https://cybertoolchain.io/tools/rekono-kbx New releases and features in rekono-kbx, tracked by The Cyber Toolchain. en Sat, 22 Aug 2026 15:37:15 GMT https://github.com/pablosnt/rekono/releases/tag/2.0.0-1 https://github.com/pablosnt/rekono/releases/tag/2.0.0-1 Sat, 22 Aug 2026 15:37:15 GMT Rekono 2.0 adds finding triage, multi-format reports, VirusTotal/EPSS/CVE enrichment, alerting, and a rebuilt Nuxt UI. • Replaces the `/api/system/` endpoint with `/api/settings/` and one dedicated endpoint per integration for granular control. • Removes `scheduled_in` from scans; `scheduled_at` is the only scheduling field going forward. • Removes the `/newauth`, `/newtechnology`, and `/newvulnerability` Telegram bot commands; these values are now requested inline when a scan is created. • Adds finding triage workflow allowing practitioners to mark each finding as true positive, false positive, or won't fix with a supporting comment. • Adds automatic and manual 'fixed' status for findings: Rekono marks a finding fixed when subsequent executions stop reporting it. • Adds report generation in PDF, JSON, or XML filtered by the user's criteria, with support for customising the HTML template used to produce PDF reports. • Adds an alerting system that notifies each alert's subscribers when a discovered finding matches the alert's criteria. • Adds pentesting notes linkable to any Rekono entity, with a rich-text editor supporting code blocks, tables, task lists, and images. • Adds integration with VirusTotal to retrieve reputation, malicious-analysis results, and WHOIS data for discovered hosts. • Adds integration with HackTricks to surface related wiki resources alongside identified assets. • Adds integration with CVE Crowd to flag which detected CVEs are currently trending on social media. • Adds support for NVD NIST API keys to raise rate limits and accelerate CVE enrichment. • Adds a monitor background job that keeps CVE-linked vulnerabilities up to date and purges stale executions. • Adds domain and geolocation resolution for every discovered host. • Adds per-instance, per-user, and per-target customisation of HTTP headers sent by tools during executions. • Adds proxy configuration for executions, individually configurable for HTTP, HTTPS, FTP, and all protocols. • Adds a path field on target ports to limit execution scope. • Adds download of the original reports generated by each tool. • Adds visualisation of the exact commands executed by each execution. • Adds per-finding detail pages showing finding metadata, exposure window, and related findings. • Adds expanded metrics pages with additional KPIs and statistics. • Adds automatic creation of findings from user-provided data (targets, target ports, input technologies) to maintain consistent finding relationships. • Adds new default wordlists covering CMS, APIs, GraphQL, and specific services. • Publishes official Docker images on Docker Hub for both `linux/amd64` and `linux/arm64`. • Moves SMTP configuration into the database, removing it from the configuration file and from `RKN_EMAIL_*` environment variables. • Renames the `tasks-queue`, `executions-queue`, and `findings-queue` queues to `tasks`, `executions`, and `findings`. • Replaces `Redis` with `Valkey` as the message broker. • Adds light and dark UI themes. • Administrators can now inspect queue status and statistics. • Administrators can enable and disable individual integrations. • Adds redirect-following when resolving URLs so tools execute against the final destination. • Removes Rekono Desktop (Electron apps and Debian package); Rekono is now deployed via Docker or from source only. • Removes support for deploying Rekono under a custom web path via `rootpath`. Breaking changes: • The `/api/system/` endpoint is replaced by `/api/settings/` and per-integration endpoints — any client calling `/api/system/` will break. • The `address` field on host objects is renamed to `ip` — any code or integration referencing `address` will break. • The `scheduled_in` field is removed from scans; use `scheduled_at` instead. • Finding fields `first_seen`, `last_seen`, `detected_by`, and `is_active` are removed from the API. • The `enable` and `disable` operations on findings are removed. • The Telegram bot commands `/newauth`, `/newtechnology`, and `/newvulnerability` are removed. • SMTP configuration is removed from the configuration file and from `RKN_EMAIL_*` environment variables; it must now be set via the database/UI. • The queues `tasks-queue`, `executions-queue`, and `findings-queue` are renamed to `tasks`, `executions`, and `findings` — any external tooling targeting the old queue names will break. • Redis is replaced by Valkey — existing Redis-only deployments must migrate to Valkey. • Required Python version is raised to 3.11. • Required Dirsearch version is raised to 0.5.0. • TLS certificates are now stored in a Docker volume instead of the `docker/nginx/tls` directory. • Rekono Desktop (Electron apps and Debian package) is removed; the only supported deployment methods are Docker and from source. • The `rootpath` sub-path deployment option is removed. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/rekono-kbx https://github.com/pablosnt/rekono/releases/tag/1.6.0 https://github.com/pablosnt/rekono/releases/tag/1.6.0 Sun, 07 May 2023 11:56:17 GMT Rekono 1.6.0 adds a desktop DEB package install and links the bot in user profiles • Adds a standalone desktop app distributable as a DEB package for direct installation. • Links to Rekono Bot on the user profile page when configured. Breaking changes: • The `X-XSS-Protection` header is removed, which may affect clients relying on it. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/rekono-kbx https://github.com/pablosnt/rekono/releases/tag/1.5.0 https://github.com/pablosnt/rekono/releases/tag/1.5.0 Wed, 08 Mar 2023 07:31:54 GMT Rekono 1.5.0 adds desktop apps, web path prefix and TLS customization • `rekono-desktop` client binaries for Linux, MacOS and Windows • Web application prefix support via the `WEBAPP_URL_PREFIX` configuration key • TLS certificate/key mounting in Docker via `REKONO_TLS_CERT_PATH` and `REKONO_TLS_KEY_PATH` Breaking changes: • The wordlists endpoint changes from `/api/resources/wordlists/` to `/api/wordlists/` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/rekono-kbx https://github.com/pablosnt/rekono/releases/tag/1.4.0 https://github.com/pablosnt/rekono/releases/tag/1.4.0 Wed, 11 Jan 2023 17:41:39 GMT v1.4.0 adds authenticated scans, Nuclei/Spring4Shell/Gobuster tool support, and a target management popup. • Adds `support for authenticated scans using different authentication types` to target configuration • Adds `support for Nuclei tool` execution • Adds `support for Spring4Shell Scan tool` execution • Adds `support for Gobuster tool` execution • Adds `new popup for the management of target details` in the web interface • Changes the `stage` parameter from the `Tool` entity to the `Configuration` entity Breaking changes: • The `TargetEndpoint` entity has been removed, which may break custom integrations relying on it. • The `stage` parameter is no longer part of the `Tool` entity; it must now be configured within the `Configuration` entity. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/rekono-kbx https://github.com/pablosnt/rekono/releases/tag/1.3.0 https://github.com/pablosnt/rekono/releases/tag/1.3.0 Sat, 19 Nov 2022 21:54:57 GMT Rekono KBX 1.3.0 adds a popup for target port details and improves API findings UX • Adds a popup UI to manage target ports details Full history on Cyber Toolchain: https://cybertoolchain.io/tools/rekono-kbx https://github.com/pablosnt/rekono/blob/main/CHANGELOG.md https://github.com/pablosnt/rekono/blob/main/CHANGELOG.md Tue, 01 Nov 2022 00:00:00 GMT Adds Settings page for Defect-Dojo, Telegram, and security properties • Adds a `Settings` page to configure Defect-Dojo, Telegram, and security properties Full history on Cyber Toolchain: https://cybertoolchain.io/tools/rekono-kbx https://github.com/pablosnt/rekono/releases/tag/1.1.0 https://github.com/pablosnt/rekono/releases/tag/1.1.0 Sun, 16 Oct 2022 18:15:33 GMT rekono-kbx v1.1.0 enables creating and executing tasks against multiple targets simultaneously • Adds the ability to create multiple targets at the same time via a single operation. • Adds the ability to execute tasks against multiple targets at the same time. • Adds execution duration display on the task page. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/rekono-kbx https://github.com/pablosnt/rekono/blob/main/CHANGELOG.md https://github.com/pablosnt/rekono/blob/main/CHANGELOG.md Tue, 20 Sep 2022 00:00:00 GMT Rekono KBX 1.0.1 adds retry logic for external APIs and supports parentheses in text fields • Adds automatic retry for failed requests to the Defect-Dojo API • Adds automatic retry for failed requests to the NVD NIST API to avoid rate limit blocks • Enables parentheses in text values such as names and descriptions Full history on Cyber Toolchain: https://cybertoolchain.io/tools/rekono-kbx https://github.com/pablosnt/rekono/releases/tag/1.0.0 https://github.com/pablosnt/rekono/releases/tag/1.0.0 Fri, 19 Aug 2022 19:05:08 GMT First release of Rekono KBX with web UI, DefectDojo integration, and automated pentesting workflows • Initial `web UI` for managing the platform Full history on Cyber Toolchain: https://cybertoolchain.io/tools/rekono-kbx