v2.6.0

AutoPWN Suite v2.6.0

Functional changes

• Add a dedicated web-security dashboard, website-only scans, selectable checks,
  evidence details, PoC downloads, explicit verification and report exports.
• Resume incomplete/stopped scans while retaining completed checks, findings,
  discovery and successful CVE work. Save independent web pacing and coverage
  controls in profiles and schedules.
• Replace the Python Nmap wrapper with the native XML/subprocess adapter shared
  by CLI, Python API and dashboard, including progress, cancellation and cleanup.
• Preserve timed-out hosts and failed crawl pages as incomplete so Resume can
  retry them; retain redirect evidence and replay the final scoped URLs.

Security changes

• Replay uses stored same-origin evidence plans, rejects missing redacted input,
  limits concurrency and remains disabled in offline mode.
• Resume returns stable public validation errors rather than raw exceptions;
  findings capture diagnostic metadata with sensitive URL fields redacted.
• Document intentional legacy-TLS diagnostic handshakes and distinguish
  candidate findings from confirmed exploit impact.
• Existing risks discovered after release are listed in the security advisory
  index; this release must not be described as free of known vulnerabilities.

Merged changes and validation.

Authenticity backfill

Signatures and inventories were added after the original release.
No application source or Docker image was rebuilt or replaced.
The attached per-platform SCA and policy reports preserve current
findings; signatures establish authenticity, not security clearance.
See the backfill records and security advisory index for limitations.