Skip to content

Releases: OpenBAS-Platform/openbas

Version 1.7.0

02 Oct 09:20
01bd4a9
Compare
Choose a tag to compare

Hello dear community! The OpenBAS 1.7.0 is out ! Hope you will enjoy it! 🚀

In this release, we’ve focused on addressing key community pains and squashing bugs to enhance your overall experience.

Improve the readability in our platform logs for more efficient debugging

For better readability, efficiency in troubleshooting and allowing compatibility with an observability platform such as Grafana (filtering, graphs), we changed our logs from Java to JSON.🔍

Command Details in execution traces

Need to see your command information to follow what will be executed? It’s now possible to see what command lines have been executed in your inject details or atomic testing page. 📖

Self-signed certificate

Great news! Following a request from our community, our HTTP client now supports self-signed certificates, making it easier to authorize and connect securely in custom environments. 🚘

Customizable expiration time settings

Introducing customizable expiration settings! Now, you can manage the expiration time of your expectations in their setting and at platform level through your config file. Take full control and fine-tune your workflow like never before! 💥

Clearer insights for expectation score and validation

Say hello to clearer insights! We’ve refined our UI to clarify expectation scores settings and validation screens giving you instant clarity at a glance! 🧹

And we also solved a lot of bugs and made some UI improvements.

Enhancements:

  • #1418 Better readability for platform logs: from java default stack traces to JSON
  • #1218 Authorized platform self-signed ssl certificate
  • #1171 For expectations, add the ability to customize the expiration time used by the expiration manager
  • #1232 Command Details in execution traces
  • #1198 Improve UI of score settings/validation

Bug Fixes:

  • #1550 Error message of Caldera executor not responding when there is no Caldera config
  • #1516 Delete a team from simulation works but generates an error in the interface
  • #1508 open agent windows 10 invalid peer certificate unknown issuer
  • #1503 in animation page, selecting a tag doesn't impact the graphs
  • #1496 obas a gent on win11 arm
  • #1482 Notify success & error from network requests are not translated
  • #1476 When adding a team with multiple players, it can lead to duplicate inserted in database which generate an error
  • #1471 bulk deletion of inject only delete the first one of the list
  • #1456 Sorting on "executor" in "Endpoints" section triggers "Internal error"
  • #1452 UI inconsistency: space separators in simulation list + height of the lines
  • #1435 Mitre Attack Coverage is partially hidden on firefox
  • #1371 Scenario result should not be interactive and show clearly that they have no data when no simulation has been played
  • #1028 In some cases, IMAP store of sent message can fail
  • #1425 Inject expectation is missing on atomic testing
  • #1431 Consistent wording for UI in asset groups: Dynamic asset filter or rule

Pull Requests:

Read more

Version 1.6.1

18 Sep 15:51
14819c9
Compare
Choose a tag to compare

Bug Fixes:

  • #1466 Creating challenges or media pressure inject does not work
  • #1465 Broken variable in media pressure inject
  • #1464 Add teams in a scenario for multiple injects not working

Full Changelog: 1.6.0...1.6.1

Version 1.6.0

16 Sep 13:00
744cc39
Compare
Choose a tag to compare

Hello dear community! The OpenBAS 1.6.0 is out ! Hope you will enjoy it! 🚀

Interactive Timeline Display for injects
Our brand-new timeline is getting fancier ! On top of being able to create and modify your injects more intuitively, you can now chain your injects, opening the way to our future exciting feature: conditional inject launch ! 🛤️

Filters implementation
Find More, Faster: unleash the Power of Filters for a Seamless Experience! You can now leverage filtering on the most important lists of OpenBAS to better understand various kinds of situation for your scenarios, simulations, atomic testing etc. 👀

Test emails and SMS related injects
Not sure if your email or SMS was sent ? You can replay a test for a single inject or do it in bulk. 📬

Launch a scenario now as we do in simulation
No time to waste ? Feeling like launching your scenario right away without scheduling ? It’s now possible with the start now button on the scenario level. ⛷️

Caldera is removed from the default OpenBAS stack
Caldera was complicated to use for the community. We’ve heard you! OpenBAS has reached a good level of maturity by integrating atomic red team so we decided to remove it from our default stack. 👏

Enhancements:

  • #1421 Remove Caldera from default stack
  • #1368 Ability to launch a scenario - same as we do for simulations - with a start now
  • #1336 Be able to replay test for sms and email injects
  • #1294 Implement filters on atomic testing, inject and payload lists
  • #1194 Chaining injects logically
  • #124 Implement filters on injector contract, scenario & simulation lists

Bug Fixes:

  • #1400 In scenario tab, anormal spaces between overlay and separators
  • #1397 Lessons learned survey are never received
  • #1361 Avoid deadlocks during Flyway migrations (>9.0.)
  • #1350 When updating an expectation score, the expectation status doesn't change
  • #859 Login UI should be iso with OCTI
  • #844 404 errors are not correctly handles, leading to spinning forever

Pull Requests:

Full Changelog: 1.5.1...1.6.0

Version 1.5.1

10 Sep 08:53
19aa9f8
Compare
Choose a tag to compare

Bug Fixes:

  • #1398 Teams creation does not work
  • #1392 Moving an inject deletes it's content
  • #1388 Launching payload with Atomic Testing on Linux is not working

Full Changelog: 1.5.0...1.5.1

Version 1.5.0

02 Sep 10:15
3d6774a
Compare
Choose a tag to compare

Hello dear community! The OpenBAS 1.5.0 is out ! Hope you will enjoy it! 🚀

Interactive Timeline Display

We have a brand-new timeline that will let you create and modify your injects more intuitively. More importantly, this is the first brick of a new feature that will let you chain your injects together. Stay tuned for the next step 💖

Be able to test emails and sms related injects

Don’t you feel so much more secured when you can double-check your work ? You can now test your emails and SMS to your own account before sending it to everyone. 💌

Bring lessons learned settings at scenario level

We all hate repetitive tasks, let’s agree to less setup. You can now set up your lessons learned page setting at the scenario level, and it will be applied to all simulations generated. 🙆‍♂️

XLS mapper improvement

We made our XLS mapper even more awesome by adding minor features such as being able to target all audiences or duplicate your mappers that will help you on your every day OBAS journey ✌️😎

Enhancements:

  • #1195 Interactive Timeline Display
  • #1109 Bring lessons learned setting at scenario level
  • #1250 Duplicate an XLS mapper
  • #1247 Ability to import XLS and use XLS mapper into Simulation
  • #1248 In XLS mapper, having a way to map "All teams" as targets of injects
  • #1107 Be able to test emails and sms related injects in Bul
  • #1340 switch steps on agent instalation documentation
  • #1340 Be able to test emails and sms related injects

Bug Fixes:

  • #1348 Display problem not updated on Groups
  • #1318 Lessons Learned page height is not properly set
  • #1308 Loosing focus on the selected endpoint in atomic testing result when auto reload is happening
  • #1303 Contextual group still linked after scenario duplication
  • #1259 Atomic testing list: columns headers not aligned
  • #1151 OpenBAS agent failed to install on windows machine

Pull Requests:

New Contributors:

Full Changelog: 1.4.1...1.5.0

Version 1.4.1

30 Aug 07:43
ec26eb1
Compare
Choose a tag to compare

Bug Fixes:

  • #1360 Update simulation launch time not working

Full Changelog: 1.4.0...1.4.1

Version 1.4.0

12 Aug 12:23
9e0de0a
Compare
Choose a tag to compare

Hello dear community! We are happy to announce a new version for OpenBAS! The OpenBAS 1.4.0! Hope you will enjoy it! 🚀

Be able to choose if expectation must be individually validated

For more granularity to manual expectations: you can now rate the performance of your players, the individual performances will impact automatically your team score based on the following expectations: a team is successful if one member of a team is successful OR if all members of a team are successful. 🫸🫷

Ability to import / export XLS mappers

Repeating the same configurations are never fun. To save you precious time on repetitive tasks, you can now import/export your XLS mappers ✌️

At XLS import, allow user to configure a launch time for the Scenario/Simulation

Scheduling means that you need to know when to start, in your XLS file you can now configure a launch time ! 📅

Emails UX improvement

We noticed some small UX issues that could lead to error in your emails injects. The overall experience have been improved to help you make sure that Filigran’s postal service always the right address to deliver to. 💌

Enhancements:

  • #1260 Ability to import / export XLS mappers
  • #1246 At XLS import, allow user to configure a launch time for the Scenario/Simulation
  • #1220 Add a comprehensive error message when email addresses are not well formated
  • #1219 triming email addresses of their starting and ending spaces
  • #1205 Delete an item from a list (inject, atomic testing, scenario, simlation)
  • #184 Be able to choose if expectation must be individually validated

Bug Fixes:

  • #1313 Cancel button doesn't work for "export a scenario"
  • #1310 Icons in circles in result are not aligned anymore
  • #1307 Expectations are not properly set when creating inject based on a contract that contain some
  • #1304 fields randomly deleted
  • #1234 Lessons learned can't be submit with 0
  • #1231 Translations En->Fr
  • #1181 In atomic testing, update the manual set expectation, the security platform is not filled after full reload (and crashes if removed)
  • #1138 Drawer effect is not correct when opening an inject from the list

Pull Requests:

  • Delete an item from a list (inject, atomic testing, scenario, simlation) by @RomuDeuxfois in #1254
  • Update typescript-eslint monorepo to v7.18.0 by @renovate in #1300
  • Update dependency react-hook-form to v7.52.1 by @renovate in #1297
  • Update dependency globals to v15.9.0 by @renovate in #1296
  • Update dependency react-router-dom to v6.26.0 by @renovate in #1298
  • Update springdoc.version to v2.6.0 by @renovate in #1299
  • In atomic testing, update the manual set expectation, the security platform is not filled after full reload (and crashes if removed) by @RomuDeuxfois in #1270
  • [backend/frontend] Fix on player not properly displayed by @Dimfacion in #1312
  • Drawer effect is not correct when opening an inject from the list by @johanah29 in #1301
  • [frontend] Fix on email adresses by @Dimfacion in #1314
  • [backend/frontend] Allow user to configure a launch time during import if needed by @Dimfacion in #1249
  • [backend] Fix expectations are not properly set (#1307) by @savacano28 in #1315
  • [frontend] add translations by @savacano28 in #1317
  • [frontend/backend]Adding the ability to import/export mappers by @Dimfacion in #1263
  • [backend/frontend] Fix score in learned lessons by @savacano28 in #1316
  • [frontend] Add validation mode to manual expectations by @savacano28 in #1245
  • [frontend] Add info message of starting date mandatory on scenario by @savacano28 in #1319

Full Changelog: 1.3.1...1.4.0

Version 1.3.1

02 Aug 00:10
ba43f4b
Compare
Choose a tag to compare

Enhancements:

  • #1106 Be able to test emails and sms related injects

Bug Fixes:

  • #1286 Scenario with filled email create simulation without email content
  • #1269 If IMAP is enabled and IMAP is down or misconfigured, the platform should NOT fail to start
  • #1261 Trigger time with some letters in it might lead to the date being not correctly set
  • #1209 Wrong title and breadcrumb for inject details in a simultaion
  • #1143 Payload form attack patterns / tags fields not correctly displayed
  • #1141 After deleting a payload, atomic testing is throwing an error when accessing

Pull Requests:

New Contributors:

Full Changelog: 1.3.0...1.3.1

Version 1.3.0

25 Jul 10:20
454c63e
Compare
Choose a tag to compare

Hello dear community! We are happy to announce a new version for OpenBAS! The OpenBAS 1.3.0! Hope you will enjoy it! 🚀

Import a timeline of Injects from an XLS file

With OpenBAS 1.3.0, you can now save a tremendous amount of your time when building your Scenario in the platform. Let’s say you are preparing a tabletop exercice in the context of a big event, something related to cyber incident in the context of a massive sport event in a beautiful city for example… 😉 The chronology of events your exercice planning team has prepared is massive: hundred of events to simulate! Everything has been prepared and is stored in an Excel. With OpenBAS, you can create a specific mapper that will automatically ingest the content of the file and populate immediately the Scenario for you! Injects, their time of execution, the expectations! 🔥

Duplicate things!

This release focuses on saving time for users. With this new version, you can duplicate Scenarios, Simulations, Atomic testing, Injects and Payloads to help you create new things slightly different from previous ones in a matter of seconds! 🥳

Custom Lessons Learned template

In a Simulation, you can apply a template of survey to send to players and collect their feedback. Until now, only one template was available. It is now possible to create your own survey! You simply have to go to the left menu of the platform in a new section called Lessons Learned, under Components. 🛠️

Delete injects in bulk

To ease your Scenario creation (after duplicating a previous one for example), we just add a way to delete multiple injects you do not need anymore. You only need to select them and use the bottom toolbar to delete them! How convenient! ❤️

And we also solved a lot of bugs and made some UI improvements!

Here the complete list of enhancements and bug fixes

Enhancements:

  • #1157 Delete injects in bulk in scenario and simulation
  • #1081 Bring back custom lesson learned templates
  • #290 Import a xls chronogram as a scenario
  • #1161 Enhance the files field in Payloads and Security Platforms
  • #1057 Duplicate an Inject, Scenario, Simulation & Atomic testing

Bug Fixes:

  • #1233 Issue with Duplication of Payload
  • #1208 Wrong format when exporting injects in XLS
  • #1203 timelines is not clickable anymore
  • #1185 List of inject is pretty slow on demo environment
  • #1140 Icons are not vertically aligned when creating an inject
  • #1135 The score field should be deactivated after a validation
  • #1131 Impossible to load a document from the Documents list
  • #1034 If Caldera executor is enabled and Caldera is down, the platform should fail to start

Pull Requests:

Full Changelog: 1.2.2...1.3.0

Version 1.2.2

19 Jul 10:22
e44c527
Compare
Choose a tag to compare

Bug Fixes:

  • #1226 OpenBAS challenge issue

Full Changelog: 1.2.1...1.2.2