Skip to content

VulnerableApp-2.1.0

Latest
Latest

Choose a tag to compare

View all tags
@preetkaran20 preetkaran20 released this 03 Jul 01:20
2.1.0
668ab14
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🎉 VulnerableApp 2.1.0

A major release packed with new vulnerability modules, infrastructure hardening, and strong community growth — 18 new contributors joined this cycle!

🛡️ New Vulnerability Modules

  1. Authentication Vulnerability Module — full implementation, including a new "Low Iteration Password Hashing" challenge level (@ayash911, @aryankshl)
  2. Cache Poisoning — brand new vulnerability class added (@luks-santos)
  3. IDOR Module — enhanced with secure token handling (@Etoile-Bleu)
  4. Cryptographic Failures — module enhancements (@aashpis)
  5. Open Redirect — phishing-aware levels added (Levels 9, 10, 11) (@StevenTaing2, @Jhalak19-Sethi, @polcm005), plus payload/message-key improvements (@An16og)
  6. Clickjacking — Challenge mode support added (@Clark1945)
  7. Authentication — Challenge mode added (@luks-santos)

🧩 New Framework: Challenge Cards

A new @ChallengeCard annotation system was introduced for structured, gamified vulnerability challenges (@aryankshl) — now rolled out across multiple modules.

🏗️ Infrastructure & Tooling

  1. Docker-based dashboard added (@harveenkaur2912)
  2. Scanner benchmark framework for DAST/SAST coverage (@MukulGhare)
  3. llmforge build migrated to a Docker Hub image for easier setup (@aruzaphoenix)
  4. @Profile("public"/"unsafe") safeguards added across vulnerability controllers to separate safe/unsafe deployment modes (@prajp98)
  5. Extra scanner path configuration support (@nguyenvulong)
  6. @antriksh-9 — Enhanced the first-time contributor workflow
  7. @MixhizoR — Added secure variants to Http3xxStatusCodeBasedInjection annotations

📚 Documentation & Community

  1. New organizational usage documentation added (@CharanTeja-6825)
  2. University of Adelaide added to the usage showcase (@aruzaphoenix)
  3. Design documentation grammar and formatting cleanup (@muhammadrehanazam)
  4. Facade schema population work (@saurabhkushwaha438)

📊 By the Numbers

~66 merged PRs
21 contributors
Continued momentum on infra hardening, new challenge types, and onboarding polish

Full changelog: 2.0.1...2.1.0

Contributors

nguyenvulong, Profile, and 19 other contributors
Assets 3
Loading