v0.17.0

What's Changed

• Enhanced output formats for improved readability.
• Improved diff mode functionality.
• Added new output format option (-only-tag).
• We open documentation site and Expanded and updated documentation.
• Continuous Integration (CI) updates.
• Enhanced logging and application log features.
• Improved unit test code coverage and quality.
• Upgraded analyzer with new features:
  • Java Spring: Added parsing logic for application.properties files.
• Code refactoring for better performance and maintainability.
• Security Issue
  • Re-builded snapcraft package for fix to https://ubuntu.com/security/notices/USN-6937-1/

Full Changelog: v0.16.1...v0.17.0

Enhanced output formats

We've made significant changes to the default output format to enhance readability, and we believe we've achieved that goal. We'll continue to research and make improvements as we go forward!

Documentation

https://owasp-noir.github.io/noir/introduction/

Noir now has an official documentation page. Currently, it focuses on basic usage, but we plan to expand it to include tips and other content. Contributions to the documentation are always welcome.

Add new flag —only-tag

You can now gather only tags from Noir results, giving you insights into key risks and technologies used in the source code.

noir -b <TARGET> -T -f only-tag

# ....
# sqli
# oauth
# websocket

This feature helps you quickly identify the main risks and technologies in your code, improving efficiency in the initial analysis phase.

Next plan

Looking ahead, we're excited to announce our plans to expand the Tagger. We're aiming for a Rule(YAML)-based Passive Scan, and we've completed our internal discussions on its structure. Now it's time to build it. Stay tuned for v0.18.0! We also plan to improve MiniLexer and MiniParser.

Lastly, any contributions, from simple typo corrections to code modifications, are a great help in maintaining the project. We're open to all contributions, and Discussion and PRs are always welcome ♥️

cc @ksg97031