stng v1.2.0

The chaos filter that drops obvious garbage was rejecting some patterns it shouldn't have.

v1.2.0 keeps three things it had been dropping: Telegram bot tokens (<bot_id>:<auth_token>), JWTs — now gated on the eyJ header so random foo.bar.baz-shaped Go symbols stop matching — and Swift mangled symbols (_Tt, _T0, _$s, $s).

XOR IP extraction was also tightened. A nine-byte slice of a SQLite VDBE opcode table will, under the right key, decode to something that looks like an IP. The new heuristic checks the surrounding window for control-byte density: real ciphertext lives in varied data; a B-tree index page does not.

Full notes on Codeberg.

← All news