Skip to content

v2.3.0 - Codebase Audit Fixes

Choose a tag to compare

View all tags
@projectmerai projectmerai released this 26 Mar 07:25
· 41 commits to main since this release
v2.3.0
54bbbb8

What's Changed

Logic Fixes

  • Fix duplicate UseCases accumulation in reports
  • Cache AllImportedDlls to avoid repeated allocations
  • Warn on unknown profile names (catches typos like --profile aggresive)
  • Guard WindowsIdentity.GetCurrent() in AttackChainCorrelator
  • Validate --min-confidence range (0-100)

New Functionality

  • ScanLogger wired into pipeline — --log-file and --verbose now produce meaningful diagnostic output
  • Attack chains in JSON/HTML — no longer console-only
  • FORCE_INTEGRITY filter — binaries with this DllCharacteristic are now correctly penalized
  • uac-bypass profile added to --help text

Code Quality

  • PE analysis cache in WinSxSManifestFilter (avoids re-parsing same binary)
  • MSVC artifact cleanup (.obj/.lib/.exp/.pdb) in CanaryDllBuilder
  • Deduplicated KnownDlls registry loading
  • Fixed env-var expansion order in ServiceEnumerator
  • COMEnumerator now scans both InprocServer32 and LocalServer32

Full Changelog: v2.2.0...v2.3.0

Assets 3
Loading