Files
websec-audit/docs/changelog.md
T
2026-03-23 13:27:21 +01:00

70 lines
2.7 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
---
title: Changelog
description: Version history for websec-audit.
---
# Changelog
All notable changes are documented here.
Format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
Versioning follows [Semantic Versioning](https://semver.org/).
---
## [1.0.1] — 2026-03-23
### Added
- **Module 15 — Nuclei** template scan integration
- **Module 14 — Subdomain Takeover**: subjack + Nuclei + CNAME analysis for 20+ services
- **Module 13 — SSRF**: cloud IMDS probing (AWS/GCP/Azure), decimal/hex IP encoding
- **Module 12 — Open Redirect**: 20 params × 10 payloads
- **Module 11 — CORS**: null origin, credentialed, wildcard detection
- **Module 10 — CMS**: WordPress REST API user enumeration, debug.log, xmlrpc.php
- **Module 09 — XSS**: dalfox integration + 8 reflected payloads × 15 parameters
- **Module 08 — SQLi**: sqlmap with forms crawl and tamper scripts in aggressive mode
- **Module 07 — Nikto**: severity-based finding classification
- **Module 06 — Dir Enum**: 40 sensitive path probes (`.git`, `.env`, AWS credentials, Dockerfiles)
- **Module 05 — HTTP Headers**: CSP deep audit, SameSite=None, Cache-Control
- **Module 04 — SSL/TLS**: HSTS preload, cert expiry thresholds (14/30/90 days)
- **Module 03 — Fingerprint**: WAF detection, version-leaking header enumeration
- **Module 02 — Port Scan**: risk analysis for 20+ dangerous ports
- **Module 01 — Recon**: SPF `+all` detection, DMARC `p=none`, 700+ Google Dorks
- Interactive HTML report with severity filter, live search and risk bar
- JSON report with full metadata envelope
- `--format json|html|txt|all` flag
- `--no-banner` and `--version` flags
- Graceful interrupt — partial reports generated on SIGINT/SIGTERM
- `findings.jsonl` written as-discovered for resilient partial runs
- Aggressive mode: nmap `-A -O --script=vuln,auth`, sqlmap level 5 + tamper, deep DOM XSS
- Stealth mode: nmap `-sS -T2 -f`, sqlmap delay, safe-freq
### Changed
- Fully rewritten in English
- Modular `module_*()` function architecture
- `add_finding()` emits structured JSONL with id, severity, module, title, description, evidence, recommendation, timestamp
- Output directory reorganised into 9 subdirectories
### Fixed
- SPF detection now handles multi-TXT records
- HSTS check handles missing header without error
- JSON report correctly escapes multi-line evidence strings
---
## [1.0.0] — 2026-01-13
### Added
- Initial release
- Core modules: recon, port scan, SSL, headers, dir brute-force, nikto, sqlmap
- Basic HTML report
- Spanish-language interface
---
[1.0.1]: https://github.com/davidalvarezp/websec-audit/releases/tag/v1.0.1
[1.0.0]: https://github.com/davidalvarezp/websec-audit/releases/tag/v1.0.0