Skip to content

Releases: owasp-noir/noir

v0.3.0

13 Aug 11:00
Compare
Choose a tag to compare

Summary

  • Add --exclude-techs flag
  • A module for handling similar word processing for tech and managing techs has been added.
  • Changed --techs-list to --list-techs for consistency with other flags.

Exclude techs

You can now force the technology to be ignored.

And, Similar languages are also handled.

--exclude-techs Rails
--exclude-techs ruby-rails
--exclude-techs rails

# All of the above flags disable ruby_rails.

Techs

Now, the technology list is managed with additional metadata information included.
So the --list-techs flag has also been modified accordingly.

v0.2.4

12 Aug 16:54
Compare
Choose a tag to compare

v0.2.3

10 Aug 16:49
Compare
Choose a tag to compare
  • Improve spring analyzer #14
  • Improve go-echo analyzer 394e1ab

P.S.
In addition to the endpoints defined by the programming language, we intend to trace endpoints by scanning files generated within the source code directory. For instance, utilizing OpenAPI files :D

v0.2.2

09 Aug 23:26
Compare
Choose a tag to compare

Improve django analyzer

v0.2.1

06 Aug 14:44
Compare
Choose a tag to compare
  • Improve code structure
  • Support param in crystal-kemal, ruby-sinatra
  • Add Endpoint Reference Type for Code Analysis

v0.2.0

05 Aug 10:01
Compare
Choose a tag to compare
  • Add new endpoint type: ws websocket
  • Add new detector and analyzer: crystal-kemal
  • Improve analyzers: rails, spring

ws endpoint type

crystal kemal


tested it with xssmaze.

v0.1.0

02 Aug 14:57
Compare
Choose a tag to compare

First release 😎
and I extend my gratitude to the first contributor, nil (@ksg97031)! Thank you for your valuable contribution!