Skip to content

v1.0.0 | First Official Release

Choose a tag to compare

@kents00 kents00 released this 05 Jun 08:02
· 13 commits to main since this release
73dbdd2

Core Security Analysis

  • Comprehensive Script Detection
    • Multi-source scanning: Analyzes scripts from:
      • Text blocks
      • Node groups
      • Event handlers
      • Custom properties
    • Embedded script detection:
      • Identifies obfuscated scripts in base64, hexadecimal, and other encodings
    • Real-time monitoring:
      • Background scanning for new or modified scripts

Advanced Threat Detection

  • Security Rules Covering Critical Vulnerabilities:
    • System command execution
    • Network communication attempts
    • File system manipulation
    • Dynamic code execution (eval, exec)
    • Base64/hex obfuscation patterns
    • Credential harvesting attempts
    • Blender-specific threats:
      • Driver expression injection
      • Handler manipulation
      • Addon abuse

Active Protection Systems

  • Auto-Protection on Startup

    • Disables "Auto Run Python Scripts" for instant security
    • File load/save hooks trigger immediate security analysis
    • Critical threat countdown: 10-second warning before Blender auto-closes
  • Secure Script Execution

    • Ctrl+P override: Pre-check before execution
    • Three execution modes:
      1. Secure Execution (Recommended) – Full analysis
      2. Bypass Mode (Advanced Users) – With risk acknowledgment
      3. Standard Execution (Unsecured) – Original Blender behavior

Risk Assessment & Reporting

  • Multi-level Risk Classification:

    • CRITICAL: Immediate system threat (Blender closes)
    • HIGH: Significant risk (execution blocked)
    • MEDIUM: Potential threat (warned, but allowed)
    • LOW: Minor concerns (logged only)
  • Detailed Analysis Reports:

    • AST-based deep code inspection
    • Obfuscation detection scoring
    • Suspicious import tracking
    • Network activity flagging
    • Console logging with threat breakdowns

User Interface & Controls

  • BlendScan Panel (Text Editor Sidebar)

    • Auto-run status display & toggle
    • One-click current script analysis
    • Global security controls
    • Real-time threat indicators
  • Security Warning Dialogs

    • Countdown warning with automatic Blender shutdown
    • Threat detail display & risk indicators
    • Security recommendations & emergency shutdown

Monitoring & Detection

  • Continuous Background Monitoring

    • Scans every 2 seconds for threats
    • Hash-based change detection
    • Real-time response to modified scripts
    • Persistent tracking of:
      • Event handlers
      • Drivers
      • Custom properties
  • Driver & Property Analysis

    • Driver expression injection detection
    • Hidden script checks in custom properties
    • Animation data & material property analysis

Advanced Features

  • Anti-Evasion Techniques

    • Multiple encoding detection:
      • Base64, hex, Unicode
    • Obfuscation pattern recognition
    • Time-based evasion detection
    • VM/debugger awareness
  • Blender Integration

    • Handler registration monitoring
    • Addon legitimacy verification
    • Node script scanning (Geometry/Shader nodes)
    • Scene-wide script surveillance

Developer & Power User Tools

  • Manual Analysis Tools

    • Analyze individual scripts with full reports
    • Batch script scanning
    • Optional security bypass
    • Detailed console logs
  • Extensible Security Rules

    • Pattern-based system for easy rule updates
    • Organized by:
      • Category: System, Network, Obfuscation, etc.
      • Severity level
      • Blender-specific tags