Skip to content

PenX v0.4.10

Choose a tag to compare

@github-actions github-actions released this 21 Oct 15:11
· 31 commits to main since this release
28227b4

Availability: Download the current Windows installer or portable ZIP from the latest official PenX release, together with its SHA-256 checksums. GitHub-generated source archives are not ready-to-run Windows applications.

Which Windows download should I choose?

✅ Recommended: Windows Installer

PenX-Setup-x64.exe — best for most Windows 10/11 (64-bit) users.

  • Installs PenX with a Start menu entry and an uninstall option.
  • Saves your configuration, scan history and reports separately in %LOCALAPPDATA%\PenX so app updates do not overwrite them.
  • Supports Check for Updates inside PenX. Installing an update always requires your confirmation.

📦 Alternative: Portable (no installation)

PenX-Windows-x64.zip — for users who prefer a portable folder.

  • Download and extract the entire ZIP, then run PenX\PenX.exe.
  • Keep the _internal folder and other extracted files with the executable.
  • No Windows installer needed; you update manually by downloading a newer ZIP.
  • Existing portable configuration and reports remain in your portable directory.

Not sure? Choose PenX-Setup-x64.exe. Both downloads contain the same PenX app version.

Important: Do not choose GitHub's automatically generated Source code (zip) if you want a ready-to-run Windows app. Neither download bundles third-party scanners (such as Nmap/Npcap) or a local AI model; PenX can guide scanner setup with your consent.

You can verify either download using SHA256SUMS.txt from the same release. See the Windows installation and migration guide before switching from the portable version to the installer.


What's Changed

  • docs(packaging): publish v0.4.9 download references and pinned Scoop/WinGet drafts by @spk-c in #85
  • feat(web): scoped Katana→ffuf mapping and persistent endpoint inventory by @spk-c in #86
  • feat: Extend Katana/ffuf endpoint mapping with targeted safe GET probes by @spk-c in #87
  • test: make Windows field acceptance for #81/#82 auditable by @spk-c in #88
  • fix: harden scanner evidence, endpoint mapping and terminal output by @spk-c in #89
  • fix: preserve passive evidence integrity and redact HTTP/report secrets by @spk-c in #90
  • fix: redact native scanner JSONL URLs and error payloads by @spk-c in #91
  • docs: improve PenX README layout, downloads and discoverability by @spk-c in #92
  • feat: universal local LLM backend discovery and compatibility negotiation by @spk-c in #93
  • Make scan comparisons coverage-aware and expose per-finding evidence by @spk-c in #94
  • docs: remove outdated internal documents and refresh public guides by @spk-c in #95
  • Fix broken CI after docs cleanup and retire obsolete release automation by @spk-c in #96
  • docs: Phase 0 — repository audit, roadmap, and architecture plan by @spk-c in #98
  • chore: remove obsolete public automation and historical manifests by @spk-c in #97
  • ci: reduce GitHub Actions usage while preserving required checks by @spk-c in #99
  • Phase 1: scan orchestration — plans, profiles, parallel executor, preflight, metadata v3 by @spk-c in #100
  • Add offline PHP2Shell CVE-2026-109618/109619 release-posture advisory by @spk-c in #101
  • Fix v0.4.10 release bootstrap and source/manifest version contract by @spk-c in #102

Full Changelog: v0.4.9...v0.4.10