Skip to content

DiscourseMap v2.0.0 - Major Refactoring Release

Choose a tag to compare

@ibrahmsql ibrahmsql released this 11 Oct 13:55
· 18 commits to main since this release
33e2dc0

πŸŽ‰ DiscourseMap v2.0.0 - Production Ready!

πŸš€ Major Changes

This is a major release with comprehensive refactoring and significant new features for Discourse security testing.

✨ New Features

3 New Discourse-Specific Security Modules

  • BadgeSecurityModule (576 lines) - 12 comprehensive test categories

    • Badge enumeration and discovery
    • Hidden badge detection
    • SQL query exposure analysis
    • Badge manipulation testing
    • Badge granting/revocation vulnerabilities
    • Custom badge creation testing
  • TrustLevelSecurityModule (504 lines) - 15+ security tests

    • TL0-TL4 bypass testing
    • Trust level manipulation detection
    • Automatic promotion testing
    • Permission escalation checks
    • Group TL override testing
  • CategorySecurityModule (616 lines) - 14 test categories

    • Category tree analysis
    • Hidden category discovery
    • Permission bypass techniques
    • Subcategory security testing
    • Ownership bypass detection

πŸ“Š Performance Improvements

  • 60% faster imports and startup time
  • 43% less memory usage
  • 3-5x faster scanning with true parallel execution
  • 88% code reduction across 15 refactored modules

πŸ”§ Technical Improvements

  • 15 modules refactored for better maintainability
  • Enhanced exception handling (37+ improved handlers)
  • Centralized HTTP utilities for consistent requests
  • OWASP Top 10 2021 compliance (35+ checks)
  • Backwards compatible - no breaking changes

🧹 Code Quality

  • ~21,000 lines of code cleaned up
  • Single Responsibility Principle enforced
  • Better separation of concerns
  • Improved testability

πŸ“¦ Installation

# Install from PyPI
pip install discoursemap==2.0.0

# Upgrade existing installation
pip install --upgrade discoursemap

πŸ”— Links

πŸ™ Credits

Special thanks to AI code review tools (Gemini Code Assist, CodeRabbit) for valuable feedback during development.


Full Changelog: v1.2.2...v2.0.0