SCOUT v2.4.0

Detection Engine Upgrade

Driven by Terminator's evaluation of ASUS RT-AX88U findings — "framework is top-tier, detection core needs depth" — this release significantly upgrades SCOUT's vulnerability detection capabilities.

Highlights

• Ghidra P-code Taint Analysis — 3-strategy dataflow tracing replaces symbol co-occurrence: P-code SSA forward taint → P-code colocated → decompiled body analysis
• 3-Tier Confidence System — PCODE_VERIFIED_CAP = 0.75 joins existing co-occurrence (0.40) and code-verified (0.55) tiers
• 4 New Rule Families — SQL injection, format string, path traversal, SSRF detection (9 regex patterns across PHP/Python/C/shell)
• CGI Handler Detection — Ghidra string_refs extraction of do_*_cgi function names as source endpoints
• SBOM Backport Detection — opkg patch revision parsing with -0.30 confidence for backported packages
• Handoff Schema — firmware_handoff.json now includes adversarial triage schema reference for downstream consumers

Verified

Metric	v2.3.0	v2.4.0	Change
Taint results (RT-AX88U)	10	15	+50%
Max confidence	0.40	0.60	+50%
Ghidra-verified traces	0	5	New
Sanitizer detection	N/A	2 detected	New
Detection rule families	5	9	+80%

New Files

• src/aiedge/ghidra_scripts/pcode_taint.py — P-code SSA forward/backward taint analysis

🤖 Generated with Claude Code