Skip to content

Reconix v1.5 — engine 3.21

Choose a tag to compare

View all tags
@DEVIL1433 DEVIL1433 released this 26 Oct 11:53
· 7 commits to main since this release
v1.5
5d3a254

The full Reconix scanner (engine 3.21) as a standalone Android app.

Highlights:

  • Loopback API authentication (security fix): the app's local API used to accept requests from any local process because no token ever existed. Now a per-install random token is minted on first run, injected into the app's own pages only (no endpoint serves it), and required on every state-changing request.
  • Two new check classes: JavaScript prototype pollution (proven two ways: server JSON-merge and real browser DOM check) and insecure deserialization probes (benign payloads only, with a control-response guard).
  • Payload refresh fixed: the update marker now forces a fresh copy of the engine on update.

Verify your download: 30,300,194 bytes, SHA-256 9a256b9505755592768ec8a5467ce36e2f2c1140fa83bb66c0a2efe2bcd8b158. Full notes in RELEASE_NOTES_v1.5.md on the main branch.

Assets 3
Loading