Releases: google/tsunami-security-scanner
Releases · google/tsunami-security-scanner
Tsunami 0.0.5
Very minor release in order to allow plugins to send HTTP content as is. OkHttp always canonicalize the request URLs so that verifications of path traversal vulns are not possible with OkHttp's HttpUrl
library.
Tsunami 0.0.4
Minor release:
- Optimized Docker image.
- Several new config options:
- Option to ignore HTTPS certificate verification when querying web resources.
- Option to specify timeouts for OkHttp queries.
- Option to enforce scope/domain check during web crawling.
Tsunami 0.0.3
- Minor updates to the data formats.
- CI using Github Actions.
- Binary exits with non-zero code when scan fails.
Tsunami 0.0.2
- Full ReconnaissanceReport is now part of the final scan results.
- A new annotation
@ForWebService
for matching allNetworkService
s that exposes web endpoints. - Updated
HttpClient
:- Added support for
HEAD
andDELETE
method. - Added options to disable certification verification on https traffic.
- Added custom DNS resolution for hostname scanning.
- Added support for
Tsunami 0.0.1
Initial 'pre-alpha' release of Tsunami security scanner.