Releases: xaitax/SploitScan
Releases · xaitax/SploitScan
v0.11.0
- Method Selection Added: Introduced a new
-m
argument to allow users to selectively run specific methods (e.g.,cisa
,epss
,hackerone
,ai
,prio
,references
). This enables more granular control over which data sources and assessments are retrieved for each CVE. - Import List Auto-Detection: Added functionality to automatically detect and handle plain text CVE lists when using the
-i
option without specifying an import type (-t
). If the file is detected as a plain text CVE list, it will import the CVE IDs directly without requiring a specific type. - CSV Export Fix: Fixed an issue where CISA data was not properly exported to CSV. Now, all relevant CISA information is included in the exported CSV file.
- HTML Export Fix: Resolved an issue where
NoneType
errors caused the HTML export to fail. Improved error handling to ensure that missing or empty data does not interrupt the export process.
v0.10.5
v0.10.4
v0.10.3
- Main Function Refactoring: Refactored the main function into smaller, modular functions to improve maintainability and readability.
- Public Exploit Display Enhancements: Reworked the public exploit display to include the total number of exploits and better error handling.
- Improved Error Handling: Enhanced error handling for API key configurations and data fetching, especially for VulnCheck.
v0.10.2
[30. June 2024] - Version 0.10.2
- Custom Configuration Path: Added support for specifying a custom configuration file path using the
--config
or-c
command-line argument. - Platform-Specific Directories: Added support for platform-specific (*nix, macOS, Windows) configuration directories.
- Debug Mode: Improved debug output for configuration file loading.
v0.10.1
v0.10.0
v0.9.1
- AI-Powered Risk Assessment: Integrated OpenAI for detailed risk assessments, potential attack scenarios, mitigation recommendations, and executive summaries (needs OpenAI API key).
- CVE Information Retrieval: Due to API rate limits and instabilities replaced NIST NVD with CVE Program.
- General Improvements: Various bug fixes and performance improvements.
v0.9
- AI-Powered Risk Assessment: Integrated OpenAI for detailed risk assessments, potential attack scenarios, mitigation recommendations, and executive summaries (needs OpenAI API key).
- CVE Information Retrieval: Due to API rate limits and instabilities replaced NIST NVD with CVE Program.
- General Improvements: Various bug fixes and performance improvements.
v0.8.1
HTML Export Functionality: Introduced the ability to export vulnerability data to HTML reports.
Packet Storm Integration: Added support for fetching exploit data from Packet Storm.
Enhanced Display Functions: Added CVE_GITHUB_URL as CVE source, and functions to output the most updated CVE source.
Code Refactoring: Refactored code to improve maintainability and readability due to the growing code base.