Skip to content

PenX v0.4.11

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 22 Oct 17:01
· 2 commits to main since this release
v0.4.11
e39a899
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Availability: Download the current Windows installer or portable ZIP from the latest official PenX release, together with its SHA-256 checksums. GitHub-generated source archives are not ready-to-run Windows applications.

Which Windows download should I choose?

✅ Recommended: Windows Installer

PenX-Setup-x64.exe — best for most Windows 10/11 (64-bit) users.

  • Installs PenX with a Start menu entry and an uninstall option.
  • Saves your configuration, scan history and reports separately in %LOCALAPPDATA%\PenX so app updates do not overwrite them.
  • Supports Check for Updates inside PenX. Installing an update always requires your confirmation.

📦 Alternative: Portable (no installation)

PenX-Windows-x64.zip — for users who prefer a portable folder.

  • Download and extract the entire ZIP, then run PenX\PenX.exe.
  • Keep the _internal folder and other extracted files with the executable.
  • No Windows installer needed; you update manually by downloading a newer ZIP.
  • Existing portable configuration and reports remain in your portable directory.

Not sure? Choose PenX-Setup-x64.exe. Both downloads contain the same PenX app version.

Important: Do not choose GitHub's automatically generated Source code (zip) if you want a ready-to-run Windows app. Neither download bundles third-party scanners (such as Nmap/Npcap) or a local AI model; PenX can guide scanner setup with your consent.

You can verify either download using SHA256SUMS.txt from the same release. See the Windows installation and migration guide before switching from the portable version to the installer.

Independent field acceptance: NOT SIGNED OFF. Green CI checks validate automated contracts and packaged application smoke tests; they do not establish real Windows/Npcap behavior for all 12 scanners, installer upgrade/rollback, restored SQLite/MariaDB backups, or visual report quality. These checks remain tracked by #81 and #82. PHP2Shell version/header findings are not proof of RCE exploitation.

PenX v0.4.11 — release highlights

This release packages changes merged after the v0.4.10 Windows build.

Highlights

  • Scan evidence and comparisons: Improved traceability from scanner observations to findings, more careful treatment of incomplete coverage and stronger endpoint-scoped finding identity.
  • Headless scanning and CI: Non-interactive authorized collection with bounded execution, structured JSON/SARIF output and explicit exit codes for partial results, scanner errors and finding thresholds.
  • Flexible scanner configuration: Typed profiles, independent scan preflight, bounded scheduling and configuration validation. Existing scanner consent requirements remain in place.
  • Guided beginner scanning: A simpler flow for choosing explicitly authorized scopes and suitable scan profiles.
  • Local AI review: Optional bounded local-model review of previously collected evidence with stronger input validation; review suggestions are not vulnerability confirmations.
  • PHP2Shell checks: Offline review of configuration and log indicators plus a non-exploiting live HTTP header/version assessment. The live check does not execute an exploit and cannot confirm remote code execution or patch state by itself.
  • Stability and repository security: Additional safeguards for metadata parsing, scan result integrity, artifact recovery, reporting, database edge cases and CI checks on main. Stale topic branches were cleaned up and main protection enabled.

Packaging and limitations

Windows downloads are published only after the immutable v0.4.11 tag triggers a successful Windows Release workflow, including the packaged EXE/installer smoke tests and SHA-256 generation. Do not treat a version bump or draft manifest as a published binary.

Independent field acceptance remains NOT SIGNED OFF. The Windows/Npcap/12-scanner matrix (#81), database restore / Windows upgrade / report recovery scenarios (#82) and some manual hardware/visual scenarios remain outstanding. The installer is not Authenticode-signed. External scanners and local AI models are not bundled.

Use PenX only with explicit target authorization; scanner output and model suggestions require independent validation.

Automatically generated change list

What's Changed

  • Align v0.4.10 README, package drafts, and release status with published assets by @spk-c in #103
  • Add non-exploiting PHP2Shell local log and php.ini triage by @spk-c in #104
  • Add non-exploiting PHP2Shell check to standard live scans by @spk-c in #105
  • fix: verify main pushes, repair ruleset checks and safely prune old branches by @spk-c in #106
  • fix: correct ancestor comparison direction in merged branch pruner by @spk-c in #107
  • release: prepare PenX v0.4.11 Windows build and notes by @spk-c in #108
  • fix(release): make v0.4.11 publishing preflight reliable by @spk-c in #109
  • fix(release): permit missing path-filtered package check, preserve full Windows gates by @spk-c in #111

Full Changelog: v0.4.10...v0.4.11

Contributors

spk-c
Assets 6
Loading