Skip to content

0.15.0

Latest

Choose a tag to compare

@veikokaap veikokaap released this 30 Jul 18:26

Release Notes - Tuoni v0.15.0

✨ Highlights

  • πŸ”’ macOS support - Added x86_64 and arm64 agents with payload, command, and listener support for macOS.
  • Scalable agent topology - Rebuilt the topology view with richer grouping and filtering and better performance.
  • Universal side panel - Added a pinned, resizable side panel that can open every page without leaving the current workflow.
  • Script Engine - Expanded Python automation with a dedicated Scripts page and published type stubs for editor support.
  • Faster, leaner server - Reduced startup time through parallel initialization and on-demand loading while cutting the server image size by approximately 500 MB.

Server

⭐ New Features & Improvements

  • Script Engine - Added the tuoni_script_engine Python module for automating Tuoni through scripts running on the server.
  • Tuoni Script Engine stubs - Published tuoni-script-engine-stubs on PyPI for API documentation, type checking, and editor autocomplete.
  • Paginated agent queries - Added a v2 agent endpoint with pagination, filtering, and sorting for large deployments.
  • Bulk agent status updates - Added a bulk endpoint for deactivating, blocking, or restoring many agents at once.
  • Command-send visibility - REST responses now expose more information about Command send events.
  • OpenAPI improvements - Updated the OpenAPI specification with more accurate server endpoint definitions.

🐞 Bug Fixes, Reliability & Performance

  • Startup performance - Parallelized plugin and script initialization, moved payload files to on-demand caching.
  • Smaller server image - Removed unused Java and Python libraries, reducing the image by approximately 500 MB.
  • HTTPS certificate generation - Automatically generated HTTPS certificates now use the P-256 curve, reducing generation time.

Client

⭐ New Features & Improvements

  • πŸ”’ macOS payload workflow - Added macOS platform detection and support for both x86_64 and arm64 throughout payload generation.
  • Universal side panel - Added a pinnable, resizable panel for opening any page alongside the current workspace.
  • Script page - Added a read-only of script execution history, source code, and logs.
  • Agent topology workspace - Rebuilt the topology graph with deterministic layouts, grouping, and filtering.
  • Terminal continuity - Per-agent terminal state now persists across navigation, including client-side messages, command tracking, and history.
  • Bulk agent actions - Multi-agent block and remove operations now use the bulk endpoint.

🐞 Bug Fixes, Reliability & Performance

  • High-load topology stability - Improved rendering for dense listener groups and sudden agent bursts.
  • Command copy and paste - Pasted commands now parse quoted values, lists, numbers, booleans, and empty arguments consistently.
  • Bulk action feedback - Bulk actions now report partial failures and unmatched kill requests instead of appearing successful.
  • Payload type handling - Normalized inconsistent or missing payload types across the payload workflow, terminal views, and launcher matching.

Agents

⭐ New Features & Improvements

  • πŸ”’ macOS agents - Added commercial x86_64 and arm64 agents with native Mach-O dynamic library loading and macOS payload templates.

🐞 Bug Fixes, Reliability & Performance

  • πŸ”’ Commercial agent stability - Fixed intermittent crashes during execution-unit pipe communication.
  • BOF compatibility - Added support for both common BeaconIsAdmin import spellings.

Commands

⭐ New Features & Improvements

  • πŸ”’ macOS command coverage - Added 16 command families for macOS, including filesystem operations, port scanning, reverse forwarding, SOCKS5, SSH operations, process information, and screenshots.
  • πŸ”’ Linux and FreeBSD command parity - Added copy, move, timestomp, Jump-SSH, process information, SSH execution, and SCP upload support, plus broader commercial command coverage.
  • Windows native execution units - Added native library variants for port scanning, reverse port forwarding, SOCKS5, and SSH-based operations.

🐞 Bug Fixes, Reliability & Performance

  • Execution-unit output stability - Prevented command result frames from interleaving when execution units produce output concurrently.

Listeners

⭐ New Features & Improvements

  • πŸ”’ macOS listener coverage - Added x86_64 and arm64 macOS support for HTTP, TCP, DNS, relay bind, and relay reverse listeners, including relay commands.
  • πŸ”’ Linux and FreeBSD listener parity - Expanded native listener support to HTTP, TCP, DNS, relay bind, and relay reverse transports.