report-ng v1.0.5

Changes:

• Fixed HTML templating bug & Image width issue

report-ng v1.0.3

Changes:
- Nmap scan support for multiple XML files - gets enabled if 'OpenPorts' directive is found in the template
- FIX: Fixed deprecated functions e.g. icon/OnFileDrop handling
- Added support for multiple charts in the _xml_apply_chart functions via objects cloning
- Support for page titles in coreProperties - automatically generated if not set with Test.DocumentTitle
- FIX: Template filename is now resolved with abspath fixing the "empty directory" error
- FIX: Empty scan files directive in CLI would give a NoneType error, changed to an empty array

report-ng-0.9.9

0.9.9 - Wed May 10 09:42:18 2017

• Added CLI option for converting scan xml file to yaml or json

0.9.8 - Tue May 9 10:21:47 2017

• Added CLI option for (optional) outputting content to file (yaml / json)

0.9.7 - Tue May 9 09:35:48 2017

• Added default sections for Burp / WebInspect imports (standarization)

0.9.6 - Wed Apr 5 08:19:48 2017

• CLI command-line now accepts multiple scans, added demo to report.py

report-ng-0.9.5

0.9.5 - Thu Mar 16 13:43:41 2017

• Burp scan import will now include confidence value for each finding

0.9.4 - Thu Mar 16 12:46:37 2017

• CLI support was rewritten and tested (confirmed to work on Linux)

0.9.3 - Sun Mar 12 09:18:34 2017

• FIX: reported crash on KB merging

0.9.2 - Thu Mar 9 09:58:26 2017

• added: KB Aliases are now case-insensitive

0.9.1 - Wed Mar 8 18:09:27 2017

• added: enabled Ctrl+A selection on TextWindow (yaml preview on doubleclick)

0.9.0 - Wed Mar 8 13:00:21 2017

• added: new switch (enabled by default) to propagate paragraph style annotation

0.8.9 - Tue Mar 7 19:50:56 2017

• added: if-not for non-finding elements: root (tested) and child (not-tested)

0.8.8 - Tue Mar 7 13:56:31 2017

• FIX: Premature KB cleanup prevented populating Summary descriptions fields

0.8.7 - Mon Feb 27 14:32:29 2017

• "Merge KB into Content" is now performed before report is generated.

0.8.6 - Mon Feb 27 10:51:56 2017

• FIX: crash when findings severity is present which is not on a template

0.8.5 - Mon Feb 27 10:18:59 2017

• FIX: crash at Merge KB into Content

0.8.4 - Wed Feb 22 12:58:11 2017

• FIX: Finding placeholders for given severities (eg. Best Practices) can
  now be removed from templates

0.8.3 - Tue Feb 14 11:04:55 2017

• added: Yamled edit now suports "Ctrl+A", it should now be possible to work
  with it using keyboard only

0.8.2 - Fri Feb 10 21:14:03 2017

• New: "Menu Tools / Switch to Yamled" - closes report-ng, starts Yamled

0.8.1 - Tue Feb 7 14:24:30 2017

• "If not exists" should now work for both Finding root and child nodes

0.8.0 - Mon Feb 6 21:14:08 2017

• "If not exists" handling added to Finding section (basic functionality)

0.7.9 - Sat Feb 4 19:18:06 2017

• New feature available from menu item added: Merge KB into Content

0.7.8 - Mon Jun 27 15:39:34 2016

• Improper input check

0.7.7 - Mon May 16 15:39:02 2016

• FIX: VIEWSTATE truncation should now work properly
• Upgrade to Python 2.7.11 and upstream modules

0.7.6 - Thu Apr 7 14:35:07 2016

• FIX: making sure burp request/reponses are properly encoded

0.7.5 - Thu Jan 14 11:00:04 2016

• yamled: Ctrl+A will now start editing given cell and select all content
• report-ng: content directory is now default location for saving generated content

0.7.4 - Mon Nov 30 12:00:35 2015

• FIX: Burp edge case issues

0.7.3 - Mon Oct 26 15:59:34 2015

• FIX: XML characters validation missing

report-ng-0.7.2

0.7.2 - Fri Jul 10 13:29:38 2015

• If there will be no Finding.Summary.X, it will fallback to Finding.X value
• Yamled sets bold for a value of first key in dictionary

0.7.1 - Tue Jun 23 11:03:09 2015

• FIX: Encoding handling issue

0.7.0 - Mon May 18 10:57:28 2015

• FIX: Temporary workaround for minor issue during report generation

0.6.9 - Sun Apr 19 21:06:39 2015

• Ability to include requests and responses from imported scan (slow and heavy!).

0.6.8 - Thu Apr 9 15:27:37 2015

• Minor code cleanups. Yamled still needs performance upgrade fixes.

0.6.7 - Mon Mar 2 15:15:58 2015

• It is now possible to import Occurrences from Burp's "Save (selected) items"
  right click popup menu action generated xml. This might be useful for adding
  earlier filtered items discovered during Intruder tests.

0.6.6 - Tue Feb 17 12:03:30 2015

• FIX: Yamled load on drag & drop should now work
• FIX: Yamled crash on use of Escape should now be eliminated
• Yamled tree view now allows use of Enter key to edit value of selected key
• Yamled Ctrl+S save is now supported

0.6.5 - Thu Feb 5 21:20:53 2015

• FIX: Yamled infinite loop during file saving has been eliminated
• FIX: Loaded data should now be properly structured
• Yamled now supports file loading via drag & drop

0.6.4 - Thu Feb 5 13:07:53 2015

• FIX: Importing huge xml scans generated by Webinspect should now work properly
• FIX: saving lists in Yamled of one item dicts should now be proper
• Yamled will notify about unsaved changes
• Yamled value edition can now be finished with Tab or Escape key
• Minor fixes

0.6.3 - Mon Dec 29 23:58:28 2014

• Yamled add new node (currently only when selected node is parent to a list)

0.6.2 - Mon Dec 29 19:50:06 2014

• Yamled editing minor enhancements

0.6.1 - Sun Dec 28 23:28:41 2014

• Yamled values editing is now using multiline field

0.6.0 - Fri Dec 26 21:05:43 2014

• FIX: Multipart requests will now be shown as proper multiline content

0.5.9 - Thu Dec 25 22:55:01 2014

• FIX: Multipart requests data will now land in Finding.Occurrences.Post
• FIX: Two cases for loading of manually created yaml file were fixed

0.5.8 - Sun Nov 23 21:01:03 2014

• Yamled button is now available for Content
• Yamled saving scan is now possible
• Yamled nodes deletion has been added
• Yamled popup menu has been extended: Collapse All / Expand All

0.5.7 - Fri Nov 21 07:28:04 2014

• __EVENTVALIDATION is now shortened same way as __VIEWSTATE

0.5.6 - Thu Nov 13 14:31:49 2014

• FIX: params truncation handling bugfix

0.5.5 - Fri Sep 26 13:09:41 2014

• FIX: Burp scan imports issueBackground is now handled as optional field
• FIX: Due to specific Burp extension, scan grouping is now name based as vuln_id became ambiguous

0.5.4 - Thu Sep 25 20:24:39 2014

• Finding summary counter and graphing are now using fallback count equal 1

0.5.3 - Tue Sep 23 17:53:12 2014

• FIX: Binary content (e.g. gif file HTTP response) in should now be handled properly
• WebInspect and Burp scans first parameter is now Name, not Severity

0.5.2 - Sun Sep 21 12:10:03 2014

• Yamled node collapsing/expanding added
• Yamled scrolling and content loading fixes

0.5.1 - Fri Sep 19 21:14:32 2014

• FIX: WebInspect scan import proper VulnerabilityID inputs handling
• Yaml editor added (not yet functional)

0.5.0 - Mon Sep 15 18:16:54 2014

• All child windows are now screen centered
• Gui module cleanup + new, experimental, yet unusable yamled module
• Yamled wrapper and icon added

0.4.9 - Fri Sep 12 23:55:55 2014

• ViewState truncation now affects scan saving as well as merging into content
• FIX: Always on top should now work everytime application starts

0.4.8 - Fri Sep 12 22:04:57 2014

• ASP and javax.faces ViewState truncation menu switch added (enabled by default)
• Truncation now also affects scan preview textarea (for performance reasons)
• FIX: wxpython 3.0 redirect stdio to window defaults set to False, True is now enforced
• FIX: vulnparam highlighting GUI switch will now work as expected

0.4.7 - Sun Aug 31 13:46:42 2014

• Always on top menu switch added (enabled by default)
• Usage help is now rendered as html

0.4.6 - Tue Aug 26 22:32:28 2014

• KB import from csv generated from Sharepoint filters few unwanted characters
• cx_Freeze builder added to remediate pyinstaller's 10 second start lag on many systems

0.4.5 - Sun Aug 24 21:17:17 2014

• Switching view between json/yaml works now for KB as well
• More verbose status bar when loading files
• Minor template adjustment to be more in-line with current features
• wxpython 2.8 upgraded to 3.0 for future use features

0.4.4 - Wed Aug 20 18:41:37 2014

• FIX: VulnParam highlighting has been fixed and should now be more accurate
• if Finding.[Severity] placeholder contains only blank characters, it will be removed

0.4.3 - Wed Aug 13 18:28:25 2014

• FIX: Each conditional tag should now be handled, not only the first one
• yaml/json saved files are now UTF-8 encoded by default
• minor fix in KB CSV import

0.4.2 - Mon Aug 11 18:44:01 2014

• FIX: Switching off clean for templates missing Finding.Severity now works fine
• Application now starts aligned to the right which is more convenient for drag & drop
• Cleanup after saving report is now performed so another report could be produced without
  need for application restart
• Redundant cleanups are now being avoided

0.4.1 - Sat Jul 12 15:09:43 2014

• FIX: KB entries are now correctly set for nested undefined findings content

0.4.0 - Sat Jul 12 11:11:46 2014

• Added: CVS imported KB now supports nesting (e.g. Summary.Description)

0.3.9 - Fri Jul 11 20:08:34 2014

• FIX: Plain text now correctly replaces tag content with multiple runs
• FIX: Pseudohtml font size should now be correctly handled
• FIX: clean=False multiple runs now join with no redundant blanks
• Added: Finding placeholder now acts as a fallback when no findings of
  given severity are present

0.3.8 - Thu Jul 10 17:57:17 2014

• Added: Aliases support for Knowledge Base

0.3.7 - Wed Jul 9 20:07:28 2014

• FIX: CSV formatting issues

0.3.6 - Tue Jul 8 19:41:20 2014

• Added: Example request and response are now included in each finding
• FIX: Rendering cleanup issue has been fixed

0.3.5 - Mon Jul 7 21:31:18 2014

• Added: Conditional tags handling in content below root
• Added: Statusbar
• Random Password Generator introduced
• Added: KB might now be loaded from Excel CSV file
• Added: Drag & drop status hints

0.3.4 - Fri Jul 4 23:10:12 2014

• FIX: Content refresh added after Scan merge to keep state consistency
• FIX: Left templating elements are now cleaned up
• FIX: Lack of value in yaml is now threated as empty string
• Added: VulnParam highlighting now have a checkbox in View Menu

0.3.3 - Thu Jul 3 22:08:40 2014

• FIX: WebInspect scan import minor issue
• Added: VulnParam highlighting in Finding.Occurrences.Location and Post

0.3.2 - Wed Jul 2 21:55:48 2014

• Added: Tools / Merge Scan into Content
• Added: File / Save Content As
• Added: VulnParam in occurrences of Burp/WebInspect scans

0.3.1 - Sat Jun 28 20:23:14 2014

• Findings.VolumeChart tag added
• Pseudohtml tags change: r/red = red text, rw/redwhite = red highlight

0.3.0 - Sat Jun 28 16:52:45 2014

• HP WebInspect scan FullURL is now properly handled
• changed way HP WebInspect scan Classification URLs are presented
• content formatting fixes

0.2.9 - Sat Jun 28 00:21:41 2014

• added conditional root blocks in content
• counter capability added to findings summary

0.2.8 - Thu Jun 27 17:34:49 2014

• minor formatting issues
• added conditional blocks within findings

0.2.7 - Sun May 4 23:02:01 2014

• documentation updates

0.2.6 - Fri May 2 16:13:22 2014

• added: command-line support
• added: License information

0.2.5 - Mon Apr 28 02:11:00 2014

• FIX: html/ihtml sections should now land correctly in summary table cells

0.2.4 - Sat Apr 26 11:27:01 2014

• added: Template structure preview

0.2.3 - Thu Apr 24 22:12:09 2014

• FIX: is now relative to template file directory
• html/ihtml sections are now more error proof
• source code has been reorganized into smaller pieces
• source has been cleaned up a bit

0.2.2 - Mon Apr 21 03:01:05 2014

• HP WebInspect and Burp Suite Pro scans are now supported
• pseudo-html is now supported as an input for template
• added: Changelog