Releases: rb-x/pwnflow
Penflow v1.1.0 - beta
Highlights since v1.0.3
• Rename: Penflow → Pwnflow to avoid product confusion.
• UI/UX: Floating windows enabled by default; centered edit mode for cleaner editing focus.
• AI Chat: Improved parsing to auto-create nodes from messages; more technical and precise responses.
• Scope Management (WIP): Import Nmap XML, track hosts/services coverage and test status.
• Undo: Quickly revert recent changes to reduce errors.
• Finding Timeline: Visual, chronological view of findings with filters and status (beta)
Details
🧭 Product Rename
• Penflow has been officially renamed to Pwnflow to prevent confusion with similarly named products. No functional changes, but branding and references have been updated.
🎛️ UI/UX Improvements
• Floating Windows by Default: Panels and tools now float, making multi-panel workflows more flexible.
• Centered Edit Mode: Editing is visually centered to reduce context switching and improve focus.
🤖 AI Chat Enhancements
• Smarter Message Parsing: Chat can interpret technical messages and automatically generate relevant nodes.
• More Technical Responses: Improved depth and precision in AI replies to support complex scenarios.
📡 Scope Management (beta)
• Nmap XML Import: Ingest scan results directly from Nmap XML files.
• Coverage Tracking: Track which hosts and services have been tested to identify gaps and progress.
🗂 Finding Timeline
• Chronological View: Time‑ordered stream of findings.
⚙️ AI as a Service (Celery)
• Celery-backed task processing: Offload AI operations to background workers for reliability and scalability.
↩️ Undo
• Undo recent actions (node creation/deletion and linking/unlinking) to recover from mistakes and experiment more freely.
Full Changelog: 1.0.3...1.1.0
Pwnflow v1.0.3
🐞 Bug Fixes
(frontend/backend) Tag names in 404 pages are now properly encoded to support special characters, preventing routing issues.
(frontend) The state is now cleared if node title edits are not confirmed, avoiding problems when navigating to another node.
Special thanks to glitch.999 for reporting these issues.
Full Changelog: 1.0.2...1.0.3
Pwnflow v1.0.2
🛠️ Improvements
- (frontend) Focus mode now makes the node glow and can be combined with status trail mode, improving focus.
- (frontend) Double-click to create a new node.
- (Backend) Registration is now disabled by default (can be enabled via .env).
🐞 Bug Fixes
- (nginx) Fixed nginx to redirect correctly, including the port.
- (frontend) Implemented dynamic path construction on the frontend.
Full Changelog: 1.0.1...1.0.2
Pwnflow v1.0.1
What's New
🛠️ UX Improvements
- Enhanced handling of empty templates: Read-only templates now display improved messaging and feedback.
- Various minor UX enhancements.
🐞 Bug Fixes
- Fixed commands display and copy functionality in template mode.
- Resolved issues with export functionality.
- Fixed context renaming.
Penflow 0.1.0
First public release of Penflow alpha (frontend only)
Features
- 🌐 Browser-Based: 100% of your data is kept in your browser (IDB/Localstorage)
- 🔒 Privacy-First: No server needed, works offline
- 🔐 Encrypted Exports: AES-256-GCM encryption for secure data sharing
- 📈 Progress Tracking: Visualize your progress and share with your team
- 📚 GitHub import: Import your templates from GitHub repository
Pwnflow 1.0.0
Public release of Penflow v1.0 (Full-Stack Edition)
Features
🏗️ Complete Architecture Overhaul
- Full-Stack Application: React frontend + FastAPI backend with Neo4j graph database
- Real-time Collaboration: WebSocket-based live updates across team members
- Scalable Infrastructure: Docker-ready deployment
🤖 AI-Powered Intelligence
- Smart Node Generation: AI suggests and creates contextual attack path nodes
- Intelligent Relationships: Automatic node linking based on security context
- Command Suggestions: Pre-populated commands and techniques for each node
🔐 Enterprise Security
- Token-based Authentication: JWT auth with resource-level access control
- Project Isolation: Multi-tenancy support with data segregation
- Encrypted Exports: AES-256-GCM encryption for secure data sharing
📊 Advanced Visualization
- Status Trails: Visualize attack path progress with color-coded overlays
- Focus Mode: Isolate and analyze specific attack chains
- Multiple Layout Options: TB/BT/LR/RL orientations with auto-layout