diff options
Diffstat (limited to 'PLAN.md')
| -rw-r--r-- | PLAN.md | 21 |
1 files changed, 17 insertions, 4 deletions
@@ -111,10 +111,23 @@ percent-encoding (space <-> %20), not Go's url.QueryEscape's form- encoding behavior (space <-> '+'), since "URL encode" for a pentester almost always means the former. -Still open from "worth considering": multiple concurrent Repeater tabs, -Intruder payload processing (encoding/case rules) and grep-match/ -grep-extract on results, CA install UX per OS, multiple proxy listeners -and upstream proxy chaining. None of these are started yet. +Shipped since: a standalone Decoder tool ('d') - see above; multiple +concurrent Repeater tabs - 'r' from the history list or detail view now +opens a NEW tab rather than overwriting whatever was already open, +`]`/`[` switch tabs, `ctrl+w` closes the active one (all three gated to +normal mode, so they're inert while typing - `[`/`]` are common JSON +body characters and `ctrl+w` is a textarea binding for delete-word- +backward that must still work while composing a request). Each tab owns +its own request buffer, response view, and send-in-flight state; a slow +send whose result lands after the user has switched away still updates +the correct tab (send results carry the tab index they belong to), and +the status line/response pane it's shown in only updates live if that +tab is still the one on screen. + +Still open from "worth considering": Intruder payload processing +(encoding/case rules) and grep-match/grep-extract on results, CA install +UX per OS, multiple proxy listeners and upstream proxy chaining. None of +these are started yet. Skipped deliberately (from the research, matches this tool's stated scope): active/passive vulnerability scanning, plugin marketplace, |