- Fix issue #9 (small bug in api.payload.Payload())
lrun
command is now able to change PWD (issue #10)- Remove deprecated
lcd
andlpwd
commands. - Fix some small bugs and documentation misspells.
- Fix issue #6 (*_proxy env var handling through http tunnel).
- All settings can now be reset with
set <VAR> %%DEFAULT%%
- Add full backward compatibility with older phpsploit session files.
- Rewritten the whole PhpSploit framework in python 3 with new skeleton.
- The
system
have been renamed intorun
. - Add
corectl
command, which includes some core debugging utils. TEXTEDITOR
setting has been renamed toEDITOR
.WEBBROWSER
setting has been renamed toBROWSER
.- The
infect
command has been removed, its role is now taken byexploit
. - The new
session
command now manages the oldload
andsave
commands. - The
set
command now supplies a new keyword ("+") for line appending. - Any setting now suports random choice from multiple values, with the new
set
command's+
keyword, that uses SettingVar class as data wrapper. - The
eval
command has been replaced bysource
, more restrictive. - The
lastcmd
command has been replaced bybacklog
, more simple. - The phpsploit source code has moved to ./src/ directory.
- Plugins path is now available at root directory.
- User plugins can now overwrite core plugins (~/.phpsploit/plugins/)
- The plugins main script names are now plugin.py instead of script.py.
- Plugin help strings are now taken from the plugin.py's docString.
- Improved all command specific help strings, with man like syntax.
- New
load
command, which provides interactive session file loading. - Typing
<cmd> --help
now shows help ashelp <cmd>
. - Prefixing a command with % from virtual plugin shell instances allows remoteShell command execution without leaving the virtual shell.
- Added lowercase variable name completion on
set
andenv
commands. - The ./doc/ files has been moved to the root directory.
- The system plugin now handles empty responses.
- If the loaded session has changed, shell leaving must now be confirmed.
- The
env
andset
commands now display variables which names starts - with the first argument string if it is not a complete variable name.
- If present, the bash $XDG_CONFIG_HOME environment variable is now used as user's root configuration path instead of home directory.
- ./framework/misc/ is now the default miscellaneous files directory.
- The ascii README has been moved to the PhpSploit root directory.
- ./doc/ is now used as help files containers instead of ./readme/.
- Added a ./doc/CONTRIBUTE file, which is a readme for contributors.
- The DISCLAIMER has been fully rewritten for legal purposes.
- The user manual (man) template is now available at ./framework/misc/.
- Settings from loaded session are now correctly checked at load.
- Added multi command support, with semicolon separator (bash like).
- Command arguments now support bash like enquoting features.
- Added the
eval
command, providing commands list execution from file.
- The commands can now be written in multi line mode, like in the bash
- interpreter, by ending a line with an antislash.
- Pressing enter on an unfinished enquoted command is now interpreted as a newline insertion instead of a command sending, like in bash.