web-check

No entries match these filters. Clear filters

1. 2.3.0 Oct 2, 2026 · issue 093

   web-check 2.3.0 adds a tracker check, verified social stats, category pages, Render deploy, and signed Docker attestations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.3.0 https://github.com/lissy93/web-check.git
   # already have the repo? check out this version:
   $ git checkout 2.3.0

   • Adds a tracker check to detect tracking technologies present on a target website.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds verified social stats surfacing social-media metrics for a website.
   • Adds category pages and improved job documentation to the UI.
   • Adds Render as a one-click self-hosted deploy option.
   • Attaches provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. and SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. attestations to the published Docker image.
   • Adds a tracker check to detect tracking technologies present on a target website.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds verified social stats surfacing social-media metrics for a website.
   • Adds category pages and improved job documentation to the UI.
   • Adds Render as a one-click self-hosted deploy option.

   1 more in Everything

2. 2.2.0 Jul 28, 2026 · issue 041

   web-check 2.2.0 adds subdomain lookup, a Vulnerabilities panel, an Advisory panel, and configurable check disabling.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.2.0 https://github.com/lissy93/web-check.git
   # already have the repo? check out this version:
   $ git checkout 2.2.0

   • Adds a new Vulnerabilities panel with improved WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. detection for scanned targets.
   • Adds an Advisory panel surfacing security advisories in the results UI.
   • Adds subdomain lookup as a new check capability.
   • Adds configuration support for disabling individual checks.

   4 details in Everything

3. 2.1.0 May 7, 2026 · release notes

   web-check 2.1.0 adds QRATOR and ddos-guard WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. checks, Hudson Rock integration, PORTS_TO_CHECK env var, and Astro.js support

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.1.0 https://github.com/lissy93/web-check.git
   # already have the repo? check out this version:
   $ git checkout 2.1.0

   └──▷ USE IT
   Scan only specific ports like 80, 443, and 8080 by setting the environment variable before running.
   shell copy

   PORTS_TO_CHECK=80,443,8080 web-check <target_url>

   • Adds QRATOR WAF detection as a new check capability
   • Adds ddos-guard WAF detection as a new check capability
   • Integrates Hudson Rock for threat intelligence lookups
   • Adds PORTS_TO_CHECK environment variable to customize scanned ports
   • Astroify support allows the tool to be deployed via Astro.js

   5 details in Everything

4. advisory CVE-2025-32778 Apr 12, 2025 · issue 128
   • CVE-2025-32778: Command Injection via Unvalidated URL in Screenshot API (affects <2.0.0)⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠