Skip to content

Vulnerator 2.0 (v7.3.0)

Latest

Choose a tag to compare

@github-actions github-actions released this 04 Nov 22:11

Vulnerator 2.0 — 7.3.0

Every button on the Configuration Management Hardware and Software tabs works. Tested on a real system as 7.3.0 beta 1. These tabs come from the unfinished
upstream 7.0 alpha; several buttons were not connected or did the wrong thing.

Hardware tab

  • Clear Selected Hardware works (it did nothing).
  • Add/Update Hardware: adding a host checks for an empty or duplicate name and files the new host in the "All"
    group (so reports include it) with its IP address. Updating no longer overwrites the discovered host name with the
    preferred name - that broke matching on the next scan import (the host would come back as a duplicate).
  • Lifecycle Status now saves (the list was bound to a name the screen does not have).
  • Delete Selected Hardware asks first, and also removes the host's findings, POA&M and mitigation links and port
    evidence.
  • Remove buttons: the MAC address trash button did nothing and the group trash button removed a MAC address
    instead; both now remove what their row shows.
  • Add port / protocol / service failed silently; it now links the selected port to the host.
  • After every change all tabs reload and the host stays selected; a failure shows a message instead of only a log line.

Software tab

  • Clear Selected Software, Delete Selected Software (asks first) and Add/Update Software work (none did).
  • Associate Hardware (+) adds the selected host; the trash button removes it. The host list now fills in.
  • Adding software checks for an empty or duplicate name; updating keeps the discovered name used by imports.
  • The unfinished "Associate Hardware/PPS" section (no way to save it) was removed.

Version, README and project page

  • About and Help show the release version (for example 7.3.0; pre-releases show the beta number), stamped by the
    build from the release tag.
  • New README and a project page (docs/index.html, for GitHub Pages) for Vulnerator 2.0.

Tests

  • The build exercises every edit (add / update / delete hardware and software; add / remove IP, MAC, group, software and
    port links) against a test database, and opens both tabs' data the way the screens do.

Verifying the download

Compare the SHA-256 below (also in the .sha256 file) with Get-FileHash .\Vulnerator-v7.3.0.zip.

SHA-256 Vulnerator-v7.3.0.zip: d2d882caaeb1bf1bc8cc1617c226bcde3dda4b71b06eb974481fcb03661cc34e

For application control (allow by hash): Vulnerator.exe 386ebb41ebacaba2e4d6581dc60e4001b9ee0d54e06247a4315cf8d028268f4f. Vulnerator ships no native DLLs (SQLite comes from Windows); every file's hash is in Vulnerator-v7.3.0-file-hashes.txt.