About this release
This is a significant release, the biggest since the first one of this
project. In general lines, below are the main improvements.
Framework Plugin Engine 🔌
This is a core component of Vimana to support extensions to be plugged,
extending the range and type of resources available. This passed through
significant improvements focused on reliability and information.
Simplified setup ⚙️
In addition to the step-by-step approach, this release allows you to set up
Vimana using a single bash command line:
$ curl -s https://raw.githubusercontent.com/s4dhulabs/vimana-framework/main/scripts/get_vimana | bash
Vimana Plugins Loader ⚡
Once most plugin operations are now handled through a database, the initial
setup now requires plugins to be registered before you can play with
Vimana. You can accomplish that by running:
vimana load --plugins
Viman Guide ✨
This brand-new resource aims to centralize everything related to the plugin's
specifications, required arguments, usage examples, and lab setups. Now you
can just use the following syntaxes once you have the Framework ready:
vimana guide --plugin <plugin name> --args/--examples/--labs
Post-analysis utilities 👾
In this version, there are available other three new utilities on post-analysis
with DMT (Django Misconfiguration Tracker):
qx/query_extractor: Looks for SQL queries on exception metadata
cx/creds_extracotr: Looks for credentials on metadata
ss/secret_scan: Scan leaked source code and environment for well-known secret patterns