Skip to content

Scout v0.3.1

Choose a tag to compare

@github-actions github-actions released this 23 Oct 04:05
· 35 commits to main since this release

Changelog

  • 64a8876: feat(authz): detect IDOR via test identities; add identity config surface (@MUKE-coder)
  • 96ce4d6: feat(cli): live scan progress, dashboard link, techy report, real version, releases (@MUKE-coder)
  • 81b4c54: feat(clientside): detect missing SRI and mixed content in page HTML (@MUKE-coder)
  • b2494a2: feat(collectors): activate DAST and auth/access-control checks (@MUKE-coder)
  • f0a185c: feat(collectors): improper asset management, host-header injection, unpinned deps (@MUKE-coder)
  • d2e5ea6: feat(collectors): skeletons for DAST and auth/access-control checks (@MUKE-coder)
  • 03ac25a: feat(collectors): static code audit and info-disclosure checks (@MUKE-coder)
  • 4c93cf2: feat(dast): scaffold active probes for SSTI, XXE, file upload, business logic (@MUKE-coder)
  • ffb83a9: feat(fingerprint): detect version/banner disclosure and directory listings (@MUKE-coder)
  • 96f1d5b: feat(lab): add an intentionally vulnerable Next.js app for learning and Scout testing (@MUKE-coder)
  • 807450f: feat(lab): more vulnerabilities (weak crypto, info disclosure, GraphQL, injection targets) (@MUKE-coder)
  • e5c7283: feat(lab): versioned API and host-header reset endpoints (@MUKE-coder)
  • 3bb2d69: feat(vulncheck): detect reachable CVEs in Go dependencies via govulncheck (@MUKE-coder)
  • 2ded288: fix(codeaudit): scan source files only, not docs/data (@MUKE-coder)
  • 87405d2: fix(mount): populate Target.Routes so route-table checks run (#1) (@MUKE-coder)