Skip to content

Releases: owasp-noir/noir

v0.7.3

21 Sep 14:37
6276ecc
Compare
Choose a tag to compare

What's Changed

  • Add ZAP Deliver Model
  • Fixed #102 bug in OAS2 Analyzer

Full Changelog: v0.7.2...v0.7.3

v0.7.2

14 Sep 15:49
cede708
Compare
Choose a tag to compare

What's Changed

  • Fixed #95 (Add exception of Dir.glob)

Thank you for @fanzige

v0.7.1

13 Sep 23:12
6a7c293
Compare
Choose a tag to compare

What's Changed

v0.7.0

13 Sep 14:43
d8a390c
Compare
Choose a tag to compare
  • Support to Kotlin Spring
  • Support to Java Armeria
  • Support to C# ASP.NET MVC (First step, Only URL Endpoints)
  • Improve Analyzers
    • Java Spring
    • Python Django (Add Method / Param / Header)
  • Improve code quality and functional/unit test codes
  • Fixed bugs

I extend my infinite gratitude to the brilliant developer @ksg97031 . And I am truly thankful to @infosec-au for the great ideas provided!

v0.6.0

05 Sep 15:51
af80b07
Compare
Choose a tag to compare

Summary

  • Support to Go Gin
    • Detector
    • Analyzer(Endpoint, Method, Param, Header)
  • Support to RAML
    • Detector
    • Analyzer(Endpoint, Method, Param, Header)
  • Improve Analyzers
    • Add JSP Analyzer (+With param)
    • Improve Go Echo Analyzer (+Support header param)

Screenshots


Go Gin


RAML

v0.5.4

30 Aug 16:45
4d9d5e2
Compare
Choose a tag to compare
  • 🪄 Improve PHP Analyzer
    • Modify to identify POST parameters (bug fix). v0.5.3 / v0.5.4
    • Add identification of Header parameters. v0.5.3
    • Improve code analysis. v0.5.4
  • 🪲 Fixed bugs
    • param-type bug v0.5.3

PHP Analyzer

Test fixture

Example App

v0.5.3

30 Aug 16:17
d742f01
Compare
Choose a tag to compare
  • 🪄 Improve PHP Analyzers
    • Modify to identify POST parameters (bug fix).
    • Add identification of Header parameters.
    • 5cb8863 / #58
  • 🪲 Fixed param-type bug

v0.5.2

27 Aug 15:15
2411d71
Compare
Choose a tag to compare
  • 🪄 Improve Analyzers
    • Django (Improve REGEX_URL_MAPPING)
    • Spring (Add RouterFunction analyze)
    • Go Echo (Add param analyze)
    • Rails (Add header analyze)
  • 🦺 Testing structure refactoring
  • 🪲 And fixed bugs :D

I would like to express my infinite gratitude to @ksg97031 once again.

v0.5.1

22 Aug 15:41
9e3997c
Compare
Choose a tag to compare
  • Fixed #31 (Add exception handling for file access errors in spawn)

v0.5.0

21 Aug 16:02
8c2ac9e
Compare
Choose a tag to compare

Seems like I've almost reached the initially set modest feature scope. I'll be focusing on enhancing detection rates and coverage of techs for the foreseeable future. Nevertheless, turning great ideas into features is always a blast. If you have any cool improvements or ideas, feel free to drop them anytime through issues or discussions!

Release Note

  • OAS 3 Support
  • Swagger to OAS 2 Name Transition
    • Improve detection
  • Header Identification Now Supported in Crystal-Kemal and Ruby-Sinatra
  • Elevating Code Quality

OAS3

Swagger to OAS2

I've aligned the naming similarly to OAS2 with the introduction of OAS3 support.

  oas2
    format: ["JSON", "YAML"]
    similar: ["oas 2.0", "oas_2_0", "swagger 2.0", "swagger_2_0", "swagger"]
  oas3
    format: ["JSON", "YAML"]
    similar: ["oas 3.0", "oas_3_0"]

Header Identifications


Example for Kemal Analyzer / In the default format, headers are displayed in green.


And..

I'd like to extend my heartfelt thanks to all the contributors and everyone who provided feedback :D