Skip to content

WebScan v2.4.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 20 Jun 02:33
v2.4.0
41052c1

WebScan v2.4.0 — 38 plugins, WebSocket security audit

🆕 New Plugin (37 → 38)

websocket_security (passive)

Scans HTML and same-origin JavaScript for ws:// and wss:// WebSocket URLs.

  • HIGH (FIRM): ws:// endpoint found — unencrypted traffic, sniffable
  • MEDIUM (TENTATIVE): wss:// with sensitive context (token/auth/session nearby)
  • LOW (INFO): wss:// endpoint discovered, manual review recommended

17 new unit tests. Closes #37.

📊 Numbers

  • 38 plugins (was 37)
  • 688 tests (was 671)
  • 95% coverage
  • 59 source files
  • ruff clean, mypy --strict clean
Assets 2
Loading