InsightAppSec Release Notes / May 16, 2025

May 16, 20252025.05.16

7.5.018 (Released May 16, 2025)

New Crawling and Scanning Features & Enhancements

  • R7Crawler:

    • Added an analyze option to detect technologies and their versions.
    • Updated to version 1.0.0.335.
    • Enhanced Chromium scans now automatically analyze seed URLs for detected technologies (optional JSON reporting available).
    • Improved handling of specified headers in Chromium login macros—headers are applied to all login requests except 'accept'.

  • Attack Enhancement:

    • Improved validation scanning for SSL Strength findings.

  • Scan Engine:

    • Enhanced scanning stability.
    • Improved responsiveness to pause, resume, and stop commands.
    • Fixed an issue that could cause hung scans due to engine deadlock.
    • Improved the ChromeHost Event Target listener to ensure script injection does not interfere with website code.
    • Improved Selenium cleanup operations to prevent potential crashes.
    • Enhanced HAR file parameter parsing.

  • Macro Handling:

    • ChromeHost now supports One-Time Passwords (HOTP/TOTP) for Driver Click, On Click, and JavaScript macros.

  • Password exposure checks now properly handle non-case-sensitive and encrypted characters.

  • Updated Node.js to include the latest security fixes.

  • Report Configuration:

    • Added the MaxReportResponseTrafficSize option to configure the maximum length of VulnList.Vuln.CrawlTrafficResponse.

  • Updated to PCI DSS 4.0 report mapping.

  • Improved handling of Content-Security-Policy meta tags in the website body during ChromeHost scans.

  • Upgraded Selenium ChromeDriver to version 136.0.7103.49.

7.5.017 (Released April 10, 2025)

Overview

Enhancements to crawling and scanning, including improvements to GraphQL support, installer behavior, macro handling, PDF reporting, performance, login reliability, thread pooling, and ChromeDriver updates. Windows Fiber technology has been removed from the scan engine.

Crawling and Scanning Features & Enhancements

  • Removed Windows Fiber technology from the scan engine.
  • GraphQL: Enhanced schema file handling for more accurate query construction.
  • AppSpider REST Service Installer: Improved installation support for non-English Windows operating systems.
  • R7Crawler Macros: Added the ability to convert .rec/.xml files to .json format.
  • PDF Reports: Improved generation when running scans using the Chromium browser.
  • Performance: Optimized by removing redundant code and addressing potential issues.
  • Macro Handling: Improved reliability for logins involving pop-up windows.
  • Scan Engine: Continued optimization of thread pool count for increased stability.
  • Upgraded Selenium ChromeDriver to version 135.0.7049.42.