v0.14.0
What's Changed
Tagger
Automatically tags identified information during source code analysis to provide valuable insights for security engineers and Dynamic Application Security Testing (DAST) tools.
- Add new flags
-T (--use-all-taggers)
--use-taggers
--list-taggers
- Available taggers:
hunt
oauth
Tags can be applied either to an Endpoint or to a Parameter within an Endpoint, and each tag includes both the name and description of the information.
Support HAR
We now support the HAR format. The HAR format works closely with the -u
argument, identifying and processing as an Endpoint any URLs provided by the user that exist within the HAR data.
This integration with the
-u
argument is essential, as the HAR file may contain numerous addresses beyond the domain of interest to the analyst.
ETC
- Update project description in snapcraft.yaml by @hahwul in #255
- Update SECURITY.md with improved vulnerability reporting instructions by @hahwul in #259
- Add public dir process in crystal-kemal by @hahwul in #258
- Update Crystal versions in CI workflow and shard.yml by @hahwul in #254
Full Changelog: v0.13.0...v0.14.0