Recent Console changes

This article will report substantial changes to the user interface of XBOW Console to help existing users find features that have moved or been revised.

Attack strategy: preview stages replace per-class selection

The “Attack strategy” card no longer lets you select individual vulnerability classes. Comprehensive assessments run the generally available attack methods, and you choose which preview stages to add. XBOW saves your choices as the asset’s default.

Previous behavior

Before this change, the “Attack strategy” card included a “Vulnerability classes” group with a checkbox for each vulnerability class, including Insecure Direct Object Reference (IDOR).

New behavior

In the “Assessment guidance” area, open the Attack strategy card. Under “Preview stages” you can enable Public preview attack methods. If you have access to methods in the private preview stage, you will also see a control for Private preview.

Screenshot of the "Attack methods" section of the "Attack strategy" card showing the "Public preview" toggle.

For more information, see Choose preview stages.