInjA/commit/dd8fbb4d0ebc93e7a9d4f9b64ec6c05b3173e12d"><tt>dd8fbb4</tt></a></li> </ul> m10x tag:github.com,2008:Repository/691006749/1.1.2 2024-03-03T10:55:51Z <h2>Specify Headers to Test for Template Injection</h2> <p><strong>--testheaders</strong> has been introduced as a new flag. It takes one or more comma-separated header names as argument. The specified headers are used to test for template injection.<br> Example: <code>--testheaders Host,Origin,X-Forwarded-For</code></p> <h2>Changelog</h2> <ul> <li>added --testheaders flag <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/Hackmanit/TInjA/commit/dd4657fccc82257e3cba36fc18714959563da5b7/hovercard" href="https://github.com/Hackmanit/TInjA/commit/dd4657fccc82257e3cba36fc18714959563da5b7"><tt>dd4657f</tt></a></li> <li>updated dependencies <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/Hackmanit/TInjA/commit/7974f63549e72de4870590e25fb132b56dcc8313/hovercard" href="https://github.com/Hackmanit/TInjA/commit/7974f63549e72de4870590e25fb132b56dcc8313"><tt>7974f63</tt></a></li> </ul> m10x tag:github.com,2008:Repository/691006749/1.1.1 2024-02-15T13:55:05Z <h2>Changelog</h2> <p>A runtime error was fixed (<a class="issue-link js-issue-link" data-error-text="Failed to load title" data-id="2136352054" data-permission-text="Title is private" data-url="https://github.com/Hackmanit/TInjA/issues/7" data-hovercard-type="issue" data-hovercard-url="/Hackmanit/TInjA/issues/7/hovercard" href="https://github.com/Hackmanit/TInjA/issues/7">#7</a>) <a class="commit-link" data-hovercard-type="commit" data-hovercard-url="https://github.com/Hackmanit/TInjA/commit/c192aa1b70d4a508b78c0630f87424b3e3def13c/hovercard" href="https://github.com/Hackmanit/TInjA/commit/c192aa1b70d4a508b78c0630f87424b3e3def13c"><tt>c192aa1</tt></a></p> m10x tag:github.com,2008:Repository/691006749/1.1.0 2024-01-03T05:59:13Z <h2>TInjA now uses the "hybrid approach"</h2> <p>Polyglots enable efficient scanning, but may be susceptible to false positives. For this reason, a verification request is sent after a template injection has been detected and the template engine has been identified. This verification request contains a template expression tailored to the template engine.</p> <h2>Raw Read Function</h2> <p>TInjA can now read raw HTTP request files. So you can, for example, save a HTTP request from your favorite proxy tool and import it with TInjA using <code>tinja raw -R "/path/to/file"</code>.</p> <p>Thanks <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/n00b-bot/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/n00b-bot">@n00b-bot</a> for this feature! <a href="https://github.com/Hackmanit/TInjA/pull/1" data-hovercard-type="pull_request" data-hovercard-url="/Hackmanit/TInjA/pull/1/hovercard">PR 1</a></p> <h2>Miscellaneous</h2> <ul> <li>smaller bugfixes</li> <li>improved the report and output</li> <li>upgraded dependencies</li> <li>fixed typos</li> </ul> m10x tag:github.com,2008:Repository/691006749/1.0.5 2023-11-25T10:22:52Z <p>Available binaries:</p> <ul> <li>Windows amd64</li> <li>Linux amd64</li> <li>Linux arm64</li> <li>Darwin/MacOS amd64</li> <li>Darwin/MacOS arm64</li> <li>FreeBSD amd64</li> <li>OpenBSD amd64</li> </ul> m10x