2.1 KiB
2.1 KiB
Changelog
0.2.1
- Compact colored terminal report and phase-labelled progress bar by default;
--verbose,--format fulland--progress plainretain detailed diagnostics. - Native pre-login SMB2 compression-capability negotiation replaces the login-dependent SMBGhost heuristic. No compressed transforms or exploits.
- Respect ignored/reserved SMB fields and compression-algorithm intersection; retain strict bounds, response identity, context and absolute-timeout checks.
- Recognize Zerologon's explicit probabilistic negative; distinguish rejected SMB authentication and denied PrintNightmare RPC binding from CVE verdicts.
- Preserve contradictory attempts, but suppress unqualified confirmed/clean claims and use low-confidence conflict findings. Label optional signing accurately; distinguish pending work, interruption and missing collectors.
- Detect RPC-dump protocol errors even on exit zero. Empty output cannot count as successful enumeration. Preserve partial inventory and failure diagnostics.
- Stop queued RPC-dump copies after recognized local startup failures, without suppressing independent remote failures or other selected checks.
- Save per-invocation timings and bounded error excerpts; retain complete, uncolored evidence reports. Modernize wheel license metadata.
Validation uses synthetic protocol frames, mocked external tools and local subprocess tests. No live target benchmark or patched/unpatched lab validation has been performed. A summary showing RPC-dump exit code 1 still requires its raw log to identify the actual root cause.
Primary behavior references: