Release of December 2024

New business logic test

  • Broken Access Control (BAC). This test checks for improper access controls measures allowing users to perform actions beyond their permissions.
    Read additional details in here.

Enhancements

Bright-CLI:

  1. v13.0.1: Fixed the MSI installer.
  2. v13.0.0: New major release:
    1. Breaking change - Warning logs are now written to stderr instead of stdout.
    2. Scans: Added a concurrency flag to control the maximum concurrent requests allowed to be sent to the target (Running a Scan).
    3. Discoveries:
      1. Added a discovery:run command to run a discovery from the CLI (Running a Discovery).
      2. Added a discovery:stop command to stop a discovery from the CLI (Stopping a Discovery).
      3. Added a discovery:rerun command to re-run a discovery from the CLI (Rerunning a Discovery).
    4. Proxy:
      1. Added a new proxy-domains-bypass optional flag - can be used with either proxy or proxy-target. Accepts a space-separated list of domains. Domains in the list will not be proxied.
        It cannot be used together with proxy-domains (Command Language Syntax).
      2. Added support for reading the PROXY and NO_PROXY environment variables. If those are set, their values will be used as input for the proxy and proxy-domains-bypass flags (Command Language Syntax).
    5. Added log-level 5 - trace (Command Language Syntax).