Skip to content

Releases: google/tsunami-security-scanner

Tsunami 0.0.5

08 Oct 22:53
Compare
Choose a tag to compare

Very minor release in order to allow plugins to send HTTP content as is. OkHttp always canonicalize the request URLs so that verifications of path traversal vulns are not possible with OkHttp's HttpUrl library.

Tsunami 0.0.4

21 Apr 21:59
Compare
Choose a tag to compare

Minor release:

  1. Optimized Docker image.
  2. Several new config options:
    1. Option to ignore HTTPS certificate verification when querying web resources.
    2. Option to specify timeouts for OkHttp queries.
    3. Option to enforce scope/domain check during web crawling.

Tsunami 0.0.3

05 Feb 00:02
Compare
Choose a tag to compare
  • Minor updates to the data formats.
  • CI using Github Actions.
  • Binary exits with non-zero code when scan fails.

Tsunami 0.0.2

17 Nov 00:02
Compare
Choose a tag to compare
  • Full ReconnaissanceReport is now part of the final scan results.
  • A new annotation @ForWebService for matching all NetworkServices that exposes web endpoints.
  • Updated HttpClient:
    • Added support for HEAD and DELETE method.
    • Added options to disable certification verification on https traffic.
    • Added custom DNS resolution for hostname scanning.

Tsunami 0.0.1

08 Jun 23:41
Compare
Choose a tag to compare

Initial 'pre-alpha' release of Tsunami security scanner.