Release 28 October 2024

We're excited to announce a new release of PentestPortal! This release focused on finishing the upgrade of the PDF renderer, but also some other minor features. Furthermore, we have started with preparations for the migration of Nuxt2 to Nuxt3!

Features

• PP-305: MongoDB upgraded to version 8.0 for enhanced stability and performance.

• PP-291: Subdomains container (microservice) upgraded to the latest version of Node.js.

• PP-270: Technical improvements to the data table component for better functionality.

• PP-253: Initiated migration to Nuxt 3, promising several enhancements over Nuxt 2, including improved performance, streamlined architecture, and modern support. Full migration expected by end of 2024, with further updates in the next release.

Bug Fixes

• #PP-303: Resolved an issue where clients encountered an error when downloading reports as CSV for JIRA integration, though HTML/PDF downloads were unaffected.

• #PP-302: All generated PDFs previously defaulted to an "index.html" title internally; this now correctly displays relevant titles.

• #PP-301: Duplicate headings occasionally appeared in CyberScanner reports. This has been fixed.

• #PP-300: Quality checks for informational findings without recommendations are now validated accurately, ensuring consistent quality indicators.

• #PP-275/276/277/278/279/280/281: Enhanced PDF report download experience in alignment with recent migration to Chrome Headless.

• #PP-283: Fixed numbering in the reproduction steps.

• #PP-284: Adjusted padding in the ASVS (Application Security Verification Standard) table for improved display.

• #PP-286: Additional checks have been implemented to prevent duplicate port entries.

• #PP-287/288: Improved file upload functionality, including increased limits and expanded file extension support.

• #PP-289: Corrected display of links in the DigiD management summary.

• #PP-290: Resolved issues with fonts in the table of contents of PDF reports.

• #PP-293: Fixed encoding issues with special characters in the report footers related to the migration to Chrome Headless.

• #PP-294: Inline code formatting now correctly renders within the PDF for portal risk elements.

• #PP-295: Fixed compatibility issues with custom fonts, including "PP Neue Machina."

• #PP-296: Addressed GitLab release step failures during artifact uploads to Sentry.

• #PP-297: Language inconsistencies in probability rationale placeholders have been corrected.

• #PP-298: Resolved 502 errors encountered during Nessus imports, previously caused by caching issues.

• #PP-299: Increased the right margin on PDF reports for improved readability.

• #PP-308: Fixed formatting mismatches in links within the DigiD table.

• #PP-307: Targets and reproduction steps are now correctly validated within quality checks, removing prior false failures.

• #PP-306: Resolved display issues with special characters when copying findings to ongoing assessments.

• #PP-264: Improved the process for adding new subdomains to PentestPortal instances.

We believe that PentestPortal will greatly enhance the experience of individual penetration testers, penetration testing firms and enterprises conducting their own pentests and that PentestPortal contributes to more efficient and effective penetration testing. Your feedback is invaluable in helping us improve and tailor the software to meet your needs.

Thank you for choosing our software, and we look forward to hearing your thoughts on this exciting new release!