We are excited to announce the release of ZIION 23.2, the latest version of the world's first operating system focused on blockchain development and security auditing. With this release, we have expanded our toolkit to provide even greater support for security auditors in the rapidly evolving digital landscape. ZIION 23.2 now includes tools for Cloud, Web, and IoT auditing, further solidifying its position as the go-to VM for Web3 and beyond. <h2>New in ZIION 23.2: Cloud Audit Tools</h2>Cloud services are increasingly vital for modern businesses, which means ensuring the security of their configuration and usage is of paramount importance. With ZIION 23.2, we are introducing a suite of cloud audit tools that will enable auditors to analyze and secure cloud infrastructures across popular platforms like AWS, Azure, and Google Cloud.&nbsp; By providing comprehensive support for cloud security assessments, ZIION 23.2 equips auditors with the necessary resources to safeguard critical data and applications in the cloud. <h3>Here are a few (but not all) of the newly available cloud auditing tools in ZIION 23.2: </h3><ul><li>Steampipe: An open-source CLI tool that enables querying cloud infrastructure and resources using SQL, simplifying data retrieval and analysis for effective cloud management.</li><li>Scoutsuite: An open-source multi-cloud security auditing tool that generates comprehensive reports, enabling organizations to identify and mitigate security risks in their cloud environments.</li><li>Peirates: An open-source Kubernetes penetration testing tool that streamlines security testing by automating and simplifying common attack techniques against Kubernetes clusters.</li><li>Cloudsploit: An automated cloud security scanning tool that helps identify misconfigurations and compliance violations.</li><li>Majority of Cloud Provider CLIs: ZIION is now equipped with the majority of Cloud Provider CLIs like Alibaba CLI, AWS CLI, AZURE CLI, Digital Ocean CLI, and gCloud CLI. </li></ul>Learn more about Cloud auditing tools: <a target="_blank" rel="noopener noreferrer nofollow" href="https://docs.ziion.org/discover-the-tools/cloud-audit-tools">https://docs.ziion.org/discover-the-tools/cloud-audit-tools</a> <h2>New in ZIION 23.2: Web Audit Tools</h2>Web applications continue to be an essential aspect of the digital world, and their security should never be overlooked, even, or especially, in Web3 projects. To help security professionals address the growing number of threats targeting web applications, ZIION 23.2 comes packed with a robust set of web audit tools. These tools will empower smart contract auditors to identify vulnerabilities, conduct penetration tests, and perform comprehensive security assessments for a safer web experience, without having to switch to another VM.<h3>ZIION 23.2's new web auditing tools include: </h3><ul><li>NMap: A network scanning tool that enables users to discover hosts, services, and vulnerabilities on networks for effective reconnaissance and assessment.</li><li>OWASP ZAP: A powerful web application security testing tool that helps developers and security professionals identify vulnerabilities and security flaws in web applications.</li><li>Ffuf: A web application fuzzer that enables security professionals to quickly discover hidden resources, directories, and files by sending a large number of requests to a target server.</li><li>httpX: A fast and multi-purpose HTTP toolkit that simplifies security testing by allowing users to scan for web applications, virtual hosts, and open ports, while also supporting HTTP/2, HTTP/3, and custom headers.</li><li>GitLeaks: A SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. </li></ul>Learn more about Web auditing tools: <a target="_blank" rel="noopener noreferrer nofollow" href="https://docs.ziion.org/discover-the-tools/web-audit-tools">https://docs.ziion.org/discover-the-tools/web-audit-tools</a><h2>New in ZIION 23.2: IoT Audit Tools</h2>The Internet of Things (IoT) has opened up a new frontier for connectivity, but it has also introduced new security challenges. With the inclusion of IoT audit tools in ZIION 23.2, security auditors can now thoroughly assess the security of IoT devices and networks, identify vulnerabilities, and implement necessary countermeasures to ensure the protection of connected devices and systems.<h3>Here are a few of the new cloud auditing tools available in ZIION 23.2:</h3><ul><li>BinWalk: A fast, easy-to-use tool for analyzing, reverse engineering, and extracting firmware images.</li><li>Frida &amp; Frida-Tools: A dynamic instrumentation toolkit for developers, reverse engineers, and security researchers.</li><li>MobSF: Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis, and security assessment framework capable of performing static and dynamic (outside a VM) analysis.</li><li>Mosquitto &amp; MQTT Client Shell: Mosquitto is an open-source MQTT broker and MQTT Client Shell is a text console-based, interactive shell for exercising various tasks associated with MQTT client communications.</li><li>Wireshark: A network traffic analyzer</li></ul>Learn more about IoT auditing tools: <a target="_blank" rel="noopener noreferrer nofollow" href="https://docs.ziion.org/discover-the-tools/iot-audit-tools">https://docs.ziion.org/discover-the-tools/iot-audit-tools</a> By incorporating Cloud, Web, and IoT audit tools into ZIION 23.2, Halborn has created an even more comprehensive Virtual Machine that caters to the needs of blockchain developers and security auditors in a rapidly changing digital landscape. With support for multiple blockchains, 100+ pre-installed tools, and now a vast array of resources for Web, Cloud, and IoT auditing, ZIION 23.2 is the ultimate toolbox for blockchain developers and security auditors. Don't miss out on the latest advancements in security auditing with ZIION 23.2. Download the newest release at <a target="_blank" rel="noopener noreferrer nofollow" href="http://ziion.org/download">ziion.org/download</a> and explore our documentation at <a target="_blank" rel="noopener noreferrer nofollow" href="http://docs.ziion.org/">docs.ziion.org/</a> to learn more about the powerful features and tools.

Introducing ZIION 23.2: The Ultimate VM for Web3 Developers and Auditors

Halborn announced today the release of ZIION 23.1, the latest version of the first blockchain audit-ready Virtual Machine. With multiple new features, ZIION is set to be the ultimate tool for blockchain developers and security professionals.&nbsp;<img src="https://cdn.halbornmainframe.com/social_poster_1_2d18e35c9d.jpg" alt="ZIION 23.1 release" width="2400" height="1256">With this release, Halborn adds long-awaited features requested by the community. Keep reading below for an overview of the new features and updates.<h2>Release details of ZIION 23.1</h2><ul><li>Changed OS base: ZIION is using Debian as its base now. It is using the latest kernels (currently on 6.1.x) and tools for maximum arm64 compatibility/features and to stay up to date when new features are introduced in Linux.</li><li>Adding ZIION-RET: Reverse Engineering Tools and Debuggers are included in this latest release. RET tools added in this release:</li></ul> 1. Ghidra with wasm extension2. Radare23. Wasm Binary Toolkit4. Wasmdec5. GDB with GEF6. Delve <ul><li>Added Go tools: New Golang tools have been added for Golang-based auditing:</li></ul><ol><li>StaticCheck</li><li>Nancy</li><li>Go-Geiger</li><li>Golangci-lint</li><li>ErrCheck</li><li>Shadow</li><li>Unconvert </li></ol><ul><li>Switched from paid Parallels to free UTM: Switched from proprietary and paid Parallels hypervisor to free and open-source UTM for the arm64 version. This allows Macbook M1 &amp; M2 users to use ZIION VM without the need to purchase a Parallels hypervisor.</li><li>Added new extensions &amp; themes: ZIION-ext Gnome extension, ZIION-GRUB, and ZIION-plymouth themes have been added.</li><li>New custom tool: The new custom tool is ZIION-cli, which allows for installing and updating most cargo tools without using compilation time or resources. It also provides an arm64 equivalent of solc-select and can self-update.</li><li>Added new VSCodium extensions: More VSCodium security and workflow-related extensions have been added:</li></ul><ol><li>Anchor</li><li>Bookmarks</li><li>GitLens</li><li>Partial Diff</li><li>Vyper </li></ol><ul><li>Updated tools: All the pre-installed tools have been updated to their latest version.</li></ul>ZIION 23.1 aligns with a new release schedule, set to have major updates each quarter starting with Q1 2023. With this release and its new features, ZIION continues to be a de-facto tool for blockchain developers and security professionals.&nbsp; The new release is available for download <a target="_blank" rel="" href="https://ziion.org/download">here</a>.&nbsp; For more information on using ZIION, check out our <a target="_blank" rel="" href="http://docs.ziion.org">Docs</a> page.&nbsp;

Blog

Articles