Skip to content

Vulnerator 2.0 (v7.4.0-beta.1)

Pre-release
Pre-release

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Nov 14:38
v7.4.0-beta.1
063c8b4

Vulnerator 2.0 — 7.4.0 beta 1

Add-on support. Vulnerator can now load optional add-ons, such as dashboards or integrations. No add-ons are
included; this release adds the mechanism only, and nothing changes if you don't use any.

How it works

  • Add-ons go in the new Add-ons folder next to Vulnerator.exe. The main file ends in .AddOn.dll; an add-on with
    several files can have its own folder there. Restart Vulnerator after adding one.
  • An add-on can add pages to the menu (before News) and options under Settings > Integrations. That section also
    lists every add-on found and whether it loaded.
  • Add-ons read findings and hardware through a read-only database connection. They cannot change the database.
  • A broken, damaged or incompatible add-on is skipped and the reason goes in the log. Vulnerator still starts.
  • Each add-on gets its own data folder next to the database, so a portable copy keeps it.
  • Files that Windows marks as downloaded from the internet can't be loaded. Unblock them (right-click, Properties,
    Unblock) and restart. Settings > Integrations says so when this happens.
  • Works with strong-name bypass turned off, without admin rights, and with no native DLLs.

For add-on developers

  • Vulnerator.AddOns.dll (MIT, with XML documentation) ships in the program folder and is the only file an add-on
    compiles against. It is versioned separately (interface version 1).

Tests

  • The build compiles throw-away test add-ons (none ship) and checks the following: a working add-on, one in its own
    folder with a dependency, and add-ons that must be skipped (fails while starting, needs a newer version, not an
    add-on, wrong entry type, damaged file, duplicate ID). It also checks the read-only data, the menu pages and the
    Settings section.

Verifying the download

Compare the SHA-256 below (also in the .sha256 file) with Get-FileHash .\Vulnerator-v7.4.0-beta.1.zip.

SHA-256 Vulnerator-v7.4.0-beta.1.zip: f7181a1813ed4b4473d96acba5f5a7f18cf78adafff369e51f8a000c6bec4de1

For application control (allow by hash): Vulnerator.exe d9a294a91a84780288484ca2fa32dd2831b1cde81751b5c4111aee1cd89ccf3a. Vulnerator ships no native DLLs (SQLite comes from Windows); every file's hash is in Vulnerator-v7.4.0-beta.1-file-hashes.txt.

Assets 5
Loading