rekono-kbx

No entries match these filters. Clear filters

1. 2.0.0-1 Aug 22, 2026 · issue 054

   Rekono 2.0 adds finding triage, multi-format reports, VirusTotal/EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching./CVE enrichment, alerting, and a rebuilt Nuxt UI.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.0.0-1 https://github.com/pablosnt/rekono.git
   # already have the repo? check out this version:
   $ git checkout 2.0.0-1

   └──▷ TRY IT
   Query the new per-integration settings endpoint to check which integrations are enabled before configuring enrichment.
   copy

   $ curl -s -H 'Authorization: Bearer <token>' https://<rekono-host>/api/settings/

   • Replaces the /api/system/ endpoint with /api/settings/ and one dedicated endpoint per integration for granular control.
   • Removes scheduled_in from scans; scheduled_at is the only scheduling field going forward.
   • Removes the /newauth, /newtechnology, and /newvulnerability Telegram bot commands; these values are now requested inline when a scan is created.
   • Adds finding triage workflow allowing practitioners to mark each finding as true positive, false positive, or won't fix with a supporting comment.
   • Adds automatic and manual fixed status for findings: Rekono marks a finding fixed when subsequent executions stop reporting it.

   +28 more show less

   • Adds report generation in PDF, JSON, or XML filtered by the user's criteria, with support for customising the HTML template used to produce PDF reports.
   • Adds an alerting system that notifies each alert's subscribers when a discovered finding matches the alert's criteria.
   • Adds pentesting notes linkable to any Rekono entity, with a rich-text editor supporting code blocks, tables, task lists, and images.
   • Adds integration with VirusTotal to retrieve reputation, malicious-analysis results, and WHOIS data for discovered hosts.
   • Adds integration with HackTricks to surface related wiki resources alongside identified assets.
   • Adds integration with CVE Crowd to flag which detected CVEs are currently trending on social media.
   • Adds support for NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. NIST API keys to raise rate limits and accelerate CVE enrichment.
   • Adds a monitor background job that keeps CVE-linked vulnerabilities up to date and purges stale executions.
   • Adds domain and geolocation resolution for every discovered host.
   • Adds per-instance, per-user, and per-target customisation of HTTP headers sent by tools during executions.
   • Adds proxy configuration for executions, individually configurable for HTTP, HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate., FTP, and all protocols.
   • Adds a path field on target ports to limit execution scope.
   • Adds download of the original reports generated by each tool.
   • Adds visualisation of the exact commands executed by each execution.
   • Adds per-finding detail pages showing finding metadata, exposure window, and related findings.
   • Adds expanded metrics pages with additional KPIs and statistics.
   • Adds automatic creation of findings from user-provided data (targets, target ports, input technologies) to maintain consistent finding relationships.
   • Adds new default wordlists covering CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly., APIs, GraphQL, and specific services.
   • Publishes official Docker images on Docker Hub for both linux/amd64 and linux/arm64.
   • Moves SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. configuration into the database, removing it from the configuration file and from RKN_EMAIL_* environment variables.
   • Renames the tasks-queue, executions-queue, and findings-queue queues to tasks, executions, and findings.
   • Replaces Redis with Valkey as the message broker.
   • Adds light and dark UI themes.
   • Administrators can now inspect queue status and statistics.
   • Administrators can enable and disable individual integrations.
   • Adds redirect-following when resolving URLs so tools execute against the final destination.
   • Removes Rekono Desktop (Electron apps and Debian package); Rekono is now deployed via Docker or from source only.
   • Removes support for deploying Rekono under a custom web path via rootpath.

   33 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The /api/system/ endpoint is replaced by /api/settings/ and per-integration endpoints — any client calling /api/system/ will break.
   • !The address field on host objects is renamed to ip — any code or integration referencing address will break.
   • !The scheduled_in field is removed from scans; use scheduled_at instead.
   • !Finding fields first_seen, last_seen, detected_by, and is_active are removed from the API.
   • !The enable and disable operations on findings are removed.
   • !The Telegram bot commands /newauth, /newtechnology, and /newvulnerability are removed.
   • !SMTP configuration is removed from the configuration file and from RKN_EMAIL_* environment variables; it must now be set via the database/UI.
   • !The queues tasks-queue, executions-queue, and findings-queue are renamed to tasks, executions, and findings — any external tooling targeting the old queue names will break.
   • !Redis is replaced by Valkey — existing Redis-only deployments must migrate to Valkey.
   • !Required Python version is raised to 3.11.
   • !Required Dirsearch version is raised to 0.5.0.
   • !TLS certificates are now stored in a Docker volume instead of the docker/nginx/tls directory.
   • !Rekono Desktop (Electron apps and Debian package) is removed; the only supported deployment methods are Docker and from source.
   • !The rootpath sub-path deployment option is removed.
2. 2.0.0 Aug 22, 2026 · release notes

   Rekono 2.0 adds findings triage, report generation (PDF/JSON/XML), VirusTotal/HackTricks/CVE Crowd integrations, alerting, and a rebuilt UI.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.0.0 https://github.com/pablosnt/rekono.git
   # already have the repo? check out this version:
   $ git checkout 2.0.0

   └──▷ TRY IT
   Fetch the list of available integration settings after the /api/system/ endpoint has been replaced.
   copy

   $ curl -s -H 'Authorization: Bearer <token>' https://<rekono-host>/api/settings/

   • Replaces the /api/system/ endpoint with /api/settings/ and one dedicated endpoint per integration, enabling fine-grained integration control via API.
   • Adds findings triage workflow — mark each finding as true positive, false positive, or won't fix, with a free-text comment explaining the decision.
   • Generates reports in PDF, JSON, or XML filtered by user-defined criteria, with support for customizable HTML templates for PDF output.
   • Adds an alerting system that notifies each alert's subscribers when a finding matches the alert's criteria.
   • Integrates with VirusTotal to surface reputation, malicious analysis, and WHOIS information for discovered hosts.

   +23 more show less

   • Integrates with HackTricks to link identified assets with related wiki resources.
   • Integrates with CVE Crowd to identify which detected CVEs are trending on social media.
   • Enriches vulnerabilities with CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. score and vector, EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching. score and percentile, CWEsCWEsA community-maintained list of software and hardware weakness types, maintained by MITRE, that gives cyber tools a standard taxonomy for classifying and communicating vulnerability root causes., and CVE remediation guidance.
   • Adds support for NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. NIST API keys to increase rate limits and speed up CVE enrichment.
   • Adds pentesting notes linkable to any Rekono entity, with a rich text editor supporting code blocks, tables, task lists, and images.
   • Adds a monitor background job that keeps CVE-linked vulnerabilities up to date and cleans stale executions.
   • Enables Defect-Dojo imports to reimport scans and close findings no longer detected.
   • Supports per-instance, per-user, and per-target customization of HTTP headers sent by tools.
   • Supports proxy customization for executions, configurable per protocol: HTTP, HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate., FTP, and all protocols.
   • Adds path scoping to target ports to limit execution scope.
   • Allows download of original reports generated by tools.
   • Adds visualization of the exact commands executed by each execution.
   • Detects hacking tools installed on the system and their versions.
   • Adds dedicated finding detail pages showing finding metadata, exposure window, and related findings.
   • Adds expanded metrics pages with additional KPIs and statistics.
   • Allows creation of findings from user-provided data (targets, target ports, input technologies) to keep finding relationships consistent.
   • Adds light and dark UI themes.
   • Publishes official Docker images on Docker Hub for linux/amd64 and linux/arm64.
   • Adds new default wordlists for CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly., APIs, GraphQL, and specific services.
   • Adds administrator queue status and stats dashboard.
   • Allows administrators to enable and disable individual integrations.
   • Rebuilds the frontend from scratch with Nuxt (Vue 3 / Nuxt 4).
   • Moves SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. configuration to the database, removing it from the configuration file and from RKN_EMAIL_* environment variables.

   28 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The address field of hosts is renamed to ip — any API client or integration referencing address will break.
   • !The /api/system/ endpoint is replaced by /api/settings/ and one endpoint per integration — callers of /api/system/ must be updated.
   • !SMTP configuration is removed from the configuration file and from the RKN_EMAIL_* environment variables — existing env-var-based SMTP setup stops working; configuration must be re-entered via the database/UI.
   • !The tasks-queue, executions-queue, and findings-queue queues are renamed to tasks, executions, and findings — any external queue tooling referencing the old names will break.
   • !Rekono Desktop (Electron applications and Debian package) is removed — desktop deployments must migrate to Docker or source.
   • !The rootpath setting for deploying Rekono under a sub-path is removed — deployments relying on it must reconfigure.
   • !The scheduled_in field is removed from scans (replaced by scheduled_at) — API clients reading scheduled_in will break.
   • !Findings fields first_seen, last_seen, detected_by, and is_active are removed — replaced by execution history, triage, and fixed status.
   • !The enable and disable operations on findings are removed — replaced by the triage and fixed status workflows.
   • !The Telegram bot commands /newauth, /newtechnology, and /newvulnerability are removed — these values are now requested inline during scan creation.
   • !PostgreSQL is upgraded from version 14 to 18 — non-Docker deployments must perform a manual data migration.
   • !Required Python version is raised to 3.11 — environments running earlier Python versions are no longer supported.
   • !TLS certificates in Docker deployments are now kept in a volume instead of the docker/nginx/tls directory — existing certificate placements must be migrated.
   • !Redis is replaced by Valkey — any infrastructure or config referencing Redis by name must be updated.
3. 1.6.0 May 7, 2023 · release notes

   Rekono 1.6.0 adds a desktop DEB package install and links the bot in user profiles

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.6.0 https://github.com/pablosnt/rekono.git
   # already have the repo? check out this version:
   $ git checkout 1.6.0

   • Adds a standalone desktop app distributable as a DEB package for direct installation.
   • Links to Rekono Bot on the user profile page when configured.

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The X-XSS-Protection header is removed, which may affect clients relying on it.
4. 1.5.0 Mar 8, 2023 · release notes

   Rekono 1.5.0 adds desktop apps, web path prefix and TLS customization

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.5.0 https://github.com/pablosnt/rekono.git
   # already have the repo? check out this version:
   $ git checkout 1.5.0

   • rekono-desktop client binaries for Linux, MacOS and Windows
   • Web application prefix support via the WEBAPP_URL_PREFIX configuration key
   • TLS certificate/key mounting in Docker via REKONO_TLS_CERT_PATH and REKONO_TLS_KEY_PATH

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The wordlists endpoint changes from /api/resources/wordlists/ to /api/wordlists/
5. 1.4.0 Jan 11, 2023 · release notes

   v1.4.0 adds authenticated scans, Nuclei/Spring4Shell/Gobuster tool support, and a target management popup.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.4.0 https://github.com/pablosnt/rekono.git
   # already have the repo? check out this version:
   $ git checkout 1.4.0

   • Adds support for authenticated scans using different authentication types to target configuration
   • Adds support for Nuclei tool execution
   • Adds support for Spring4Shell Scan tool execution
   • Adds support for Gobuster tool execution
   • Adds new popup for the management of target details in the web interface

   +1 more show less

   • Changes the stage parameter from the Tool entity to the Configuration entity

   6 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The TargetEndpoint entity has been removed, which may break custom integrations relying on it.
   • !The stage parameter is no longer part of the Tool entity; it must now be configured within the Configuration entity.
6. 1.3.0 Nov 19, 2022 · release notes

   Rekono KBX 1.3.0 adds a popup for target port details and improves API findings UX

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.3.0 https://github.com/pablosnt/rekono.git
   # already have the repo? check out this version:
   $ git checkout 1.3.0

   └──▷ HOW TO FIND IT
   View and edit the configuration of specific open ports during a scan without leaving the main view.
   📍In the web interface, click on a target entry to open the management popup for port details.
7. 1.2.0 Nov 1, 2022 · release notes

   Adds Settings page for Defect-Dojo, Telegram, and security properties

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.2.0 https://github.com/pablosnt/rekono.git
   # already have the repo? check out this version:
   $ git checkout 1.2.0

   └──▷ HOW TO FIND IT
   Configure external integrations for Defect-Dojo and Telegram notifications via the UI.
   📍Navigate to the Settings page in the web interface to update Defect-Dojo, Telegram, and security properties.
8. 1.1.0 Oct 16, 2022 · release notes

   rekono-kbx v1.1.0 enables creating and executing tasks against multiple targets simultaneously

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.1.0 https://github.com/pablosnt/rekono.git
   # already have the repo? check out this version:
   $ git checkout 1.1.0

   └──▷ TRY IT
   Create several targets in one go without repeated API calls or UI clicks.
   copy

   $ POST /api/v1/targets with an array of target objects

   Run the same task workflow across a group of targets simultaneously to save time.
   copy

   $ POST /api/v1/tasks with a list of target IDs in the 'targets' field

   View how long each task execution took directly on the interface.
   📍In the console, go to Tasks and look for the duration column in the task list view.
   • Adds the ability to create multiple targets at the same time via a single operation.
   • Adds the ability to execute tasks against multiple targets at the same time.
   • Adds execution duration display on the task page.

   3 details in Everything

9. 1.0.1 Sep 20, 2022 · release notes

   Rekono KBX 1.0.1 adds retry logic for external APIs and supports parentheses in text fields

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.0.1 https://github.com/pablosnt/rekono.git
   # already have the repo? check out this version:
   $ git checkout 1.0.1

   • Adds automatic retry for failed requests to the Defect-Dojo API
   • Adds automatic retry for failed requests to the NVDNVDThe National Vulnerability Database, maintained by NIST, is the U.S. government repository of CVE records enriched with CVSS scores and metadata; cyber tools query it to drive vulnerability prioritization. NIST API to avoid rate limit blocks
   • Enables parentheses in text values such as names and descriptions

   3 details in Everything

10. 1.0.0 Aug 19, 2022 · release notes

    First release of Rekono KBX with web UI, DefectDojo integration, and automated pentesting workflows

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.0.0 https://github.com/pablosnt/rekono.git
    # already have the repo? check out this version:
    $ git checkout 1.0.0

    • Initial web UI for managing the platform

    1 detail in Everything