924bdee962
chore(deps): bump alpine from 3.16.3 to 3.17.0 ( #2914 )
...
Bumps alpine from 3.16.3 to 3.17.0.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-28 11:55:18 +05:30
c7913784bf
chore(deps): bump github.com/projectdiscovery/wappalyzergo in /v2 ( #2917 )
...
Bumps [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo ) from 0.0.70 to 0.0.71.
- [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases )
- [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.0.70...v0.0.71 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/wappalyzergo
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-28 11:55:01 +05:30
8fbdb8db89
Moving using as code from design document to readme ( #2912 )
2022-11-26 20:09:24 +05:30
e0cfa85811
retryablehttp-go bump ( #2910 )
2022-11-26 19:39:49 +05:30
b45e2d28f2
docs: Indonesia translation README ( #2896 )
...
* docs: Indonesia translation README
* docs: Add ID hyperlink for README
2022-11-25 22:42:33 +05:30
d3a929d4c3
Making matcher name case insensitive
2022-11-25 17:22:50 +01:00
1493fd3d6a
Update goflag to solve the header truncated issue ( #2897 )
...
* Update goflag to solve the header truncated issue
* Bump goflag version v0.1.5
* go mod tidy
Co-authored-by: Mzack9999 <mzack9999@protonmail.com>
2022-11-25 12:28:37 +05:30
d230a5fbb3
Merge pull request #2884 from projectdiscovery/issue-2832-race-condition-test
...
Race condition tests
2022-11-24 22:31:41 +01:00
2586d9b4a7
removing subset
2022-11-24 22:12:44 +01:00
440bfe030a
Merge branch 'dev' into issue-2832-race-condition-test
2022-11-24 22:10:42 +01:00
67fda109b2
Fix usage typos ( #2889 )
2022-11-24 21:18:02 +05:30
b3d4dba047
Reverting retryablehttp-go to fix custom http client ( #2900 )
...
* Reverting retryablehttp-go to fix custom http client
* fixing sandbox test
2022-11-24 21:16:03 +05:30
48ebe3460f
chore(deps): bump github.com/projectdiscovery/clistats in /v2 ( #2892 )
...
Bumps [github.com/projectdiscovery/clistats](https://github.com/projectdiscovery/clistats ) from 0.0.8 to 0.0.9.
- [Release notes](https://github.com/projectdiscovery/clistats/releases )
- [Commits](https://github.com/projectdiscovery/clistats/compare/v0.0.8...v0.0.9 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/clistats
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-24 21:06:26 +05:30
43c79f57be
chore(deps): bump github.com/antchfx/xmlquery in /v2 ( #2891 )
...
Bumps [github.com/antchfx/xmlquery](https://github.com/antchfx/xmlquery ) from 1.3.12 to 1.3.13.
- [Release notes](https://github.com/antchfx/xmlquery/releases )
- [Commits](https://github.com/antchfx/xmlquery/compare/v1.3.12...v1.3.13 )
---
updated-dependencies:
- dependency-name: github.com/antchfx/xmlquery
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-24 21:06:10 +05:30
05a3dfccc3
chore(deps): bump github.com/go-rod/rod from 0.112.1 to 0.112.2 in /v2 ( #2893 )
...
Bumps [github.com/go-rod/rod](https://github.com/go-rod/rod ) from 0.112.1 to 0.112.2.
- [Release notes](https://github.com/go-rod/rod/releases )
- [Commits](https://github.com/go-rod/rod/compare/v0.112.1...v0.112.2 )
---
updated-dependencies:
- dependency-name: github.com/go-rod/rod
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-24 21:05:18 +05:30
ef66c80684
chore(deps): bump github.com/aws/aws-sdk-go in /v2 ( #2894 )
...
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go ) from 1.44.144 to 1.44.145.
- [Release notes](https://github.com/aws/aws-sdk-go/releases )
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.144...v1.44.145 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-24 21:05:00 +05:30
291a0fea94
Merge pull request #2856 from projectdiscovery/sandbox-pr
...
Added sandboxing for payload files and requests
2022-11-24 14:07:33 +05:30
694a2a7ec5
Added sandbox details to README
2022-11-24 14:02:58 +05:30
6d76fcd4e7
fix oh wrong path
2022-11-23 14:40:00 +01:00
2d76498692
fixes
2022-11-23 14:30:12 +01:00
3014b40ac6
Fixes #2885 ( #2886 )
...
* docker go version update
* docker fix
* version update
* update chinese readme and typo fixes. (#2862 )
* Fixes #2885
Fixes #2885
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
Co-authored-by: Xc1Ym <xuedongyuming2233@gmail.com>
2022-11-23 18:21:22 +05:30
c2641ccbc4
chore(deps): bump github.com/aws/aws-sdk-go in /v2 ( #2879 )
...
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go ) from 1.44.140 to 1.44.144.
- [Release notes](https://github.com/aws/aws-sdk-go/releases )
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.140...v1.44.144 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-23 18:20:16 +05:30
2c39983ee0
chore(deps): bump github.com/xanzy/go-gitlab in /v2 ( #2881 )
...
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab ) from 0.74.0 to 0.76.0.
- [Release notes](https://github.com/xanzy/go-gitlab/releases )
- [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go )
- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.74.0...v0.76.0 )
---
updated-dependencies:
- dependency-name: github.com/xanzy/go-gitlab
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-23 18:20:03 +05:30
08d6e99291
chore(deps): bump github.com/projectdiscovery/goflags in /v2 ( #2880 )
...
Bumps [github.com/projectdiscovery/goflags](https://github.com/projectdiscovery/goflags ) from 0.1.3 to 0.1.4.
- [Release notes](https://github.com/projectdiscovery/goflags/releases )
- [Commits](https://github.com/projectdiscovery/goflags/compare/v0.1.3...v0.1.4 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/goflags
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-23 18:19:34 +05:30
ee9b628b1b
chore(deps): bump github.com/projectdiscovery/rawhttp in /v2 ( #2878 )
...
Bumps [github.com/projectdiscovery/rawhttp](https://github.com/projectdiscovery/rawhttp ) from 0.1.2 to 0.1.3.
- [Release notes](https://github.com/projectdiscovery/rawhttp/releases )
- [Commits](https://github.com/projectdiscovery/rawhttp/compare/v0.1.2...v0.1.3 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/rawhttp
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-23 18:19:22 +05:30
ff9596f618
workflow updates ( #2883 )
...
* workflow updates
* added go mod download in build test
2022-11-23 17:13:52 +05:30
3c978e8a46
removed some targets
2022-11-23 10:51:04 +01:00
632c68a996
added multiple targets on gh action
2022-11-23 10:37:30 +01:00
ef6b7d9dc9
added tags to race condition
2022-11-23 10:11:46 +01:00
f0cfcaed55
chore(deps): bump github.com/projectdiscovery/wappalyzergo in /v2 ( #2874 )
...
Bumps [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo ) from 0.0.67 to 0.0.70.
- [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases )
- [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.0.67...v0.0.70 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/wappalyzergo
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-23 02:05:10 +05:30
b9ce3c4393
chore(deps): bump github.com/go-rod/rod from 0.112.0 to 0.112.1 in /v2 ( #2873 )
...
Bumps [github.com/go-rod/rod](https://github.com/go-rod/rod ) from 0.112.0 to 0.112.1.
- [Release notes](https://github.com/go-rod/rod/releases )
- [Commits](https://github.com/go-rod/rod/compare/v0.112.0...v0.112.1 )
---
updated-dependencies:
- dependency-name: github.com/go-rod/rod
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-22 22:15:31 +05:30
2117fe2e1f
chore(deps): bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 ( #2844 )
...
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action ) from 3.3.0 to 3.3.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases )
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v3.3.0...v3.3.1 )
---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-22 22:14:57 +05:30
cce7b775ab
chore(deps): bump github.com/aws/aws-sdk-go in /v2 ( #2864 )
...
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go ) from 1.44.134 to 1.44.140.
- [Release notes](https://github.com/aws/aws-sdk-go/releases )
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.134...v1.44.140 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
2022-11-22 22:14:36 +05:30
6534deedc6
chore(deps): bump github.com/projectdiscovery/utils in /v2 ( #2846 )
...
Bumps [github.com/projectdiscovery/utils](https://github.com/projectdiscovery/utils ) from 0.0.2 to 0.0.3.
- [Release notes](https://github.com/projectdiscovery/utils/releases )
- [Commits](https://github.com/projectdiscovery/utils/compare/v0.0.2...v0.0.3 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/utils
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-22 22:14:03 +05:30
6dadb3a9fe
chore(deps): bump github.com/projectdiscovery/gologger in /v2 ( #2872 )
...
Bumps [github.com/projectdiscovery/gologger](https://github.com/projectdiscovery/gologger ) from 1.1.4 to 1.1.5.
- [Release notes](https://github.com/projectdiscovery/gologger/releases )
- [Commits](https://github.com/projectdiscovery/gologger/compare/v1.1.4...v1.1.5 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/gologger
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-22 22:13:45 +05:30
e17c491bb3
chore(deps): bump alpine from 3.16.2 to 3.16.3 ( #2843 )
...
Bumps alpine from 3.16.2 to 3.16.3.
---
updated-dependencies:
- dependency-name: alpine
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-22 22:13:28 +05:30
ca82a12c26
chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager in /v2 ( #2863 )
...
Bumps [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2 ) from 1.11.38 to 1.11.41.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/feature/s3/manager/v1.11.38...feature/s3/manager/v1.11.41 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-21 19:14:28 +05:30
16f6acb449
chore(deps): bump github.com/aws/aws-sdk-go-v2/config in /v2 ( #2865 )
...
Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2 ) from 1.17.11 to 1.18.2.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases )
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/config/v1.17.11...config/v1.18.2 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/config
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-21 19:14:15 +05:30
05d607642a
update chinese readme and typo fixes. ( #2862 )
2022-11-17 15:59:05 +05:30
e7fb40a413
Added sandboxing for payload files and requests
2022-11-16 13:49:24 +05:30
6b142d794a
Issue 2254 uncover integration ( #2786 )
...
* nuclei -uq 'vuln:CVE-2021-26855' -t cves/2021/
- `nuclei -uq 'vuln:CVE-2021-26855' -t cves/2021/`
* Add automatic template execution using metadata
- Query uncover after the template is loaded.
- Add the received hosts to the input provider from uncover
- Make NormalizeStoreInputValue() function public to add hosts from the
runner after uncover hosts received.
* run go mod tidy
* Remove unnecessary comments
* Resolve the requested changes
- move uncover code to protocols/common/uncover package
- Use uncover delay to create uncover rate limiter
- Use single ratelimiter object and remove not required ratelimiters
- Create Set() method for input provider interface
- Rename normalizeStoreInputValue to Set() method
* Solved the uncover running twice.
- flag StringSliceVarP adds the default value twice in the variable
- Check if provider keys exists or not
- Add uncover help block to english readme.md
* Add uncover field functionality
- ./nuclei -uq 'vuln:CVE-2021-26855' -t dns -duc -uf host
- ./nuclei -uq 'vuln:CVE-2021-26855' -t dns -duc -uf ip:port
* Update error messages and solve nuclei hang for wrong uncover engine
- Get uncover engine values from uncover package
* Resolve merge conflicts
* misc option update
* Update logging for templates
- remove duplicate env log printing
- Log message for template queries
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2022-11-16 11:12:39 +05:30
0c588cf9af
Fixed typo in the -stop-at-first-match instead of path ( #2850 )
2022-11-15 15:47:09 +05:30
eeefb4062e
IntelliJ Idea/Goland run configuration to start one integration test
...
(requires running parts from /integration_tests/run.sh first)
Related #2839
2022-11-14 19:14:49 +02:00
0295ca19bc
Add `split` DSL function ( #2838 )
...
* Add support for showing overloaded DSL method signatures
* Add `split` DSL function #2837
* fixing lint warnings
* replacing faulty regex with strings methods
Co-authored-by: Mzack9999 <mzack9999@protonmail.com>
Co-authored-by: mzack <marco.rivoli.nvh@gmail.com>
2022-11-14 06:08:12 +05:30
2403c50c36
Add targets number in output banner ( #2798 )
...
* Add targets number in output banner (#2797 )
* Add targets number in output banner (#2797 )
2022-11-12 18:05:49 +05:30
2066135f17
chore(deps): bump github.com/aws/aws-sdk-go in /v2 ( #2834 )
...
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go ) from 1.44.133 to 1.44.134.
- [Release notes](https://github.com/aws/aws-sdk-go/releases )
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.133...v1.44.134 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-10 19:18:45 +05:30
f6e1f8321b
Fix the example code showcasing how to use nuclei as a library ( #2804 )
2022-11-09 19:35:32 +05:30
9c88e42e25
chore(deps): bump github.com/aws/aws-sdk-go in /v2 ( #2830 )
...
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go ) from 1.44.132 to 1.44.133.
- [Release notes](https://github.com/aws/aws-sdk-go/releases )
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.132...v1.44.133 )
---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-09 19:33:46 +05:30
4e6b4888a2
chore(deps): bump golang.org/x/net from 0.1.0 to 0.2.0 in /v2 ( #2831 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.1.0 to 0.2.0.
- [Release notes](https://github.com/golang/net/releases )
- [Commits](https://github.com/golang/net/compare/v0.1.0...v0.2.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-09 19:33:32 +05:30
1fbbca66f9
Adding support to scan all v4/v6 IPs ( #2709 )
...
* Adding support to scan all v4/v6 IPs
* adding tests
* metainput prototype
* using new signature
* fixing nil pointer
* adding request context with metadata
* removing log instruction
* fixing merge conflicts
* adding clone helpers
* attempting to fix ipv6 square parenthesis wrap
* fixing dialed ip info
* fixing syntax
* fixing output ip selection
* adding integration tests
* disabling test due to gh ipv6 issue
* using ipv4 only due to GH limited networking
* extending metainput marshaling
* fixing hmap key
* adding test for httpx integration
* fixing lint error
* reworking marshaling/id-calculation
* adding ip version validation
* improving handling non url targets
* fixing condition check
2022-11-09 18:48:56 +05:30
dependabot[bot]
Sandeep Singh
Dwi Siswanto
Mzack9999
Shubham Rasal
Thibault Soubiran
Ice3man
xm1k3
Parth Malhotra
Xc1Ym
forgedhallpass
vrenzolaverace