Skip to content

v0.1.6

Choose a tag to compare

@github-actions github-actions released this 06 Sep 13:01
· 29 commits to main since this release

v0.1.6

Added

  • Type-aware probing across SQL injection, command injection, NoSQL injection, IDOR/BOLA and path traversal modules.
  • Numeric-safe SQL and command probes for parameters that reject free-form payload prefixes.
  • Nested dotted-path support for MongoDB operator queries and authentication bypass bodies.
  • Category-weighted request budgets with rollover from completed modules and groups.
  • Coverage-gap metrics when configured budgets prevent full target coverage.

Fixed

  • Support bracket, dot and unindexed array JSON mutations without overwriting container values.
  • Target only scalar JSON leaf values to avoid schema-validation rejections.
  • Balance Windows and Linux traversal testing to avoid premature fast-fail behavior.