Repository navigation
Releases: jojin1709/agentburp
Releases · jojin1709/agentburp
Release list
agentburp v0.1.4
agentburp v0.1.4 — Major Feature Release
Highlights:
- Embedded Real-Time Web Dashboard: Launch a zero-dependency local dark-mode UI with �gentburp ui [--addr 127.0.0.1:8889] or run alongside the proxy with �gentburp proxy start --ui.
- Out-of-Band (OAST) Collaborator: Integrated receiver and correlation engine (�gentburp oast start|token|poll|list) for verifying blind SSRF, blind XSS, and blind RCE.
- WebSocket Interception & History: Real-time RFC 6455 WebSocket handshakes and bidirectional frame logging into SQLite (�gentburp ws list|show).
- Raw HTTP Socket Replayer: Send raw byte-level requests directly over TCP/TLS sockets (�gentburp raw <request_file> [--ssl] [--target host:port]).
- Nuclei YAML Scanner Exporter: Generate ready-to-run Nuclei vulnerability scanner templates with �gentburp report <entry_id> --format nuclei.
- Match & Replace Engine: Dynamic regex (
e:...) and substring rewriting rules for request/response headers and bodies configured in scope.yml. - Expanded Security Scanner: Passively flags GraphQL introspection schemas, decodes JWT claims (checks for alg=none bypasses and token expiration), missing CSP/XCTO headers, and sensitive exposures (.env, .git, actuator, swagger).
- Expanded Model Context Protocol (MCP): Added sitemap, �xport.curl, �xport.har, scope.test,
eport, oast.token, oast.poll, and ws.list tools over JSON-RPC stdio.
Binaries:
Pre-built cross-compiled binaries for Windows, Linux, and macOS (Intel & Apple Silicon) are attached below.
Full Changelog: v0.1.3...v0.1.4
agentburp v0.1.3
Full Changelog: v0.1.2...v0.1.3
agentburp v0.1.2
Full Changelog: v0.1.1...v0.1.2
agentburp v0.1.1
Full Changelog: v0.1.0...v0.1.1
agentburp v0.1.0
Full Changelog: https://github.com/jojin1709/agentburp/commits/v0.1.0