{"id":181810,"date":"2026-05-30T14:48:13","date_gmt":"2026-05-30T12:48:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vigolium-v0-1-13-beta"},"modified":"2026-05-30T14:48:13","modified_gmt":"2026-05-30T12:48:14","slug":"vigolium-v0-1-13-beta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vigolium-v0-1-13-beta","title":{"rendered":"Vigolium v0.1.13-beta","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23496\/original.png\" itemprop=\"contentURL\"><\/p>\n<p>      <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/05\/6b5dca385b6e09391b374bd74ce93d2c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>      <\/a><\/p>\n<p><noindex>      <noindex><\/p>\n<p>Avaldatud avatud algversioon <strong><a rel=\"nofollow\" href=\"https:\/\/github.com\/vigolium\/vigolium\/releases\/tag\/v0.1.13-beta\">Vigolium v0.1.13-beta<\/a><\/strong> \u2014 veebirakenduste haavatavuste skanner, mis \u00fchendab klassikalise m\u00e4\u00e4ratletud skaneerimise LLM-p\u00f5hise agentuuriga. Projekt on saadaval GitHubis ja seda levitatakse litsentsi all <strong>GNU AGPLv3<\/strong>; kommertsalane on toodud pilve <strong>Cloud Console<\/strong>, samas kui skanneri alus on deklaratiivne avatud.<\/p>\n<p><\/noindex><\/noindex><\/p>\n<p>Vigolium pakub kahte peamist t\u00f6\u00f6re\u017eiimi: vigolium scan \u2014 tavaline mitmeastmeline skaneerimine, mis sisaldab sisu otsimist, veebibrauseri spidering'ut, aktiivset ja passiivset auditeerimist; ja vigolium agent \u2014 agentuurire\u017eiim, kus LLM valib moodulid, plaanib r\u00fcnnakud, genereerib kasutajate JavaScripti laiendusi ja \u00fchendab d\u00fcnaamilise testimise koodi auditeerimisega.<\/p>\n<p><noindex><\/p>\n<p>Andmete kohaselt <a rel=\"nofollow\" href=\"https:\/\/docs.vigolium.com\/native-scan\/modules-reference\">aktuaalset moodulite k\u00e4siraamatut<\/a>, Vigolium h\u00f5lmab <strong>251 kontrollimoodulit<\/strong>, neist <strong>154 aktiivset<\/strong> ja <strong>97 passiivset<\/strong>. Aktiivsed moodulid saadavad muudetud p\u00e4ringud ning rakendavad fuzzingut, s\u00fcstimist ja k\u00e4itumisanal\u00fc\u00fcsi, passiivsed \u2014 anal\u00fc\u00fcsivad juba olemasolevaid p\u00e4ringu\/vastuse paare ilma t\u00e4iendava liikluse genereerimiseta.<\/p>\n<p><\/noindex><\/p>\n<h3><a rel=\"nofollow\" href=\"https:\/\/github.com\/vigolium\/vigolium#key-features\">V\u00f5imalused<\/a><\/h3>\n<ul>\n<li>\n<p><strong>Native Scan \u2014 tavaline m\u00e4\u00e4ratletud skaneerimine.<\/strong><br \/>\nVigolium scan re\u017eiim on m\u00f5eldud kiirete jauuesti produtseeritavate kontrollide jaoks. See l\u00e4bib mitu etappi: v\u00e4lised andmete kogumine, sisu avastamine, browser\/SP\u0410-spidering ja auditeerimine. See re\u017eiim on mugav CI, regulaarsete kontrollide ja olukordade jaoks, kus on oluline saada ettearvatav tulemus ilma LLM-i kaasamiseta.<\/p>\n<\/li>\n<li>\n<p><strong>Agentic Scan \u2014 agentuuri audit LLM-iga.<\/strong><br \/>\nVigolium agent re\u017eiim kasutab sisseehitatud runtime <strong>olium<\/strong>. Agent suudab ise otsida l\u00f5pp-punkte, valida moodulid, k\u00e4ivitada kontrollid, anal\u00fc\u00fcsida koodi, teha SAST-i ja uuesti kontrollida avastusi. Toetatakse Autopiloti, Swarm ja Query re\u017eiime: alates sihtkoha autonoomsest skaneerimisest kuni \u00fcheainsa p\u00e4ringuni koodi \u00fclevaatamiseks, l\u00f5pp-punktide otsimiseks ja saladuste avastamiseks.<\/p>\n<\/li>\n<li>\n<p><strong>Kontrollid XSS, SQLi, NoSQLi, SSTI, LFI, RCE, XXE ja SSRF.<\/strong><br \/>\nMoodulite k\u00e4siraamat sisaldab kontrollide loetelu peegel-XSS-i, SQL-i s\u00fcstide veaparanduste ja boolean-based blind SQLi, NoSQL-i s\u00fcstide, serveri poole malli s\u00fcstimise, kohaliku faili kaasamise, k\u00e4su s\u00fcstimise, XXE, SSRF ja out-of-band-haavatavuste kohta. Avastuste jaoks kasutatakse t\u00f5siduse skaalat alates kriitilisest kuni infoni ja usaldusv\u00e4\u00e4rsuse skaalat kindel, kindel, ettevaatlik.<\/p>\n<\/li>\n<li>\n<p><strong>OAST-kontrolle 'pimedate' haavatavuste jaoks.<\/strong><br \/>\nVigolium suudab tuvastada blind XSS, blind SSRF, blind XXE ja blind RCE callback-mehhanismide kaudu, sealhulgas interactsh'i abil. See on vajalik olukordades, kus haavatavus ei avaldu otse HTTP-vastuses, vaid server teeb v\u00e4lise DNS\/HTTP-p\u00e4ringu v\u00f5i t\u00e4idab edasil\u00fckatud toimingu.<\/p>\n<\/li>\n<li>\n<p><strong>Value-aware mutation \u2014 parameetrite mutatsioon v\u00e4\u00e4rtuse t\u00e4hendust arvestades.<\/strong><br \/>\nSkanner klassifitseerib parameetreid semantilise t\u00fc\u00fcbi j\u00e4rgi: number, UUID, JWT, email ja teised variandid, seej\u00e4rel valib konteksti sobivad mutatsioonid. See peaks v\u00e4hendama m\u00fcra v\u00f5rreldes sama payload'ide j\u00f5hkrate asendustega k\u00f5igis v\u00e4ljad j\u00e4rjest.<\/p>\n<\/li>\n<li>\n<p><strong>Toetab erinevaid sisendi formaate.<\/strong><br \/>\nSisendina saab edastada URL-e, OpenAPI\/Swagger spetsifikatsioone, Postmani kogusid, andmeid Burp Suite'ist, cURL ja Nuclei JSONL. Samuti toetatakse URL-ide edastamist stdin'i kaudu ja eraldi skaneerimise etappide k\u00e4ivitamist.<\/p>\n<\/li>\n<li>\n<p><strong>Autentitud skaneerimine ja IDOR\/BOLA kontrollid.<\/strong><br \/>\nVigolium toetab mitut sessiooni samal ajal: sessioone saab edastada inline, laadida failidest v\u00f5i kirjeldada t\u00e4iendavaid login flow'sid, sealhulgas tokenite v\u00e4ljav\u00f5tmist. Seda kasutatakse horisontaalse ja vertikaalse juurdep\u00e4\u00e4su kontrollimise, sealhulgas IDOR\/BOLA ja privileegide t\u00f5stmise kontrollimiseks.<\/p>\n<\/li>\n<li>\n<p><strong>Kontrollid raamistikude ja t\u00fc\u00fcpiliste lekkede jaoks.<\/strong><br \/>\nMoodulite loendis on kontrollid Next.js, Spring\/Java, Django, Flask, FastAPI, Laravel, Symfony, Rails, Express ja ASP.NET\/IIS jaoks. N\u00e4iteks Springi puhul kontrollitakse avatud Actuator endpoints'e, Spring Boot Admin'i, Spring Cloud Config'i, H2 Console'i, Jolokia ja Java rakenduste serverite konsooli; Next.js puhul \u2014 lekked kaudu \/_next\/data, SSRF Image Optimizeris ja middleware'ist m\u00f6\u00f6das\u00f5idud.<\/p>\n<\/li>\n<li>\n<p><strong>JavaScripti laiendused.<\/strong><br \/>\nKasutaja saab kirjutada oma mooduleid ja hooks'e JavaScriptis sisseehitatud JS-mootori kaudu koos HTTP API-ga, mis arvestab sessioone. Oluline piirang: sellised laiendused v\u00f5ivad k\u00e4ivitada suvalisi k\u00e4ske ja ei ole isoleeritud liivakastis, seega tuleb neid k\u00e4sitleda nagu tavalisi t\u00e4itmise koodi.<\/p>\n<\/li>\n<li>\n<p><strong>Erinev triage etapp tulemuste jaoks.<\/strong><br \/>\nLLM-assisted turvatestimisel tekib sageli probleem usutavate, kuid mitte korduvate leidudega. Vigoliumi autor kirjeldab triage'i kui eraldi l\u00e4bit\u00f6\u00f6tamist: k\u00f5igepealt skanner kogub kandidaate, seej\u00e4rel eraldi kontroll kontrollib k\u00f5ik leiud t\u00f5enditega uuesti \u00fcle.<\/p>\n<\/li>\n<li>\n<p><strong>Eelarve piirangud agentre\u017eiimi jaoks.<\/strong><br \/>\nAgendip\u00f5histe skannimiste puhul v\u00f5ib piirduda tokenite, t\u00f6\u00f6riistade kutsete arvu, triage'i iteratsioonide arvu ja kogumahutavuse ajaga. See on oluline CI ja kindlate ajaga testide jaoks: agent ei tohi l\u00f5putult \"kaevata\" \u00fchte eesm\u00e4rki ja p\u00f5letada ebaoluliste h\u00fcpoteeside peale eelarvet.<\/p>\n<\/li>\n<li>\n<p><strong>Aruanded, j\u00e4rjekord ja skaleerimine.<\/strong><br \/>\nNative Scan-is on v\u00e4lja kuulutatud konkurentsiv\u00f5imeline t\u00f6\u00f6tlusv\u00f5rk, per-host kiiruspiirang, h\u00fcbriidne j\u00e4rjekord m\u00e4lus, ketas v\u00f5i Redis, samuti iseseisvad HTML-aruanded. V\u00e4ljundi jaoks on saadaval console, JSONL ja HTML.<\/p>\n<\/li>\n<li>\n<p><strong>Serverire\u017eiim, API ja integreerimine Burp Suite'iga.<\/strong><br \/>\nVigolium saab k\u00e4ivitada kui API-server, vastu v\u00f5tta liiklust, aktiveerida l\u00e4bipaistva HTTP-proksi ja automaatselt skannida saadud andmeid. Burp Suite'i jaoks on mainitud eraldi laiendust burp-vigolium, mis v\u00f5imaldab saata live-liiklust Vigolium serverisse.<\/p>\n<\/li>\n<li>\n<p><strong>T\u00f6\u00f6laud ja konsool.<\/strong><br \/>\nLisaks CLI-le, projekt kirjeldab <strong>T\u00f6\u00f6laud<\/strong> \u2014 isetehtud juhtpaneel tulemuste visualiseerimiseks, projektide haldamiseks ja leidude j\u00e4lgimiseks. <strong>Konsool<\/strong> \u2014 pilvep\u00f5hine kommertstase halduskannete, keskse aruandluse, koost\u00f6\u00f6 ja kontrollide ajastamise jaoks.<\/p>\n<\/li>\n<\/ul>\n<h3>Paigaldamine<\/h3>\n<p>Projekt pakub installimist shell-skripti, npm, Docker, Homebrew, Bun ja allikast koostamise kaudu. Allikast koostamiseks on README-s v\u00e4lja toodud n\u00f5uded <strong>Go 1.26+<\/strong> ja <strong>bun 1.3.11+<\/strong>.<\/p>\n<p>curl -fsSL https:\/\/vigolium.com\/install.sh | bash<\/p>\n<p>npm install -g @vigolium\/vigolium<\/p>\n<p>docker pull j3ssie\/vigolium:latest<br \/>\ndocker run \u2014rm j3ssie\/vigolium:latest scan -h<\/p>\n<p>Arendajad hoiatavad eraldi, et Vigolium on r\u00fcndevate turvaarendust\u00f6\u00f6riist: agentide re\u017eiim k\u00e4ivitatakse ilma liivakastita ja omab t\u00e4isjuurdep\u00e4\u00e4su shellile, failis\u00fcsteemile ja hosti v\u00f5rgule, samuti v\u00f5ivad laiendused t\u00e4ita suvalisi k\u00e4ske. Seet\u00f5ttu on soovitatav agentide kontrollimisi k\u00e4ivitada \u00fchekordsetes konteinerites v\u00f5i virtuaalmasinates, mis on piiratud konkreetse testimise raamiga.<\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18304531\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Vigolium v0.1.13-beta \u2014 \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0441\u043e\u0432\u043c\u0435\u0449\u0430\u044e\u0449\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0434\u0435\u0442\u0435\u0440\u043c\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 \u0430\u0433\u0435\u043d\u0442\u043d\u044b\u043c \u0430\u0443\u0434\u0438\u0442\u043e\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 LLM. \u041f\u0440\u043e\u0435\u043a\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 GitHub \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GNU AGPLv3; \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0432\u044b\u043d\u0435\u0441\u0435\u043d\u0430 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 Cloud Console, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u044f\u0434\u0440\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043e \u043a\u0430\u043a \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435. Vigolium \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0432\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0440\u0435\u0436\u0438\u043c\u0430 \u0440\u0430\u0431\u043e\u0442\u044b: vigolium scan \u2014 \u043e\u0431\u044b\u0447\u043d\u043e\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":181811,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181810","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\".\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/vigolium-v0-1-13-beta\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Vigolium v0.1.13-beta | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\".\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/vigolium-v0-1-13-beta\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-30T12:48:14+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-30T12:48:14+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vigolium v0.1.13-beta | ProHoster","description":".","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vigolium-v0-1-13-beta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Vigolium v0.1.13-beta | ProHoster","og:description":".","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vigolium-v0-1-13-beta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-30T12:48:14+00:00","article:modified_time":"2026-05-30T12:48:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181810","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=181810"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/181810\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/181811"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=181810"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=181810"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=181810"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}