Skip to content

v0.1.0 - Initial Release

Choose a tag to compare

View all tags
@rodhnin rodhnin released this 22 Nov 16:53
· 6 commits to main since this release
v0.1.0
cf3bd27

What's New

✨ Features

Server Security Auditing

  • Server information detection (Apache/Nginx/IIS version disclosure)
  • Sensitive file discovery (.env, .git, phpinfo.php, server-status, backups)
  • HTTP methods testing (PUT, DELETE, TRACE, OPTIONS unsafe methods)
  • Security headers analysis (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy)
  • TLS/SSL configuration analysis (protocol versions, cipher suites, certificate validity)
  • Directory listing detection (Apache/Nginx autoindex)

AI-Powered Analysis

  • GPT-4 integration for intelligent hardening guides
  • Claude integration support
  • Ollama (local) support for complete privacy
  • Two analysis modes: Technical (sysadmins) + Executive (management)

Professional Reporting

  • Beautiful, customizable HTML reports (Forge theme with orange/red gradients)
  • Machine-readable JSON output
  • Evidence preservation with HTTP responses
  • Color-coded severity badges (Critical, High, Medium, Low, Info)
  • AI-generated hardening guides (Apache/Nginx config snippets, CLI commands)

Ethical Framework

  • Consent token system for authorized scanning
  • Security compliance documentation
  • Responsible disclosure guidelines
  • Ethical security practices

Docker Support

  • Easy Docker deployment
  • Docker Compose setup
  • Vulnerable test labs (Apache & Nginx)
  • Concurrent scanning with intelligent rate limiting
  • SQLite database shared with Argos suite

🔧 Technical Details

  • Python 3.11+
  • Comprehensive error handling
  • Professional logging
  • 55/55 tests passing
  • Production-ready validation

Getting Started

See README.md#-quick-start for detailed usage instructions.

Documentation

License

MIT License - See LICENSE file

Contributors: @rodhnin
Website: www.rodhnin.com

Assets 2
Loading