Skip to content

Releases: AliMousaviSoft/sondra

v1.8.0

Choose a tag to compare

@github-actions github-actions released this 07 Jul 12:34

Changelog

  • a71d738 feat(modules): retry crt.sh (5xx + ctx-aware) and assetfinder exec
  • f4189ae feat(modules): retry the gau exec on transient failures
  • 7663826 feat(modules): retry transient network errors when fetching JS
  • c767e8d feat(modules): shared ctx-aware retry with exponential backoff
  • 892d50f feat(report): JS Analysis section + js-secrets stat
  • dd529d5 feat(report): collect JS endpoints + secrets into ReportData
  • b93c16d test(modules): retry success/exhaustion/cancellation
  • dde76fe test(report): JS findings collection and rendering

v1.7.5

Choose a tag to compare

@github-actions github-actions released this 07 Jul 07:41

Changelog

  • ec74716 feat(cli): sondra doctor command, richer root -h, version build-info fallback
  • cb6fa2c feat(doctor): preflight checks for tools, presets, templates, and config
  • 93d2501 fix(tui): mark httpx/naabu as external binaries so the picker warns if missing
  • 1d9110a test(doctor): tool registry and preset-binary mapping

v1.7.0

Choose a tag to compare

@github-actions github-actions released this 06 Jul 11:50

Changelog

  • 8aa1c40 feat(config): jsanalysis module, wayback_rate knob, and --resume support
  • 4655f1c feat(modules): jsanalysis — extract endpoints and secrets from JS
  • 7b0f0a6 feat(notify): list gowayback + js-analysis in the module breakdown
  • ea75325 feat(runner): js analysis step; skip resolve without an enum source
  • c018ab3 feat(scan): --resume flag to reuse the latest run dir
  • 4aa7a4b feat(tui): jsanalysis in the interactive module picker
  • 8691467 fix(url): run gau/gowayback without live hosts; rate-limit gowaybackgo
  • d9f6b16 refactor(bot): pass resume=false through config.Load
  • 07a555f test(config): --resume reuses the latest run dir
  • dc27f94 test(config): cover the jsanalysis module alias
  • 9f929ca test(modules): endpoint and secret extraction
  • c084f7a test(runner): resolve gating on enum presence

v1.6.0

Choose a tag to compare

@github-actions github-actions released this 06 Jul 11:44

Changelog

  • f7e4ff0 chore(deps): add modernc.org/sqlite (pure-Go) for job persistence
  • 26ee300 chore(deps): record sqlite module checksums
  • d7a4179 chore: ignore the bot state db (sondra-bot.db)
  • c3efbad feat(bot): Discord file upload + detached responder for resumed monitors
  • 9b71c1b feat(bot): SQLite store for persisting monitor jobs
  • 8e6df67 feat(bot): addWithID resumes a job under its original id
  • 208dcf3 feat(bot): bot.state_db config for monitor persistence
  • 2e76c3f feat(bot): open state db and resume monitors on startup
  • 4661de5 feat(bot): responder sendFile + transport/dest for persistence and uploads
  • 1c4852c feat(bot): resume monitors, upload /report, default bare /report and /diff
  • 9d5c909 feat(bot): sendDocument to upload files to Telegram
  • a390fe0 feat(report): LatestDomain + LatestReport (skip in-progress runs)
  • 5aae8b2 test(bot): /report upload, default domain, in-progress-run skip
  • dd3bb19 test(bot): store roundtrip and addWithID id preservation

v1.5.0

Choose a tag to compare

@github-actions github-actions released this 05 Jul 07:44

Changelog

  • 66c8760 chore(deps): add bwmarrin/discordgo for the control bot
  • 185b1b5 chore(deps): record discordgo module checksums
  • 94bd39e feat(bot): Bot core and Telegram dispatch loop
  • 1c3c797 feat(bot): BotConfig with Telegram/Discord tokens and allow-lists
  • 0be79fe feat(bot): Discord slash commands with deferred-ack interactions
  • 5f25e1a feat(bot): Telegram client (long-poll, HTML replies)
  • f1b25dc feat(bot): command model and text parser
  • 729679b feat(bot): in-memory job registry with per-job cancel
  • 16c71d8 feat(bot): shared command handlers (scan/monitor/diff/status/stop/report)
  • f4b5cbb feat(bot): strict domain validation as an exec-injection gate
  • 0a85eba feat(bot): transport-agnostic responder and formatter
  • 5be8968 feat(bot): wire the 'sondra bot' command
  • b1b3052 feat(report): Delta.Notable and LatestRunDir helpers for the bot
  • 7b1480b feat(runner): reusable Run executor for bot-driven scans
  • bda4db9 test(bot): Discord option mapping and slash-command schema
  • 5a88438 test(bot): command parsing coverage
  • 820ce35 test(bot): domain validation and injection cases

v1.4.0

Choose a tag to compare

@github-actions github-actions released this 05 Jul 07:44

Changelog

  • d3d53d6 feat(gowayback): add Gowayback module flag, parser alias, full preset
  • bab964a feat(gowayback): add gowaybackgo to the interactive module selector
  • 976e11a feat(gowayback): runGoWayback URL collection via gowaybackgo
  • e45086e fix(notify): async dispatch with retry so per-finding alerts survive link saturation
  • 16d9e2e fix(notify): raise HTTP timeout to 30s for sends during nuclei
  • 180802b fix(runner): wait for in-flight notifications before RunSync returns
  • f318ed3 test(config): cover gowayback module parsing

v1.3.0

Choose a tag to compare

@github-actions github-actions released this 04 Jul 07:21

Changelog

  • a0fe057 chore: ignore .claude, graphify-out, CLAUDE.md
  • 5842cb7 feat(cli): headless mode, monitor command, --modules, notifications wiring
  • db6d71d feat(config): add NotifyConfig and ParseModules for --modules
  • 90a90c8 feat(notify): Discord webhook embed driver
  • 168422b feat(notify): Telegram Bot API driver
  • 9601d6f feat(notify): generic JSON webhook driver with structured result payload
  • 7ac6fc8 feat(notify): provider-agnostic Notifier, Multi fan-out, structured ResultPayload
  • 9673fb5 feat(nuclei): live file-tail findings, per-finding callback, cancellable exec
  • 8b5c3d2 feat(report): DiffRunsDetailed Delta for continuous monitoring
  • b585d90 feat(report): export Collect; parse nested nuclei severity with larger buffer
  • c510134 feat(runner): scan notifications (finish/recon/finding/delta) with rich embed
  • 04f8e9b feat(runner): two-phase recon/vuln pipeline with cancellable context
  • cdbcee7 feat(tui): LogLevel.String and shared RenderLogLine for headless output
  • a0c4ead feat(tui): shared results-box renderer for headless and TUI
  • d739ec9 feat(tui): thread ctx into RunSync; render shared results summary on done
  • db66118 style: gofmt (add trailing newline)
  • 2f3b894 style: gofmt (add trailing newline)
  • 0713e88 style: gofmt (add trailing newline)
  • 5286a89 style: gofmt (add trailing newline)
  • 5d6b841 style: gofmt (alignment and tab-indent fix)
  • 3760ccb style: gofmt (struct field alignment)
  • 0687786 style: gofmt (whitespace and import grouping)
  • db5d8e8 test(config): cover ParseModules aliases and unknown rejection
  • c73b8ed test(modules): nuclei JSONL line parsing (nested/flat)
  • 228fc1b test(notify): drivers, Multi best-effort, structured payload, FromConfig
  • cef56bf test(report): DiffRunsDetailed delta and baseline
  • 0f21e07 test(report): nested and flat nuclei JSONL parsing
  • 009ceb1 test(runner): severity counts, summary text, DeltaMessage, status breakdown
  • 141c6f9 test(runner): two-phase notification sequence

v1.2.0

Choose a tag to compare

@github-actions github-actions released this 27 May 11:07

Changelog

  • 245bd7b chore: remove debug log line
  • 24a032d fix: massdns output format flag -o S with -w for output file
  • f6f1727 fix: massdns output format flag -o S with -w for output file

v1.1.0

Choose a tag to compare

@github-actions github-actions released this 27 May 10:18

Changelog

  • ea8a02a fix: strip status codes from live.txt, fix gowitness flags, fix gau binary path
  • b91e512 fix: viper config loading, massdns resolvers, viewport panic, katana scope, gowitness flags

v1.0.0

Choose a tag to compare

@github-actions github-actions released this 25 May 09:03

Changelog

  • db0527b Initial commit
  • 998b5ff chore: remove compiled binary from repo
  • 3b952b7 feat: banner, version check, update command
  • 80f1117 feat: initial release — sondra v1.0.0
  • df21c07 fix: README correct module path + accurate deps + clean up
  • c40cec5 fix: README — correct module path, accurate deps, full docs
  • 5dd44dd fix: goreleaser config remove version field