Hack.lu 2023

If you haven't been upgrading lookyloo since the last tagged release, this release contains a lot of changes.

New features

• Support for HTTP Headers Hashing
• Support for archiving capture on S3FS, this is not completely implemented, but we use it on the public instance. Expect it to be usable for anyone in next release.
• Store HARs dumps in gzip archives
• MISP export when the capture downloads a file
• Handle captures where we have a rendered HTML and a no-click download is triggered in Javascript (TODO: support multiple downloads triggered in a single capture)
• Get downloaded file via the API
• Fetch favicons using default URL, and HTML content
• Support multiple MISP instances for submission and lookup

Changes

• Better rendering of the capture time
• Support re-processing captures that were mistakenly considered broken
• Improve logging
• Improve caching
• Auto-restart webservice to avoid memory leak
• Strip URL to capture (space and new line)
• Update dependencies, new browsers

Bugfixes

• Allow to run multiple backgroung indexing scripts
• Many related to the compression of the HAR and the pickles to reduce disk use
• Various encoding issues with rendered HTML

For more details regarding the captures, see Lacus v1.7.0 release notes.