Repository navigation
PenX v0.4.10
Availability: Download the current Windows installer or portable ZIP from the latest official PenX release, together with its SHA-256 checksums. GitHub-generated source archives are not ready-to-run Windows applications.
Which Windows download should I choose?
✅ Recommended: Windows Installer
PenX-Setup-x64.exe — best for most Windows 10/11 (64-bit) users.
- Installs PenX with a Start menu entry and an uninstall option.
- Saves your configuration, scan history and reports separately in
%LOCALAPPDATA%\PenXso app updates do not overwrite them. - Supports Check for Updates inside PenX. Installing an update always requires your confirmation.
📦 Alternative: Portable (no installation)
PenX-Windows-x64.zip — for users who prefer a portable folder.
- Download and extract the entire ZIP, then run
PenX\PenX.exe. - Keep the
_internalfolder and other extracted files with the executable. - No Windows installer needed; you update manually by downloading a newer ZIP.
- Existing portable configuration and reports remain in your portable directory.
Not sure? Choose PenX-Setup-x64.exe. Both downloads contain the same PenX app version.
Important: Do not choose GitHub's automatically generated Source code (zip) if you want a ready-to-run Windows app. Neither download bundles third-party scanners (such as Nmap/Npcap) or a local AI model; PenX can guide scanner setup with your consent.
You can verify either download using SHA256SUMS.txt from the same release. See the Windows installation and migration guide before switching from the portable version to the installer.
What's Changed
- docs(packaging): publish v0.4.9 download references and pinned Scoop/WinGet drafts by @spk-c in #85
- feat(web): scoped Katana→ffuf mapping and persistent endpoint inventory by @spk-c in #86
- feat: Extend Katana/ffuf endpoint mapping with targeted safe GET probes by @spk-c in #87
- test: make Windows field acceptance for #81/#82 auditable by @spk-c in #88
- fix: harden scanner evidence, endpoint mapping and terminal output by @spk-c in #89
- fix: preserve passive evidence integrity and redact HTTP/report secrets by @spk-c in #90
- fix: redact native scanner JSONL URLs and error payloads by @spk-c in #91
- docs: improve PenX README layout, downloads and discoverability by @spk-c in #92
- feat: universal local LLM backend discovery and compatibility negotiation by @spk-c in #93
- Make scan comparisons coverage-aware and expose per-finding evidence by @spk-c in #94
- docs: remove outdated internal documents and refresh public guides by @spk-c in #95
- Fix broken CI after docs cleanup and retire obsolete release automation by @spk-c in #96
- docs: Phase 0 — repository audit, roadmap, and architecture plan by @spk-c in #98
- chore: remove obsolete public automation and historical manifests by @spk-c in #97
- ci: reduce GitHub Actions usage while preserving required checks by @spk-c in #99
- Phase 1: scan orchestration — plans, profiles, parallel executor, preflight, metadata v3 by @spk-c in #100
- Add offline PHP2Shell CVE-2026-109618/109619 release-posture advisory by @spk-c in #101
- Fix v0.4.10 release bootstrap and source/manifest version contract by @spk-c in #102
Full Changelog: v0.4.9...v0.4.10