Skip to content

Commit 1f47fe4

Browse files
committed
release: WSHawk v3.0.5 — Bug Fixes & Version Sync
- Fixed fatal XSS scanner crash: WSPayloads.get_xss_payloads() → get_xss() - Fixed CLI banner showing V3.0.2 instead of current version - Synchronized version to 3.0.5 across all files: pyproject.toml, desktop/package.json, wshawk/__init__.py, wshawk-bridge.spec, PKGBUILD, CITATION.cff, homebrew cask, debian/changelog, README.md, and CHANGELOG.md
1 parent 8f9f4d0 commit 1f47fe4

45 files changed

Lines changed: 97 additions & 131 deletions

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

.github/workflows/build.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -141,7 +141,7 @@ jobs:
141141
pip install wshawk==3.0.1
142142
```
143143
144-
**Full Changelog**: https://github.com/noobforanonymous/wshawk/compare/v3.0.0...${{ github.ref_name }}
144+
**Full Changelog**: https://github.com/regaan/wshawk/compare/v3.0.0...${{ github.ref_name }}
145145
files: |
146146
artifacts/**/*.exe
147147
artifacts/**/*.dmg

CHANGELOG.md

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,14 @@
11
All notable changes to WSHawk will be documented in this file.
22

3+
## [3.0.5] - 2026-03-23
4+
5+
### Fixed
6+
- **XSS Scanner Module Crash** — Fixed `AttributeError: type object 'WSPayloads' has no attribute 'get_xss_payloads'` in `scanner_v2.py` that caused a fatal abort during the XSS testing phase. The correct method `get_xss()` is now called.
7+
- **CLI Banner Version Drift** — Banner previously displayed `V3.0.2` regardless of actual version; now correctly shows `V3.0.5`.
8+
9+
### Changed
10+
- **Version Synchronization** — Unified version to `3.0.5` across all project surfaces: `pyproject.toml`, `desktop/package.json`, `wshawk/__init__.py`, `wshawk-bridge.spec`, `PKGBUILD`, `CITATION.cff`, `homebrew-tap/Casks/wshawk.rb`, `debian/changelog`, CLI banner, and README.
11+
312
## [3.0.4] - 2026-03-05
413

514
### Changed

CITATION.cff

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,12 +3,12 @@ message: "If you use this software, please cite it as below."
33
authors:
44
- family-names: "Regaan"
55
given-names: "Regaan"
6-
alias: "noobforanonymous"
6+
alias: "regaan"
77
title: "WSHawk"
8-
version: 3.0.4
9-
date-released: 2026-03-05
10-
url: "https://github.com/noobforanonymous/wshawk"
11-
repository-code: "https://github.com/noobforanonymous/wshawk"
8+
version: 3.0.5
9+
date-released: 2026-03-23
10+
url: "https://github.com/regaan/wshawk"
11+
repository-code: "https://github.com/regaan/wshawk"
1212
keywords:
1313
- websocket
1414
- security

CONTRIBUTING.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -124,7 +124,7 @@ When reporting bugs, include:
124124
- Actual behavior
125125
- Error messages or logs
126126

127-
Use the GitHub issue tracker: https://github.com/noobforanonymous/wshawk/issues
127+
Use the GitHub issue tracker: https://github.com/regaan/wshawk/issues
128128

129129
## Security Issues
130130

Dockerfile

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -56,10 +56,10 @@ CMD ["--help"]
5656
LABEL maintainer="Regaan"
5757
LABEL description="WSHawk - Professional WebSocket Security Scanner with Defensive Validation"
5858
LABEL version="3.0.4"
59-
LABEL org.opencontainers.image.source="https://github.com/noobforanonymous/wshawk"
59+
LABEL org.opencontainers.image.source="https://github.com/regaan/wshawk"
6060
LABEL org.opencontainers.image.description="Professional WebSocket security scanner with real vulnerability verification, defensive validation, and CVSS scoring"
6161
LABEL org.opencontainers.image.licenses="AGPL-3.0"
6262
LABEL org.opencontainers.image.title="WSHawk"
6363
LABEL org.opencontainers.image.vendor="Regaan"
64-
LABEL org.opencontainers.image.url="https://github.com/noobforanonymous/wshawk"
65-
LABEL org.opencontainers.image.documentation="https://github.com/noobforanonymous/wshawk/blob/main/README.md"
64+
LABEL org.opencontainers.image.url="https://github.com/regaan/wshawk"
65+
LABEL org.opencontainers.image.documentation="https://github.com/regaan/wshawk/blob/main/README.md"

README.md

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -4,13 +4,13 @@
44
[![PyPI version](https://badge.fury.io/py/wshawk.svg)](https://badge.fury.io/py/wshawk)
55
[![License: AGPL-3.0](https://img.shields.io/badge/License-AGPL--3.0-blue.svg)](https://www.gnu.org/licenses/agpl-3.0)
66
[![Playwright](https://img.shields.io/badge/Playwright-Supported-green.svg)](https://playwright.dev/)
7-
[![Status: Production](https://img.shields.io/badge/status-production-green.svg)](https://github.com/noobforanonymous/wshawk)
8-
[![Adoption: 900+ Clones](https://img.shields.io/badge/Adoption-900+_clones_(14d)-blueviolet?style=flat&logo=github)](https://github.com/noobforanonymous/wshawk/graphs/traffic)
9-
[![Community: 120+ Devs](https://img.shields.io/badge/Community-120+_Active_Devs-orange?style=flat&logo=community)](https://github.com/noobforanonymous/wshawk)
7+
[![Status: Production](https://img.shields.io/badge/status-production-green.svg)](https://github.com/regaan/wshawk)
8+
[![Adoption: 900+ Clones](https://img.shields.io/badge/Adoption-900+_clones_(14d)-blueviolet?style=flat&logo=github)](https://github.com/regaan/wshawk/graphs/traffic)
9+
[![Community: 120+ Devs](https://img.shields.io/badge/Community-120+_Active_Devs-orange?style=flat&logo=community)](https://github.com/regaan/wshawk)
1010

1111
**WSHawk** is an enterprise-grade, open-source WebSocket security scanner built for professional penetration testers and red teams. It performs automated vulnerability assessment over WebSocket connections using an adaptive **Smart Payload Evolution (SPE)** engine with real-time feedback loops and genetic payload mutation. Designed for high-performance environments at the **ROT Independent Security Research Lab**.
1212

13-
Starting with v3.0.4, we've transitioned to the **AGPL-3.0 license** to better protect the project while keeping it open for the community. This release includes the **Headless DOM Invader** powered by Playwright for real browser-based XSS verification and complex SSO auth flow recording/replay. Also includes a **Context-Aware Heuristic Engine** and **WSHawk Browser Companion** for seamless handshake interception.
13+
Starting with v3.0.5, we've transitioned to the **AGPL-3.0 license** to better protect the project while keeping it open for the community. This release includes the **Headless DOM Invader** powered by Playwright for real browser-based XSS verification and complex SSO auth flow recording/replay. Also includes a **Context-Aware Heuristic Engine** and **WSHawk Browser Companion** for seamless handshake interception.
1414

1515
> [!IMPORTANT]
1616
> **Full Documentation:**
@@ -159,13 +159,13 @@ playwright install chromium
159159

160160
**Method 1: One-liner (Recommended)**
161161
```bash
162-
brew install --cask https://raw.githubusercontent.com/noobforanonymous/homebrew-tap/main/Casks/wshawk.rb
162+
brew install --cask https://raw.githubusercontent.com/regaan/homebrew-tap/main/Casks/wshawk.rb
163163
```
164164

165165
**Method 2: Stay Updated (Via Tap)**
166166
```bash
167167
# Register the WSHawk tap
168-
brew tap noobforanonymous/tap
168+
brew tap regaan/tap
169169

170170
# Install the cask
171171
brew install --cask wshawk
@@ -177,10 +177,10 @@ WSHawk is available via the official Regaan APT repository.
177177

178178
```bash
179179
# Add the WSHawk GPG key
180-
curl -sSL https://noobforanonymous.github.io/wshawk-repo/wshawk_repo.gpg.key | sudo gpg --dearmor -o /usr/share/keyrings/wshawk-archive-keyring.gpg
180+
curl -sSL https://regaan.github.io/wshawk-repo/wshawk_repo.gpg.key | sudo gpg --dearmor -o /usr/share/keyrings/wshawk-archive-keyring.gpg
181181

182182
# Add the WSHawk APT repository
183-
echo "deb [signed-by=/usr/share/keyrings/wshawk-archive-keyring.gpg] https://noobforanonymous.github.io/wshawk-repo stable main" | sudo tee /etc/apt/sources.list.d/wshawk.list
183+
echo "deb [signed-by=/usr/share/keyrings/wshawk-archive-keyring.gpg] https://regaan.github.io/wshawk-repo stable main" | sudo tee /etc/apt/sources.list.d/wshawk.list
184184

185185
# Install WSHawk
186186
sudo apt update && sudo apt install wshawk
@@ -207,7 +207,7 @@ See [Docker Guide](docs/DOCKER.md) for detailed usage.
207207
### Build Desktop Application
208208

209209
```bash
210-
git clone https://github.com/noobforanonymous/wshawk
210+
git clone https://github.com/regaan/wshawk
211211
cd wshawk
212212

213213
# Build Python sidecar binary
@@ -326,7 +326,7 @@ See [Defensive Validation Guide](docs/DEFENSIVE_VALIDATION.md).
326326
>
327327
> **Download only from official sources:**
328328
> - **Website:** [`https://wshawk.rothackers.com`](https://wshawk.rothackers.com)
329-
> - **GitHub:** [`https://github.com/noobforanonymous/wshawk`](https://github.com/noobforanonymous/wshawk)
329+
> - **GitHub:** [`https://github.com/regaan/wshawk`](https://github.com/regaan/wshawk)
330330
> - **PyPI:** `pip install wshawk`
331331
> - **Docker:** `docker pull rothackers/wshawk`
332332

@@ -369,17 +369,17 @@ Contributions welcome — see [CONTRIBUTING.md](CONTRIBUTING.md)
369369

370370
| Channel | Link |
371371
|---|---|
372-
| Issues | [GitHub Issues](https://github.com/noobforanonymous/wshawk/issues) |
372+
| Issues | [GitHub Issues](https://github.com/regaan/wshawk/issues) |
373373
| Documentation | [docs/](docs/) |
374374
| Email | support@rothackers.com |
375375

376376
---
377377

378-
**WSHawk v3.0.4** — Professional WebSocket Security Scanner & Interception Suite
378+
**WSHawk v3.0.5** — Professional WebSocket Security Scanner & Interception Suite
379379

380380
---
381381

382-
### Latest Updates (v3.0.3)
382+
### Latest Updates (v3.0.5)
383383
- **DOM Invader**: Headless Playwright engine verifies XSS payloads in a real browser — zero false positives. Confirms `alert()`, `eval()`, DOM mutations, and injected script tags.
384384
- **Auth Flow Recorder**: Records complex SSO/OAuth login flows in a visible browser, then replays them headlessly to mint fresh tokens during long fuzzing runs.
385385
- **Auto Session Reconnect**: Payload Blaster detects session expiry and automatically replays the recorded auth flow to reconnect — no manual intervention needed.

RELEASE_3.0.0.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -57,5 +57,5 @@ WSHawk V3.0.1 is built to live inside a modern security operations center.
5757

5858
---
5959

60-
### **Built by Regaan (@noobforanonymous)**
60+
### **Built by Regaan (@regaan)**
6161
*Empowering secondary-security researchers and blue teams with enterprise-grade WebSocket auditing.*

RELEASE_SUMMARY.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,4 +56,4 @@ WSHawk V3.0.2 is built to live inside a modern security operations center.
5656

5757
---
5858

59-
### **Built by Regaan (@noobforanonymous)**
59+
### **Built by Regaan (@regaan)**

SECURITY.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ Please give us reasonable time to fix the issue before public disclosure. We'll
4545

4646
Security patches are released as soon as possible. Subscribe to releases to stay updated:
4747
- Watch this repository
48-
- Check the [Releases](https://github.com/noobforanonymous/wshawk/releases) page
48+
- Check the [Releases](https://github.com/regaan/wshawk/releases) page
4949

5050
### Out of Scope
5151

desktop/package.json

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
{
22
"name": "wshawk",
3-
"version": "3.0.4",
3+
"version": "3.0.5",
44
"description": "WSHawk - Advanced WebSocket Security Scanner",
5-
"homepage": "https://github.com/noobforanonymous/wshawk",
5+
"homepage": "https://github.com/regaan/wshawk",
66
"repository": {
77
"type": "git",
8-
"url": "https://github.com/noobforanonymous/wshawk.git"
8+
"url": "https://github.com/regaan/wshawk.git"
99
},
1010
"main": "index.js",
1111
"scripts": {

0 commit comments

Comments
 (0)