Release of December 2024
December 31st, 2024
New business logic test
- Broken Access Control (BAC). This test checks for improper access controls measures allowing users to perform actions beyond their permissions.
Read additional details in here.
Enhancements
Bright-CLI:
- v13.0.1: Fixed the MSI installer.
- v13.0.0: New major release:
- Breaking change - Warning logs are now written to
stderrinstead ofstdout. - Scans: Added a
concurrencyflag to control the maximum concurrent requests allowed to be sent to the target (Running a Scan). - Discoveries:
- Added a
discovery:runcommand to run a discovery from the CLI (Running a Discovery). - Added a
discovery:stopcommand to stop a discovery from the CLI (Stopping a Discovery). - Added a
discovery:reruncommand to re-run a discovery from the CLI (Rerunning a Discovery).
- Added a
- Proxy:
- Added a new
proxy-domains-bypassoptional flag - can be used with eitherproxyorproxy-target. Accepts a space-separated list of domains. Domains in the list will not be proxied.
It cannot be used together withproxy-domains(Command Language Syntax). - Added support for reading the
PROXYandNO_PROXYenvironment variables. If those are set, their values will be used as input for theproxyandproxy-domains-bypassflags (Command Language Syntax).
- Added a new
- Added log-level 5 - trace (Command Language Syntax).
- Breaking change - Warning logs are now written to