100 Commits
Author SHA1 Message Date
Yogesh OjhaandGitHub de4199222c Merge pull request #1522 from Alexandrudiun/master
Fix internal server error 500 during report generation
2025-11-16 17:39:26 +02:00
Yogesh OjhaandGitHub c7e19a49de Merge pull request #1509 from belane/patch-2
Adds GooFuzz proxy functionality
2025-11-14 07:01:16 +02:00
Yogesh OjhaandGitHub 4673437e94 Merge pull request #1508 from belane/patch-1
Fix naabu scan
2025-11-14 07:00:51 +02:00
Yogesh OjhaandGitHub f2f40582e8 Merge pull request #1488 from dmchaledev/vuln_render_fix
#1476-#1480-#1487 Fix, setting fallback for Nuclei variable and fixing JS errors in Vulnerabilities page
2025-02-24 06:33:11 +05:30
Yogesh OjhaandGitHub 32633d4ff1 Merge pull request #1483 from yogeshojha/sponsorship-patch-1
Added sponsors/Enterprise Support
2025-02-19 11:19:50 +05:30
Yogesh OjhaandGitHub 7b39aa168c Add video hailbytes 2025-02-19 11:19:27 +05:30
Yogesh OjhaandGitHub a3a20efbc9 Added sponsors 2025-02-09 10:52:31 +05:30
Yogesh OjhaandGitHub fd6c23fbf4 Update SECURITY.md 2025-02-09 10:21:02 +05:30
Yogesh OjhaandGitHub 0c6e64fc6c Merge commit from fork
(security) Fix: Privilege Escalation Vulnerability in reNgine
2025-02-04 10:26:25 +05:30
Yogesh Ojha fb2b59d5d3 Add permission checks for various API views to enhance security 2025-02-04 10:15:22 +05:30
Yogesh Ojha 1a9f307be9 Implement custom permission class for DRF 2025-02-04 10:05:26 +05:30
Yogesh Ojha c228b50eeb Add permission checks for project deletion and creation in dashboard 2025-02-04 09:51:50 +05:30
Yogesh OjhaandGitHub b77d1e05fb Merge commit from fork
(security) XSS Vulnerabilities in Admin Settings Panel
2025-02-04 09:12:55 +05:30
Yogesh Ojha 635890d5fa escape user data in admin dashboard to prevent xss vulnerabilities 2025-02-04 09:10:46 +05:30
Yogesh OjhaandGitHub 911196dbf4 Merge commit from fork
(security) fix all instances of xss in list target page
2025-02-04 08:57:00 +05:30
Yogesh Ojha 1e8df62cbf fix all instances of xss in list target page 2025-02-04 08:25:51 +05:30
Yogesh OjhaandGitHub f6fca36c9b Merge pull request #1467 from alibaykara/master
Update README.md
2025-02-03 12:29:43 +05:30
Yogesh OjhaandGitHub 6e03469e22 Merge commit from fork
(security) prevent XSS in vulnerability offcanvas display
2025-02-03 10:43:23 +05:30
Yogesh Ojha 18a891f843 fix xss in vuln offcanvas 2025-02-03 10:40:34 +05:30
Yogesh OjhaandGitHub c28e5c8d30 Merge commit from fork
(security) prevent command injection in nmap scan engine configuration
2025-02-03 10:07:23 +05:30
Yogesh Ojha 6ad0b1917b validate nmap command before execution to prevent command injection attacks, Reported by @gonzaless95 2025-02-03 10:04:27 +05:30
Yogesh OjhaandGitHub a658b8519f Merge commit from fork
(security) Prevent User Sensitive Data Exposure in Vulnerability Serializer
2025-02-01 05:44:00 +05:30
Yogesh Ojha f4a1300e90 (security) add MinimalUserSerializer to return minimal user information in serializers report submitted by @RaDiTZz0 2025-01-31 20:49:09 +05:30
Yogesh OjhaandGitHub e9251c41bc Merge pull request #1432 from yogeshojha/hotfix/2.2.0_release
2.2.0 Hotfix
2024-09-11 20:05:40 +05:30
Yogesh Ojha 101b9be0ae fix back docker compose for celery beat migration 2024-09-11 09:02:30 +05:30
Yogesh Ojha b8915cbf58 remove entrypoint as migrations not needed 2024-09-11 08:30:06 +05:30
Yogesh Ojha 96b47dfd3d fix celery entrypoint to have app specific makemigrations 2024-09-11 07:26:06 +05:30
Yogesh Ojha 699495f7bd recreate new model migrations 2024-09-11 07:19:18 +05:30
Yogesh Ojha 0486642f29 remove - from rengine name in uninstall script 2024-09-11 06:31:51 +05:30
Yogesh Ojha 0c0f3d8085 remove migrations, fix celery issue 2024-09-11 06:23:54 +05:30
Yogesh Ojha 485cc07c5e create new migrations 2024-09-10 20:35:58 +05:30
Yogesh Ojha a09fee7f3a revert back initial migrations to 2.1.3 2024-09-10 20:33:37 +05:30
Yogesh OjhaandGitHub 08a9af2f09 Merge pull request #1428 from yogeshojha/quickfix/release_2.2.0
fix onboarding error when hackerone keys are not set
2024-09-08 03:47:01 +05:30
Yogesh Ojha 0ee9aaea84 fix onboarding error when hackerone keys are not set 2024-09-08 03:45:36 +05:30
Yogesh OjhaandGitHub a4342ff048 Update README.md 2024-09-07 20:49:30 +05:30
Yogesh OjhaandGitHub 302b5f32e7 Merge pull request #1349 from yogeshojha/release/2.2.0
reNgine 2.2.0
2024-09-07 20:39:22 +05:30
Yogesh Ojha 589a7f36a8 fix url in whats new 2024-09-07 20:37:20 +05:30
Yogesh Ojha 4840cbb7d0 update what's new 2024-09-07 20:35:45 +05:30
Yogesh Ojha 0eaf19e518 update notif exception 2024-09-07 18:26:40 +05:30
Yogesh Ojha 384c6c9eea update readme 2024-09-06 14:50:18 +05:30
Yogesh Ojha 8bcdfa156d put hackerone handle inside user pref enable bug bounty mode 2024-09-06 14:40:22 +05:30
Yogesh OjhaandGitHub 9beca84cd2 Merge pull request #1425 from yogeshojha/492-create-organization-when-adding-targets
feat: Create organization when quick adding targets #492
2024-09-06 14:34:24 +05:30
Yogesh Ojha d3631ceed7 Add organization while adding target 2024-09-06 14:28:29 +05:30
Yogesh Ojha 7ad2eb2ff5 Add hackerone team handle badge in target section 2024-09-06 14:18:29 +05:30
Yogesh Ojha cf6448ddf5 Add hackerone handle while adding target 2024-09-06 14:08:57 +05:30
Yogesh Ojha 25ec1b6ec6 remove out of scope items from modal 2024-09-06 13:38:40 +05:30
Yogesh Ojha 6dfce27136 fix swal while deleting multiple targets 2024-09-06 13:18:50 +05:30
Yogesh Ojha bb35333216 remove assets that are not eligible for submission 2024-09-06 13:02:48 +05:30
Yogesh Ojha 03b60a982d Add hackerone imported organization description 2024-09-06 12:16:35 +05:30
Yogesh Ojha 21bd8d3e57 fix reverse whois task 2024-09-06 12:09:33 +05:30
Yogesh Ojha 83fdccf3fb fix inapp notifications 2024-09-06 11:58:06 +05:30
Yogesh OjhaandGitHub 056c720d8b Merge pull request #1424 from yogeshojha/1419-bug-remove-watchmedo-usage-in-production
bug: remove watchmedo usage in production #1419
2024-09-06 11:42:23 +05:30
Yogesh Ojha 95e2a2f38f remove debug code 2024-09-06 11:41:59 +05:30
Yogesh Ojha 3e87a76841 remove watchmedo in production 2024-09-06 11:40:15 +05:30
Yogesh Ojha d01e3bd05f cleanup migrations 2024-09-06 07:18:10 +05:30
Yogesh Ojha dad36852f6 make minor changes 2024-09-05 21:35:30 +05:30
Yogesh OjhaandGitHub fb37ad5878 Merge pull request #1418 from yogeshojha/1411-feat-enable-bug-bounty-mode-to-separate-bug-bounty-related-features
feat: Enable bug bounty mode as User Preference to separate bug bounty related features #1411
2024-09-05 21:23:34 +05:30
Yogesh Ojha cf0672040a add snackbar notification and reload timeout 2024-09-05 21:16:21 +05:30
Yogesh Ojha 05da3cb93e Add viewset and menu to toggle bug bounty mode 2024-09-05 21:10:52 +05:30
Yogesh Ojha 0c3b4f9561 put condition in all hackerone/bug bounty related features 2024-09-05 20:52:56 +05:30
Yogesh Ojha 26fe826a87 Add conditions in nav bar 2024-09-05 20:46:17 +05:30
Yogesh Ojha 5c249021ae Add storing bug bounty mode in ui 2024-09-05 20:42:56 +05:30
Yogesh Ojha ddcd96629f Add user preference model 2024-09-05 20:42:34 +05:30
Yogesh Ojha 205f286058 update onboarding ui 2024-09-05 20:42:24 +05:30
Yogesh OjhaandGitHub 9b8fe2f23b Merge pull request #1417 from yogeshojha/1416-feat-multiple-organization-delete
feat: Add ability to delete multiple organizations
2024-09-05 20:05:52 +05:30
Yogesh Ojha cb7cd2268b Add option to delete multiple organizations 2024-09-05 20:04:06 +05:30
Yogesh OjhaandGitHub 00f3b5795a Merge pull request #1410 from null-ref-0000/feature/h1BookmarkSync
Introducing Bounty Hub, a central hub to import and manage your hackerone programs to reNgine
2024-09-05 19:53:13 +05:30
Yogesh Ojha 79f09446a3 fix errors on invalid h1 key 2024-09-05 07:15:05 +05:30
Yogesh Ojha 2afc16df45 fix hackerone api key not set in vault 2024-09-05 07:09:39 +05:30
Yogesh Ojha 459ef1ab5a fix errors when api keys are not set 2024-09-05 07:07:53 +05:30
Yogesh Ojha e237b0028b fix sync process and apt notification message 2024-09-05 06:35:43 +05:30
Yogesh Ojha 8231a7dec4 Added sync program endpoint 2024-09-05 06:17:59 +05:30
Yogesh Ojha f115029b70 remove debug code 2024-09-04 21:17:10 +05:30
Yogesh Ojha 81a7d3c9d9 fix organization import 2024-09-04 21:00:42 +05:30
Yogesh Ojha 76a3660412 bulk save/import targets 2024-09-04 20:54:31 +05:30
Yogesh Ojha 9e2c760ab5 Added celery worker for shared api tasks, added import hackerone_program_tasks, on ui make import button functionable 2024-09-04 10:59:03 +05:30
Yogesh Ojha 4f7d0b1680 implement click import functionality 2024-09-04 09:43:46 +05:30
Yogesh Ojha d8a3e14336 make animation effect faster for search 2024-09-04 09:21:22 +05:30
Yogesh Ojha 0c83daebf5 fix accordion asset cards 2024-09-04 09:05:08 +05:30
Yogesh Ojha e202f05115 add program detail modal 2024-09-03 22:00:31 +05:30
Yogesh Ojha d4023487f7 add program detail and asset filtering 2024-09-03 21:13:01 +05:30
Yogesh Ojha 482ff95666 fix nav bar 2024-09-03 20:53:07 +05:30
Yogesh Ojha 9a87abe1cc Add bookmark filtering 2024-09-03 20:52:17 +05:30
Yogesh Ojha 792a12fe87 show stagger anims while cards are populated 2024-09-03 20:37:10 +05:30
Yogesh Ojha 08e010cbcf debounce search, optimize query 2024-09-03 20:29:25 +05:30
Yogesh Ojha bfcdc10083 Add sorting functionality to HackerOne programs 2024-09-03 20:20:40 +05:30
Yogesh Ojha 67fa86764d add new button in latest vdp from 3 months old 2024-09-03 19:53:57 +05:30
Yogesh OjhaandGitHub 5ea267394c Merge pull request #1412 from shelbyc/master
Version 2.1.3 contains a patch for CVE-2024-43381
2024-09-03 12:15:25 +05:30
Yogesh Ojha 2204ffe94c hide closed programs by default 2024-09-03 08:08:22 +05:30
Yogesh Ojha 2b09e06d51 add precomputed card data and search feature 2024-09-03 07:55:17 +05:30
Yogesh Ojha 48b72205b6 add loading animation and filtering 2024-09-03 07:45:18 +05:30
Yogesh Ojha 6f292cf3d3 add data attribues for filtering 2024-09-03 07:06:47 +05:30
Yogesh Ojha 3353f7e14a add clear all button 2024-09-03 06:56:51 +05:30
Yogesh Ojha dbcb5ee5cf fix card selection when clicked on button for see details, add ripple effect when cards are selected 2024-09-03 06:33:32 +05:30
Yogesh Ojha 363043fa58 Added clickable cards, added import button on any card selection, fix card designs 2024-09-03 06:22:56 +05:30
Yogesh Ojha 095fed5efc Add dummy program and list program url 2024-09-02 22:02:44 +05:30
Yogesh Ojha 7dbcf19864 add bountyhub 2024-09-02 21:09:12 +05:30
Yogesh Ojha 51e307a805 remove debug code 2024-09-02 20:24:39 +05:30
Yogesh Ojha 2ea5b7e44a add api endpoints to fetch hackerone programs, this include mainly 3 endpoints for getting bookmarked programs, programs with bounty, and all programs 2024-09-02 20:22:33 +05:30
Yogesh Ojha 789efb5355 enable caching for 30 mins 2024-09-02 20:21:44 +05:30