Release of December 2024
December 31st, 2024
New business logic test
- Broken Access Control (BAC). This test checks for improper access controls measures allowing users to perform actions beyond their permissions.
Read additional details in here.
Enhancements
Bright-CLI:
- v13.0.1: Fixed the MSI installer.
- v13.0.0: New major release:
- Breaking change - Warning logs are now written to
stderr
instead ofstdout
. - Scans: Added a
concurrency
flag to control the maximum concurrent requests allowed to be sent to the target (Running a Scan). - Discoveries:
- Added a
discovery:run
command to run a discovery from the CLI (Running a Discovery). - Added a
discovery:stop
command to stop a discovery from the CLI (Stopping a Discovery). - Added a
discovery:rerun
command to re-run a discovery from the CLI (Rerunning a Discovery).
- Added a
- Proxy:
- Added a new
proxy-domains-bypass
optional flag - can be used with eitherproxy
orproxy-target
. Accepts a space-separated list of domains. Domains in the list will not be proxied.
It cannot be used together withproxy-domains
(Command Language Syntax). - Added support for reading the
PROXY
andNO_PROXY
environment variables. If those are set, their values will be used as input for theproxy
andproxy-domains-bypass
flags (Command Language Syntax).
- Added a new
- Added log-level 5 - trace (Command Language Syntax).
- Breaking change - Warning logs are now written to