v1.2.0: release: prepare AynOps 1.2.0 for PyPI

[gaoharimran29-glitch]

AynOps v1.2.0

First release since v1.1.2. It includes all changes made since then and
a security fix, so upgrading is recommended.

Security

port_scan: fixed command-line argument injection (CWE-88) via the target
parameter. Targets are now validated and must be a single hostname, IP
address, or CIDR network. Inputs containing whitespace, a leading -, or
nmap target syntax (wildcards, octet ranges, -iL) are rejected.
Affects versions <= 1.1.2.

Thanks to @KulFilip for the report and the fix.

Upgrade

pip install --upgrade AynOps

What's Changed

• docs : fix typo wihtout -> without in contributing.md by @Jaya-Rajvanshi in docs : fix typo wihtout -> without in contributing.md #35
• Validate port scan type before scanning by @subhwastaken in Validate port scan type before scanning #36
• fix: support forked pull requests in GitHub Actions by @gaoharimran29-glitch in fix: support forked pull requests in GitHub Actions #37
• docs: add docstrings to helper functions by @kgcodex in docs: add docstrings to helper functions #38
• Bump pyjwt from 2.12.1 to 2.13.0 by @dependabot[bot] in Bump pyjwt from 2.12.1 to 2.13.0 #39
• Bump python-multipart from 0.0.29 to 0.0.31 by @dependabot[bot] in Bump python-multipart from 0.0.29 to 0.0.31 #40
• Bump cryptography from 48.0.0 to 48.0.1 by @dependabot[bot] in Bump cryptography from 48.0.0 to 48.0.1 #41
• Bump starlette from 1.0.1 to 1.3.1 by @dependabot[bot] in Bump starlette from 1.0.1 to 1.3.1 #42
• docs: add Python 3.12+ badge to README by @Jk2006k in docs: add Python 3.12+ badge to README #46
• docs: fix PyPI version badge URL by @SemTiOne in docs: fix PyPI version badge URL #47
• fix: rename tests/init_.py to init.py (three underscores → two) by @SemTiOne in fix: rename tests/__init___.py to __init__.py (three underscores → two) #48
• feat: add HTTP Security Headers Analyzer Tool by @mayank-dev-15 in feat: add HTTP Security Headers Analyzer Tool #23
• docs: add headers_analyzer to README tools table and usage examples by @SemTiOne in docs: add headers_analyzer to README tools table and usage examples #53
• test(asn): add asn_lookup coverage, fix IP_API_KEY error message, update CI workflow by @SemTiOne in test(asn): add asn_lookup coverage, fix IP_API_KEY error message, update CI workflow #54
• Update closing message in thanks-on-close workflow by @gaoharimran29-glitch in Update closing message in thanks-on-close workflow #55
• feat: add tests for headers_analyzer and integrate into full_recon (Enhancement: Add tests and integrate headers_analyzer into full_recon #50) by @TomGiar in feat: add tests for headers_analyzer and integrate into full_recon (#50) #52
• fix: handle None dates in whois_lookup gracefully by @SemTiOne in fix: handle None dates in whois_lookup gracefully #56
• fix: cert_transparency silently drops root-domain wildcards by @SemTiOne in fix: cert_transparency silently drops root-domain wildcards #57
• fix: sanitize dns records and use tcp resolver by @binggao1230 in fix: sanitize dns records and use tcp resolver #60
• build(deps): bump pydantic-settings from 2.14.1 to 2.14.2 by @dependabot[bot] in build(deps): bump pydantic-settings from 2.14.1 to 2.14.2 #63
• feat: add email_security_check tool (SPF/DKIM/DMARC) by @SemTiOne in feat: add email_security_check tool (SPF/DKIM/DMARC) #61
• Fixed the bug Bug: DMARC timeout silent fail + remove dead anti-100% normalization guard #64 by @gaoharimran29-glitch in Fixed the bug #64 #65
• Enhanced the full recon tool to get better analysis with claude by @gaoharimran29-glitch in Enhanced the full recon tool to get better analysis with claude #66
• build(deps): bump joserfc from 1.6.5 to 1.6.7 by @dependabot[bot] in build(deps): bump joserfc from 1.6.5 to 1.6.7 #67
• build(deps): bump joserfc from 1.6.7 to 1.6.8 by @dependabot[bot] in build(deps): bump joserfc from 1.6.7 to 1.6.8 #69
• fix: header analyzer results differing from browser DevTools (Bug: Header analysis results do not always match headers observed in browser DevTools #62) by @SemTiOne in fix: header analyzer results differing from browser DevTools (#62) #68
• Fix mcp.json key to match README (cybersecurity -> AynOps) by @urooj-vX in Fix mcp.json key to match README (cybersecurity -> AynOps) #78
• infra: remove unused EXPOSE 8000 from Dockerfile by @KshitijMittal in infra: remove unused EXPOSE 8000 from Dockerfile #79
• Add timeout handling to whois lookup by @AlbusGrindelwald in Add timeout handling to whois lookup #81
• refactor: splitted fullrecon tool in multiple modules for easier deve… by @gaoharimran29-glitch in refactor: splitted fullrecon tool in multiple modules for easier deve… #84
• Feat/cloud exposure check tool by @gaoharimran29-glitch in Feat/cloud exposure check tool #71
• Docs: Updating README to use uv by @AvgLucer in Docs: Updating README to use uv #89
• docs: split tools section by full recon coverage by @Semak12345 in docs: split tools section by full recon coverage #90
• Fixed: Add timeout handling to port scan tool by @TheAarvee in Fixed: Add timeout handling to port scan tool #86
• feat: add HTTP redirect chain tracer tool by @SemTiOne in feat: add HTTP redirect chain tracer tool #80
• fix: cloud exposure follow-ups (Azure sanitization, README name, tests) by @SemTiOne in fix: cloud exposure follow-ups (Azure sanitization, README name, tests) #91
• docs: add Full Recon tool integration guide to CONTRIBUTING.md by @SemTiOne in docs: add Full Recon tool integration guide to CONTRIBUTING.md #92
• feat: add official MCP threat analysis prompt for full_recon by @gaoharimran29-glitch in feat: add official MCP threat analysis prompt for full_recon #94
• Enhancement: Improve Domain Validation to Enforce RFC-Compliant Length Constraints by @Partharsid in Enhancement: Improve Domain Validation to Enforce RFC-Compliant Length Constraints #97
• build(deps): bump mcp from 1.27.1 to 1.28.1 by @dependabot[bot] in build(deps): bump mcp from 1.27.1 to 1.28.1 #99
• feat: add robots_txt_inspect tool for hidden path reconnaissance by @Partharsid in feat: add robots_txt_inspect tool for hidden path reconnaissance #98
• feat(asn): replace IPAPI with Team Cymru WHOIS (no API key required) by @01luyicheng in feat(asn): replace IPAPI with Team Cymru WHOIS (no API key required) #106
• fix(robots_txt): actually parse Crawl-delay and Host directives by @01luyicheng in fix(robots_txt): actually parse Crawl-delay and Host directives #108
• fix(signals): populate ip_abuse_score correctly and handle list whois dates by @01luyicheng in fix(signals): populate ip_abuse_score correctly and handle list whois dates #109
• feat: normalize domain inputs before validation by @Solaris-star in feat: normalize domain inputs before validation #111
• feat(signals): populate ASN metadata signals (Enhancement: Populate ASN-related signals in asn_extractor #117) by @Solaris-star in feat(signals): populate ASN metadata signals (#117) #119
• docs: add Docker setup instructions for Claude Desktop (Docs: Add Docker setup instructions for users in README.md #76) by @Solaris-star in docs: add Docker setup instructions for Claude Desktop (#76) #120
• feat(cve): multi-stage NVD search with version-based filtering by @01luyicheng in feat(cve): multi-stage NVD search with version-based filtering #107
• feat(dns): CAA records, TTL, resolver metadata, AAAA/CNAME subdomain detection (Enhancement: DNS Enumeration Tool with Additional Record Support and Metadata #103) by @Nitjsefnie in feat(dns): CAA records, TTL, resolver metadata, AAAA/CNAME subdomain detection (#103) #122
• build(deps): bump pillow from 12.2.0 to 12.3.0 by @dependabot[bot] in build(deps): bump pillow from 12.2.0 to 12.3.0 #124
• feat: add subdomain takeover checker tool (Feature: Add Subdomain Takeover Checker Tool #14) by @Nitjsefnie in feat: add subdomain takeover checker tool (#14) #121
• fix(subdomain_takeover): perform case-insensitive response matching by @gaoharimran29-glitch in fix(subdomain_takeover): perform case-insensitive response matching #127
• Potential fix for code scanning alert no. 22: Incomplete URL substring sanitization by @gaoharimran29-glitch in Potential fix for code scanning alert no. 22: Incomplete URL substring sanitization #128
• feat(ssl_inspect): certificate fingerprinting and TLS/cipher security analysis (Enhance: ssl_inspect with SSL/TLS Security Analysis and Certificate Fingerprinting #100) by @Nitjsefnie in feat(ssl_inspect): certificate fingerprinting and TLS/cipher security analysis (#100) #123
• ci: remove unused labeler.yml, expand issue label keyword matching by @SemTiOne in ci: remove unused labeler.yml, expand issue label keyword matching #126
• feat: add per-hop severity analysis to headers_analyzer (scope gap from fix: header analyzer results differing from browser DevTools (#62) #68) by @SemTiOne in feat: add per-hop severity analysis to headers_analyzer (scope gap from #68) #129
• feat: add Have I Been Pwned breach checker tool by @Solaris-star in feat: add Have I Been Pwned breach checker tool #115
• feat: detect Akamai block/challenge pages, not just Cloudflare's (scope gap from fix: header analyzer results differing from browser DevTools (#62) #68) by @SemTiOne in feat: detect Akamai block/challenge pages, not just Cloudflare's (scope gap from #68) #131
• feat(ip-reputation): add reputation classification and expose AbuseIP… by @gaoharimran29-glitch in feat(ip-reputation): add reputation classification and expose AbuseIP… #132
• feat: add Imperva/Incapsula body-signature detection + Cloudflare 403 edge-case test by @SemTiOne in feat: add Imperva/Incapsula body-signature detection + Cloudflare 403 edge-case test #133
• fix(crtsh): remove passive DNS fallback by @gaoharimran29-glitch in fix(crtsh): remove passive DNS fallback #134
• refactor(techstack): remove security-header analysis from tech_stack_detect (Refactor: tech_stack_detect into a Dedicated Technology Fingerprinting Engine #130 phase 1) by @Nitjsefnie in refactor(techstack): remove security-header analysis from tech_stack_detect (#130 phase 1) #141
• Improve Nmap scan reliability and result parsing by @SemTiOne in Improve Nmap scan reliability and result parsing #138
• feat: support grouped user-agents and per-rule crawl-delay by @gaoharimran29-glitch in feat: support grouped user-agents and per-rule crawl-delay #137
• fix(signals): flatten list-valued technologies so they stop reaching the prompt as Python reprs by @Nitjsefnie in fix(signals): flatten list-valued technologies so they stop reaching the prompt as Python reprs #142
• Partially fixes Enhancement: Improve DNS Enumeration Coverage, Performance, and Error Handling #144 by @Pengui0 in Partially fixes #144 #146
• build(deps): bump cryptography from 48.0.1 to 50.0.0 by @dependabot[bot] in build(deps): bump cryptography from 48.0.1 to 50.0.0 #147
• docs: expand MCP server capability tags by @Anirudh-097 in docs: expand MCP server capability tags #149
• Improved security.md by @gaoharimran29-glitch in Improved security.md #151
• Add a pull request template by @Nitjsefnie in Add a pull request template #156
• fix: standardize contributing guide filename by @gaoharimran29-glitch in fix: standardize contributing guide filename #157
• fix(dns): catch specific dnspython lookup errors in dns_enumeration (Enhancement: Improve DNS Enumeration Coverage, Performance, and Error Handling #144 item 1) by @Nitjsefnie in fix(dns): catch specific dnspython lookup errors in dns_enumeration (#144 item 1) #160
• fix(dns): cut expected-failure noise from the payload and contain remote decode errors by @Nitjsefnie in fix(dns): cut expected-failure noise from the payload and contain remote decode errors #162
• fix(subdomain-takeover): anchor the AWS S3 fingerprint on documented bucket endpoints by @Nitjsefnie in fix(subdomain-takeover): anchor the AWS S3 fingerprint on documented bucket endpoints #159
• feat(dns): enumerate SRV records for common services by @Nitjsefnie in feat(dns): enumerate SRV records for common services #163
• docs(dns): document CAA and SRV enumeration support by @gaoharimran29-glitch in docs(dns): document CAA and SRV enumeration support #165
• chore(subdomain-takeover): trim the S3 endpoint comments to strategy and rationale by @Nitjsefnie in chore(subdomain-takeover): trim the S3 endpoint comments to strategy and rationale #164
• fix(signals): register headers_analyzer so full_recon can report missing security headers by @Nitjsefnie in fix(signals): register headers_analyzer so full_recon can report missing security headers #158
• fix(dns): resolve over UDP first and let TCP be the fallback (Enhancement: Improve DNS Enumeration Coverage, Performance, and Error Handling #144 item 3) by @Nitjsefnie in fix(dns): resolve over UDP first and let TCP be the fallback (#144 item 3) #172
• feat(deps): align pyproject.toml with runtime dependencies by @mercael91 in feat(deps): align pyproject.toml with runtime dependencies #168
• refactor(techstack): extract the technology fingerprinting engine by @Nitjsefnie in refactor(techstack): extract the technology fingerprinting engine #171
• test(techstack): clarify fingerprint characterizations by @Nitjsefnie in test(techstack): clarify fingerprint characterizations #174
• fix(subdomain-takeover): report an incomplete probe as unknown, not safe (Enhancement: Improve Subdomain Takeover Detection Accuracy & Reliability #154 item 10) by @Nitjsefnie in fix(subdomain-takeover): report an incomplete probe as unknown, not safe (#154 item 10) #173
• docs(whois): add WHOIS tool documentation by @Nitjsefnie in docs(whois): add WHOIS tool documentation #175
• docs: list subdomain takeover tool by @adity982 in docs: list subdomain takeover tool #180
• feat(dns): run independent lookups concurrently by @Nitjsefnie in feat(dns): run independent lookups concurrently #176
• docs(dns): add dns_enumeration reference by @Nitjsefnie in docs(dns): add dns_enumeration reference #179
• fix(subdomain-takeover): classify uncertain CNAME outcomes as unknown by @Nitjsefnie in fix(subdomain-takeover): classify uncertain CNAME outcomes as unknown #178
• refactor(deps): remove legacy requirements.txt by @Nitjsefnie in refactor(deps): remove legacy requirements.txt #181
• docs(port-scan): add port_scan reference by @Nitjsefnie in docs(port-scan): add port_scan reference #182
• fix(headers): standardize header analysis result keys to hyphenated format by @HeaTTap in fix(headers): standardize header analysis result keys to hyphenated format #190
• Fix CSP wildcard token matching by @AnandkumarMall in Fix CSP wildcard token matching #191
• fix: respect fallback list ordering in Referrer-Policy header check by @HeaTTap in fix: respect fallback list ordering in Referrer-Policy header check #193
• refresh README and update branding logo by @gaoharimran29-glitch in refresh README and update branding logo #184
• fix(headers): require Akamai body fingerprint, not just edge Server header by @v01dst in fix(headers): require Akamai body fingerprint, not just edge Server header #196
• refactor(tech-stack): full schema redesign with confidence/evidence (fixes Refactor: tech_stack_detect into a Dedicated Technology Fingerprinting Engine #130) by @AnandkumarMall in refactor(tech-stack): full schema redesign with confidence/evidence (fixes #130) #195
• feat: add google web server in web server signature by @gaoharimran29-glitch in feat: add google web server in web server signature #197
• docs(contributing): expand contributor development guide by @gaoharimran29-glitch in docs(contributing): expand contributor development guide #185
• fix(subdomain-takeover): follow CNAME chains by @be-student in fix(subdomain-takeover): follow CNAME chains #198
• docs(ssl_inspect): add ssl_inspect reference by @DNA-RNA in docs(ssl_inspect): add ssl_inspect reference #200
• docs(contributing): document Node.js/npm prerequisites for MCP Inspector by @LouisDeconinck in docs(contributing): document Node.js/npm prerequisites for MCP Inspector #203
• fix(helpers): try remaining candidates in list-typed date fields in safe_parse_datetime by @AnandkumarMall in fix(helpers): try remaining candidates in list-typed date fields in safe_parse_datetime #207
• docs: document email_security_check by @JavierQuinan in docs: document email_security_check #211
• Docs: add aynops code of conduct by @gaoharimran29-glitch in Docs: add aynops code of conduct #199
• fix(email-security): improve SPF, DKIM, and DMARC record validation (fixes Improvement :- SPF/DKIM/DMARC record validation + minor cleanup in email_security_check #152) by @AnandkumarMall in fix(email-security): improve SPF, DKIM, and DMARC record validation (fixes #152) #205
• Revert "fix(email-security): improve SPF, DKIM, and DMARC record validation (fixes Improvement :- SPF/DKIM/DMARC record validation + minor cleanup in email_security_check #152)" by @gaoharimran29-glitch in Revert "fix(email-security): improve SPF, DKIM, and DMARC record validation (fixes #152)" #215
• feat(email-security): harden SPF/DKIM/DMARC record validation by @LouisDeconinck in feat(email-security): harden SPF/DKIM/DMARC record validation #213
• feat(takeover): improve takeover accuracy, SSRF guard, redirects, and UDP-first DNS by @AnandkumarMall in feat(takeover): improve takeover accuracy, SSRF guard, redirects, and UDP-first DNS #208
• feat(takeover): return structured probe evidence and confidence for findings by @LouisDeconinck in feat(takeover): return structured probe evidence and confidence for findings #214
• chore(style): fix Ruff lint and formatting violations repository-wide by @LouisDeconinck in chore(style): fix Ruff lint and formatting violations repository-wide #212
• build(deps): bump anyio from 4.13.0 to 4.14.2 by @dependabot[bot] in build(deps): bump anyio from 4.13.0 to 4.14.2 #216
• feat(dns): add DNSSEC records, reverse PTR lookups, and CNAME chain tracing by @AnandkumarMall in feat(dns): add DNSSEC records, reverse PTR lookups, and CNAME chain tracing #206
• refactor(packages): centralize package exports in init.py and standardize imports (fixes Refactor: centralize package exports and imports in __init__.py #217) by @jaideepkrishna2008-ui in refactor(packages): centralize package exports in __init__.py and standardize imports (fixes #217) #218
• fix(email): reject leading whitespace before SPF version tag by @suscripty in fix(email): reject leading whitespace before SPF version tag #222
• build(deps): bump urllib3 from 2.7.0 to 2.8.0 by @dependabot[bot] in build(deps): bump urllib3 from 2.7.0 to 2.8.0 #221
• build(deps): bump pyjwt from 2.13.0 to 2.15.0 by @dependabot[bot] in build(deps): bump pyjwt from 2.13.0 to 2.15.0 #220
• build(deps): bump mcp from 1.28.1 to 1.30.0 by @dependabot[bot] in build(deps): bump mcp from 1.28.1 to 1.30.0 #228
• docs: document tech_stack_detect by @JavierQuinan in docs: document tech_stack_detect #225
• ci: added ruff linting and formmating check and documented it by @gaoharimran29-glitch in ci: added ruff linting and formmating check and documented it #223
• fix(email-security): harden DKIM FWS handling per RFC 6376 §3.6.1 (Bug: RFC compliance audit: SPF/DKIM/DMARC record validation in email_security_tool.py #219) by @Enard52 in fix(email-security): harden DKIM FWS handling per RFC 6376 §3.6.1 (#219) #224
• style: format email security tests by @gaoharimran29-glitch in style: format email security tests #240

New Contributors

• @Jaya-Rajvanshi made their first contribution in docs : fix typo wihtout -> without in contributing.md #35
• @subhwastaken made their first contribution in Validate port scan type before scanning #36
• @kgcodex made their first contribution in docs: add docstrings to helper functions #38
• @Jk2006k made their first contribution in docs: add Python 3.12+ badge to README #46
• @SemTiOne made their first contribution in docs: fix PyPI version badge URL #47
• @mayank-dev-15 made their first contribution in feat: add HTTP Security Headers Analyzer Tool #23
• @TomGiar made their first contribution in feat: add tests for headers_analyzer and integrate into full_recon (#50) #52
• @binggao1230 made their first contribution in fix: sanitize dns records and use tcp resolver #60
• @urooj-vX made their first contribution in Fix mcp.json key to match README (cybersecurity -> AynOps) #78
• @KshitijMittal made their first contribution in infra: remove unused EXPOSE 8000 from Dockerfile #79
• @AlbusGrindelwald made their first contribution in Add timeout handling to whois lookup #81
• @AvgLucer made their first contribution in Docs: Updating README to use uv #89
• @Semak12345 made their first contribution in docs: split tools section by full recon coverage #90
• @TheAarvee made their first contribution in Fixed: Add timeout handling to port scan tool #86
• @Partharsid made their first contribution in Enhancement: Improve Domain Validation to Enforce RFC-Compliant Length Constraints #97
• @01luyicheng made their first contribution in feat(asn): replace IPAPI with Team Cymru WHOIS (no API key required) #106
• @Solaris-star made their first contribution in feat: normalize domain inputs before validation #111
• @Nitjsefnie made their first contribution in feat(dns): CAA records, TTL, resolver metadata, AAAA/CNAME subdomain detection (#103) #122
• @Pengui0 made their first contribution in Partially fixes #144 #146
• @Anirudh-097 made their first contribution in docs: expand MCP server capability tags #149
• @mercael91 made their first contribution in feat(deps): align pyproject.toml with runtime dependencies #168
• @adity982 made their first contribution in docs: list subdomain takeover tool #180
• @HeaTTap made their first contribution in fix(headers): standardize header analysis result keys to hyphenated format #190
• @AnandkumarMall made their first contribution in Fix CSP wildcard token matching #191
• @v01dst made their first contribution in fix(headers): require Akamai body fingerprint, not just edge Server header #196
• @be-student made their first contribution in fix(subdomain-takeover): follow CNAME chains #198
• @DNA-RNA made their first contribution in docs(ssl_inspect): add ssl_inspect reference #200
• @LouisDeconinck made their first contribution in docs(contributing): document Node.js/npm prerequisites for MCP Inspector #203
• @JavierQuinan made their first contribution in docs: document email_security_check #211
• @jaideepkrishna2008-ui made their first contribution in refactor(packages): centralize package exports in __init__.py and standardize imports (fixes #217) #218
• @suscripty made their first contribution in fix(email): reject leading whitespace before SPF version tag #222
• @Enard52 made their first contribution in fix(email-security): harden DKIM FWS handling per RFC 6376 §3.6.1 (#219) #224

Full Changelog: v1.1.2...v1.2.0

---

This discussion was created from the release v1.2.0: release: prepare AynOps 1.2.0 for PyPI.