## 0.7.0 - In Development * [#38](https://github.com/adamcaudill/yawast/issues/38) - JSON Output Option via `--output=` (work in progress) * [#133](https://github.com/adamcaudill/yawast/issues/133) - Include a Timestamp In Output * [#134](https://github.com/adamcaudill/yawast/issues/134) - Add options to DNS command * [#135](https://github.com/adamcaudill/yawast/issues/135) - Incomplete Certificate Chain Warning * [#137](https://github.com/adamcaudill/yawast/issues/137) - Warn on TLS 1.0 * [#138](https://github.com/adamcaudill/yawast/issues/138) - Warn on Symantec Roots * [#139](https://github.com/adamcaudill/yawast/issues/139) - Add Spider Option * [#140](https://github.com/adamcaudill/yawast/issues/140) - Save output on cancel * [#141](https://github.com/adamcaudill/yawast/issues/141) - Flag --internalssl as Deprecated * [#147](https://github.com/adamcaudill/yawast/issues/147) - User Enumeration via Password Reset Form * [#148](https://github.com/adamcaudill/yawast/issues/148) - Added `--vuln_scan` option to enable new vulnerability scanner * [#151](https://github.com/adamcaudill/yawast/issues/151) - User Enumeration via Password Reset Form Timing Differences * [#152](https://github.com/adamcaudill/yawast/issues/152) - Add check for 64bit TLS Cert Serial Numbers * [#130](https://github.com/adamcaudill/yawast/issues/130) - Bug: HSTS Error leads to printing HTML * [#132](https://github.com/adamcaudill/yawast/issues/132) - Bug: Typo in SSL Output * [#142](https://github.com/adamcaudill/yawast/issues/142) - Bug: Error In Collecting DNS Information ## 0.6.0 - 2018-01-16 * [#54](https://github.com/adamcaudill/yawast/issues/54) - Check for Python version in Server header * [#59](https://github.com/adamcaudill/yawast/issues/59) - SSL Labs: Display Certificate Chain * [#109](https://github.com/adamcaudill/yawast/issues/109) - DNS CAA Support * [#113](https://github.com/adamcaudill/yawast/issues/113) - Better False Positive Detection For Directory Search * [#115](https://github.com/adamcaudill/yawast/issues/115) - Add dns Command * [#116](https://github.com/adamcaudill/yawast/issues/116) - Add option '--nodns' to skip DNS checks * [#117](https://github.com/adamcaudill/yawast/issues/117) - Show additional information about the TLS connection * [#118](https://github.com/adamcaudill/yawast/issues/118) - Add check for CVE-2017-12617 - Apache Tomcat PUT RCE * [#120](https://github.com/adamcaudill/yawast/issues/120) - Add Docker support * [#122](https://github.com/adamcaudill/yawast/issues/122) - SSL Labs API v3 * [#125](https://github.com/adamcaudill/yawast/issues/125) - Add new search paths for Struts Sample Files * [#129](https://github.com/adamcaudill/yawast/issues/129) - Bug: DNS Info fails if MX record points to a domain without records ## 0.5.2 - 2017-07-13 * [#107](https://github.com/adamcaudill/yawast/issues/107) - Current version check * [#111](https://github.com/adamcaudill/yawast/issues/111) - Display cipher suite used when running the SWEET32 test * [#110](https://github.com/adamcaudill/yawast/issues/110) - Bug: SWEET32 test doesn't properly force 3DES suites ## 0.5.1 - 2017-06-26 * [#106](https://github.com/adamcaudill/yawast/issues/106) - Bug: SWEET32: Incorrect Request Count ## 0.5.0 - 2017-04-05 * [#35](https://github.com/adamcaudill/yawast/issues/35) - Add check for SameSite cookie attribute * [#53](https://github.com/adamcaudill/yawast/issues/53) - Added checks for .well-known URLs * [#75](https://github.com/adamcaudill/yawast/issues/75) - Use internal SSL scanner for non-standard ports * [#84](https://github.com/adamcaudill/yawast/issues/84) - Improve the display of ct_precert_scts * [#86](https://github.com/adamcaudill/yawast/issues/86) - Add check for Tomcat Manager & common passwords * [#87](https://github.com/adamcaudill/yawast/issues/87) - Tomcat version detection via invalid HTTP verb * [#88](https://github.com/adamcaudill/yawast/issues/88) - Add IP Network Info via [api.iptoasn.com](https://api.iptoasn.com/) * [#90](https://github.com/adamcaudill/yawast/issues/90) - Add HSTS Preload check via [HSTSPreload.com](https://hstspreload.com/) * [#91](https://github.com/adamcaudill/yawast/issues/91) - Enhanced file search * [#96](https://github.com/adamcaudill/yawast/issues/96) - Scan for known SRV DNS Records * [#97](https://github.com/adamcaudill/yawast/issues/97) - Search for Common Subdomains * [#100](https://github.com/adamcaudill/yawast/issues/100) - Check for missing cipher suite support * [#102](https://github.com/adamcaudill/yawast/issues/102) - Use SSLShake to power cipher suite enumeration * [#76](https://github.com/adamcaudill/yawast/issues/76) - Bug: Handle error for OpenSSL version support error * [#98](https://github.com/adamcaudill/yawast/issues/98) - Bug: SWEET32 Test Fails if 3DES Not Support By Latest Server Supported TLS Version * [#99](https://github.com/adamcaudill/yawast/issues/99) - Bug: Cloudflare SWEET32 False Positive * [#101](https://github.com/adamcaudill/yawast/issues/101) - Bug: SWEET32 False Negative * [#103](https://github.com/adamcaudill/yawast/issues/103) - Bug: Scan fails if HEAD isn't supported * Various code and other improvements. ## 0.4.0 - 2016-11-03 * [#66](https://github.com/adamcaudill/yawast/issues/66) - Thread directory search for better performance * [#67](https://github.com/adamcaudill/yawast/issues/67) - Make "Found Redirect" optional * [#69](https://github.com/adamcaudill/yawast/issues/69) - False positives on non-standard 404 handling * [#73](https://github.com/adamcaudill/yawast/issues/73) - Use `--internalssl` when host is an IP address * [#64](https://github.com/adamcaudill/yawast/issues/64) - Add check for secure cookie on HTTP host * [#45](https://github.com/adamcaudill/yawast/issues/45) - Access Control Headers Check * [#65](https://github.com/adamcaudill/yawast/issues/65) - Bug: Output redirection doesn't work correctly * [#70](https://github.com/adamcaudill/yawast/issues/70) - Bug: Handle scans of IP addresses * [#72](https://github.com/adamcaudill/yawast/issues/72) - Bug: internalssl & Scanning IPs Fails ## 0.3.0 - 2016-09-15 * [#61](https://github.com/adamcaudill/yawast/issues/61) - SSL Session Count: force 3DES suites * [#23](https://github.com/adamcaudill/yawast/issues/23) - Add check for HTTP to HTTPS redirect * [#63](https://github.com/adamcaudill/yawast/issues/63) - Rename `--sslsessioncount` to `--tdessessioncount` ## 0.2.2 - 2016-09-07 * [#55](https://github.com/adamcaudill/yawast/issues/55) - Add Protocol Intolerance information. * Update `ssllabs` required version to 1.24.0 to correct issue with new SSL Labs API release. ## 0.2.1 - 2016-09-03 * Initial Public Release