Repository navigation
·
36 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
- Adds
track()so Playbooks can act on custom events like failed logins - Adds support for apps running under uWSGI
- Adds support for XML parsing when the XML is passed as bytes instead of a string
- Zen now also inspects headers and query strings in ASGI apps that use a charset other than UTF-8
- Improves detection of attacks in very deeply nested request data
- Improves NoSQL injection detection in very deeply nested request data
- Improves attack wave detection by recognizing requests for
.php,.jsp, and other extensions that a Python app wouldn't serve - Fixes attack waves missing from the statistics reported to Aikido
- Fixes
set_rate_limit_group()ignoring the group ID0 - Fixes deeply nested arrays in request bodies causing missing stats and API discovery data
- Fixes inaccurate timestamps for attacks, attack waves, and custom events
- Fixes Zen startup errors on Python 3.13 and earlier when using
forkserver - Fixes delayed memory cleanup after blocking attacks
- Fixes requests being slower right after startup while Zen is still loading its first config
- Frees memory sooner after building an attack's stack trace
- Speeds up building stack traces for attacks
- Speeds up SQL injection checks
- Reduces the data exchanged between app workers and Zen's background process
- Sends the first heartbeats earlier after startup, at 30 seconds and 2 minutes