{"id":181810,"date":"2026-05-30T14:48:13","date_gmt":"2026-05-30T12:48:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vigolium-v0-1-13-beta"},"modified":"2026-05-30T14:48:13","modified_gmt":"2026-05-30T12:48:14","slug":"vigolium-v0-1-13-beta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vigolium-v0-1-13-beta","title":{"rendered":"Vigolium v0.1.13-beta","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/images\/23496\/original.png\" itemprop=\"contentURL\"><\/p>\n<p>      <img decoding=\"async\" src=\"\/wp-content\/uploads\/2026\/05\/6b5dca385b6e09391b374bd74ce93d2c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>      <\/a><\/p>\n<p><noindex>      <noindex><\/p>\n<p>Lansat versiunea ini\u021bial\u0103 deschis\u0103 <strong><a rel=\"nofollow\" href=\"https:\/\/github.com\/vigolium\/vigolium\/releases\/tag\/v0.1.13-beta\">Vigolium v0.1.13-beta<\/a><\/strong> \u2014 a scanner-ului de vulnerabilit\u0103\u021bi pentru aplica\u021bii web, care combin\u0103 scanarea determinist\u0103 clasic\u0103 cu auditul agent bazat pe LLM. Proiectul este disponibil pe GitHub \u0219i este distribuit sub licen\u021b\u0103 <strong>GNU AGPLv3<\/strong>; partea comercial\u0103 este transferat\u0103 \u00een cloud <strong>Cloud Console<\/strong>, \u00een timp ce nucleul scanner-ului este declarat ca fiind deschis.<\/p>\n<p><\/noindex><\/noindex><\/p>\n<p>Vigolium ofer\u0103 dou\u0103 moduri principale de operare: vigolium scan \u2014 o scanare obi\u0219nuit\u0103 \u00een mai multe etape cu c\u0103utare de con\u021binut, spidering prin browser, audit activ \u0219i pasiv; \u0219i vigolium agent \u2014 modul agent, unde LLM alege module, pl\u0103nuie\u0219te atacuri, genereaz\u0103 extensii JavaScript personalizate \u0219i combin\u0103 testarea dinamic\u0103 cu auditul codului surs\u0103.<\/p>\n<p><noindex><\/p>\n<p>Potrivit <a rel=\"nofollow\" href=\"https:\/\/docs.vigolium.com\/native-scan\/modules-reference\">ghidul actualizat al modulelor<\/a>, Vigolium include <strong>251 module de verificare<\/strong>, dintre care <strong>154 active<\/strong> \u0219i <strong>97 pasive<\/strong>. Modulele active trimit cereri modificate \u0219i aplic\u0103 fuzzing, injec\u021bii \u0219i analiz\u0103 comportamental\u0103, \u00een timp ce cele pasive analizeaz\u0103 deja perechile cerere\/raspuns f\u0103r\u0103 a genera trafic suplimentar.<\/p>\n<p><\/noindex><\/p>\n<h3><a rel=\"nofollow\" href=\"https:\/\/github.com\/vigolium\/vigolium#key-features\">Func\u021bionalit\u0103\u021bi<\/a><\/h3>\n<ul>\n<li>\n<p><strong>Scanare Native \u2014 o scanare determinist\u0103 obi\u0219nuit\u0103.<\/strong><br \/>\nModul vigolium scan este destinat verific\u0103rilor rapide \u0219i reproductibile. Acesta trece prin mai multe faze: colectare extern\u0103 de date, descoperirea con\u021binutului, spidering browser\/SPAs \u0219i audit. Acest mod este convenabil pentru CI, verific\u0103ri regulate \u0219i situa\u021bii \u00een care este important s\u0103 ob\u021bii un rezultat predictibil f\u0103r\u0103 implicarea LLM.<\/p>\n<\/li>\n<li>\n<p><strong>Scanare Agentic\u0103 \u2014 audit agent cu LLM.<\/strong><br \/>\nModul vigolium agent utilizeaz\u0103 runtime-ul \u00eencorporat <strong>olium<\/strong>. Agentul poate c\u0103uta singur endpoint-uri, alege module, rula verific\u0103ri, analiza codul, efectua SAST \u0219i verifica din nou constat\u0103rile. Sunt suportate scenariile Autopilot, Swarm \u0219i Query mode: de la scanarea autonom\u0103 a obiectivului p\u00e2n\u0103 la cereri unice pentru revizuirea codului, c\u0103utarea endpoint-urilor \u0219i descoperirea secretelor.<\/p>\n<\/li>\n<li>\n<p><strong>Verific\u0103ri XSS, SQLi, NoSQLi, SSTI, LFI, RCE, XXE \u0219i SSRF.<\/strong><br \/>\n\u00cen ghidul modulelor sunt enumerate verific\u0103rile pentru XSS reflexiv, injec\u021bii SQL pe baza erorilor \u0219i boolean-based blind SQLi, injec\u021bii NoSQL, server-side template injection, local file inclusion, command injection, XXE, SSRF \u0219i vulnerabilit\u0103\u021bi out-of-band. Pentru constat\u0103ri se utilizeaz\u0103 o scal\u0103 de severitate de la critical la info \u0219i o scal\u0103 de \u00eencredere: certain, firm, tentative.<\/p>\n<\/li>\n<li>\n<p><strong>Verific\u0103ri OAST pentru vulnerabilit\u0103\u021bi \" orale\".<\/strong><br \/>\nVigolium poate verifica blind XSS, blind SSRF, blind XXE \u0219i blind RCE prin mecanisme de callback, inclusiv prin interactsh. Acest lucru este necesar \u00een cazurile \u00een care vulnerabilitatea nu se manifest\u0103 direct \u00een r\u0103spunsul HTTP, dar serverul efectueaz\u0103 o interogare extern\u0103 DNS\/HTTP sau execut\u0103 o ac\u021biune \u00eent\u00e2rziat\u0103.<\/p>\n<\/li>\n<li>\n<p><strong>Mutarea con\u0219tient\u0103 de valoare \u2014 muta\u021bia parametrilor \u021bin\u00e2nd cont de semnifica\u021bia valorii.<\/strong><br \/>\nScanerul clasific\u0103 parametrii dup\u0103 tipul semantic: num\u0103r, UUID, JWT, email \u0219i alte variante, dup\u0103 care selecteaz\u0103 muta\u021biile \u00een func\u021bie de context. Acest lucru ar trebui s\u0103 reduc\u0103 zgomotul \u00een compara\u021bie cu \u00eenlocuirea brut\u0103 a acelora\u0219i payload-uri \u00een toate c\u00e2mpurile deodat\u0103.<\/p>\n<\/li>\n<li>\n<p><strong>Suport pentru diferite formate de intrare.<\/strong><br \/>\nCa intrare se pot transmite URL-uri, specifica\u021bii OpenAPI\/Swagger, colec\u021bii Postman, date din Burp Suite, cURL \u0219i Nuclei JSONL. De asemenea, este acceptat\u0103 furnizarea URL-urilor prin stdin \u0219i lansarea unor faze separate de scanare.<\/p>\n<\/li>\n<li>\n<p><strong>Scanare autentificat\u0103 \u0219i verific\u0103ri IDOR\/BOLA.<\/strong><br \/>\nVigolium suport\u0103 mai multe sesiuni simultan: sesiunile pot fi transmise inline, \u00eenc\u0103rcate din fi\u0219iere sau descrise prin fluxuri complete de autentificare cu extragerea token-urilor. Acest lucru este utilizat pentru verific\u0103ri de control al accesului orizontal \u0219i vertical, inclusiv IDOR\/BOLA \u0219i ridicarea privilegiilor.<\/p>\n<\/li>\n<li>\n<p><strong>Verific\u0103ri pentru framework-uri \u0219i tipuri obi\u0219nuite de scurgeri.<\/strong><br \/>\n\u00cen lista modulelor exist\u0103 verific\u0103ri pentru Next.js, Spring\/Java, Django, Flask, FastAPI, Laravel, Symfony, Rails, Express \u0219i ASP.NET\/IIS. De exemplu, pentru Spring sunt verificate endpoint-urile Actuator deschise, Spring Boot Admin, Spring Cloud Config, H2 Console, Jolokia \u0219i consolele serverelor de aplica\u021bii Java; pentru Next.js \u2014 scurgeri prin \/_next\/data, SSRF \u00een Image Optimizer \u0219i o ocolire a middleware-ului.<\/p>\n<\/li>\n<li>\n<p><strong>Extensii JavaScript.<\/strong><br \/>\nUtilizatorul poate scrie module \u0219i hooks proprii \u00een JavaScript prin motorul JS \u00eencorporat cu API HTTP, care \u021bine cont de sesiuni. O limitare important\u0103: aceste extensii pot executa comenzi arbitrare \u0219i nu sunt izolate prin sandbox, a\u0219a c\u0103 trebuie privite ca un cod executabil obi\u0219nuit.<\/p>\n<\/li>\n<li>\n<p><strong>O faz\u0103 separat\u0103 de triere pentru rezultate.<\/strong><br \/>\n\u00cen testarea de securitate asistat\u0103 de LLM apare adesea problema g\u0103sirilor plauzibile, dar nereproductibile. Autorul Vigolium descrie trierea ca un pasaj separat: mai \u00eent\u00e2i scanerul colecteaz\u0103 candida\u021bi, apoi o verificare separat\u0103 re-verific\u0103 fiecare g\u0103sire cu dovezi.<\/p>\n<\/li>\n<li>\n<p><strong>Limit\u0103ri bugetare pentru modul agent.<\/strong><br \/>\nPentru scanarea agentului, este posibil s\u0103 se limiteze tokenii, num\u0103rul de apeluri ale instrumentelor, num\u0103rul de itera\u021bii triage \u0219i timpul total de execu\u021bie. Acest lucru este important pentru CI \u0219i pentesturi cu timp fix: agentul nu ar trebui s\u0103 'sape' infinit o singur\u0103 \u021bint\u0103 \u0219i s\u0103 consume bugetul pe ipoteze cu valoare redus\u0103.<\/p>\n<\/li>\n<li>\n<p><strong>Rapoarte, coad\u0103 \u0219i scalare.<\/strong><br \/>\n\u00cen Native Scan sunt anun\u021bate un pool concurent de lucr\u0103tori, limitarea ratei per gazd\u0103, o coad\u0103 hibrid\u0103 \u00een memorie, pe disc sau \u00een Redis, precum \u0219i rapoarte HTML autogenerate. Pentru ie\u0219ire sunt disponibile console, JSONL \u0219i HTML.<\/p>\n<\/li>\n<li>\n<p><strong>Mod de server, API \u0219i integrare cu Burp Suite.<\/strong><br \/>\nVigolium poate fi pornit ca server API, accepta trafic, include un proxy HTTP transparent \u0219i scaneaz\u0103 automat datele primite. \u00cen cazul Burp Suite, se men\u021bioneaz\u0103 o extensie separat burp-vigolium care permite trimiterea de trafic live c\u0103tre serverul Vigolium.<\/p>\n<\/li>\n<li>\n<p><strong>Workbench \u0219i Consol\u0103.<\/strong><br \/>\nPe l\u00e2ng\u0103 CLI, proiectul descrie <strong>Workbench<\/strong> \u2014 un tablou de bord auto-g\u0103zduit pentru vizualizarea rezultatelor, gestionarea proiectelor \u0219i urm\u0103rirea descoperirilor. <strong>Consol\u0103<\/strong> \u2014 un strat comercial cloud pentru scanare gestionat\u0103, raportare centralizat\u0103, colaborare \u0219i planificarea verific\u0103rilor.<\/p>\n<\/li>\n<\/ul>\n<h3>Instalare<\/h3>\n<p>Proiectul ofer\u0103 instalare prin script shell, npm, Docker, Homebrew, Bun \u0219i compilare din surse. Pentru compilarea din surse, \u00een README sunt specificate cerin\u021bele <strong>Go 1.26+<\/strong> \u0219i <strong>bun 1.3.11+<\/strong>.<\/p>\n<p>curl -fsSL https:\/\/vigolium.com\/install.sh | bash<\/p>\n<p>npm install -g @vigolium\/vigolium<\/p>\n<p>docker pull j3ssie\/vigolium:latest<br \/>\ndocker run --rm j3ssie\/vigolium:latest scan -h<\/p>\n<p>Dezvoltatorii avertizeaz\u0103 separat c\u0103 Vigolium este un instrument de securitate ofensiv: modul agent este lansat f\u0103r\u0103 sandbox \u0219i are acces complet la shell, sistemul de fi\u0219iere \u0219i re\u021beaua gazdei, iar extensiile pot, de asemenea, s\u0103 execute comenzi arbitrare. Prin urmare, verific\u0103rile agentului sunt recomandate s\u0103 fie rulate \u00eentr-un container de unic\u0103 folosin\u021b\u0103 sau \u00eentr-o ma\u0219in\u0103 virtual\u0103 limitat\u0103 la parametrii specifici de testare.<\/p>\n<p>Sursa: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/security\/18304531\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a Vigolium v0.1.13-beta \u2014 \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0441\u043e\u0432\u043c\u0435\u0449\u0430\u044e\u0449\u0435\u0433\u043e \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u0434\u0435\u0442\u0435\u0440\u043c\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441 \u0430\u0433\u0435\u043d\u0442\u043d\u044b\u043c \u0430\u0443\u0434\u0438\u0442\u043e\u043c \u043d\u0430 \u0431\u0430\u0437\u0435 LLM. \u041f\u0440\u043e\u0435\u043a\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043d\u0430 GitHub \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GNU AGPLv3; \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0432\u044b\u043d\u0435\u0441\u0435\u043d\u0430 \u0432 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0439 Cloud Console, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u044f\u0434\u0440\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043e \u043a\u0430\u043a \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435. Vigolium \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0434\u0432\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0440\u0435\u0436\u0438\u043c\u0430 \u0440\u0430\u0431\u043e\u0442\u044b: vigolium scan \u2014 \u043e\u0431\u044b\u0447\u043d\u043e\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":181811,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-181810","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\".\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/vigolium-v0-1-13-beta\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Vigolium v0.1.13-beta | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\".\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/vigolium-v0-1-13-beta\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-30T12:48:14+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-30T12:48:14+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vigolium v0.1.13-beta | ProHoster","description":".","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vigolium-v0-1-13-beta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Vigolium v0.1.13-beta | ProHoster","og:description":".","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vigolium-v0-1-13-beta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-30T12:48:14+00:00","article:modified_time":"2026-05-30T12:48:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181810","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=181810"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/181810\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/181811"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=181810"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=181810"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=181810"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}