Skip to content

Releases: ParzivalHack/PySpector

v0.1.5-beta: Inter-Procedural Taint Analysis & Graph-Based Engine Upgrade

25 Jan 16:32

Choose a tag to compare

What's New in v0.1.5

This release introduces a fundamental architectural shift in PySpector's core analysis engine, moving from local AST matching to project-wide graph-based tracking (finally, i would say lol)

Core Engine Upgrades

  • Inter-Procedural Analysis: Track tainted data as it moves across function boundaries using global fixed-point iteration.
  • Flow-Sensitive CFG: A brand new Control Flow Graph (CFG) engine ensures PySpector understands the execution order, significantly reducing false positives.
  • Function Summaries: Introduced context-sensitive mapping to track how specific parameters flow into return values.

Bug Fixes

  • Resolved a critical error in the Call Graph builder where function definitions were misidentified.
  • Fixed edge-case handling in the Rust core during complex branch merging.

Documentation

  • README updated with deep-dives into the new engine architecture and inter-procedural examples.

Full Changelog: v0.1.4-beta-hotfix...v0.1.5-beta

Hotfix: Fixed bug preventing SARIF reports from being created, fixed versioning throughout the codebase to reflect the current version, added stupid ass jokes cause if i'm already crying for my code, a laugh helps out

11 Jan 17:35

Choose a tag to compare

Hotfix: Fixed bug preventing SARIF reports from being created, fixed versioning throughout the codebase to reflect the current version, added stupid ass jokes cause if i'm already crying for my code, a laugh helps out
Full Changelog: v0.1.4-beta...v0.1.4-beta-hotfix

v0.1.4-beta: Minor improvements, a couple of bug fixes and a major website update with also a new design

10 Jan 10:49

Choose a tag to compare

Minor improvements, a couple of bug fixes and a major website update with also a new design.
Full Changelog: v0.1.3-beta...v0.1.4-beta

v0.1.3-beta: Major Bux Fixes, added plugin system to allow the creation of community plugins that go together with PySpector, added an AI exploit generator plugin for PySpector, updated docs

29 Oct 12:29

Choose a tag to compare

Major Bux Fixes, added plugin system to allow the creation of community plugins that go together with PySpector, added an AI exploit generator plugin for PySpector, updated docs.
Full Changelog: v0.1.3-beta...v0.1.3-beta

v0.1.2-beta: Major Bug fix in AST Analysis, minor documentation and rules enhancements

30 Sep 12:09

Choose a tag to compare

Major Bug fix in AST Analysis, minor documentation and rules enhancements
Full Changelog: v0.1.1-beta...v0.1.2-beta

v0.1.1-beta: AI Security Update + small fixes

15 Sep 18:31

Choose a tag to compare

Changelog for v0.1.1-beta:
Major Feature: AI/LLM Security Rules: We've added a massive new ruleset with over 100 checks specifically designed to find vulnerabilities in AI and LLM applications, including prompt injection, insecure model loading, and dangerous agent tool usage.

New Look: To give the tool a bit more personality, PySpector now greets you with a cool new ASCII art banner on startup.

Bug Fixes: We’ve squashed several bugs, including a crucial fix for the --ai flag and an important correction to our build configuration to ensure anyone can compile the Rust-powered core without issues.