v0.1.7
v0.1.7
Added
- GET-to-POST method pivoting with dual query/body hidden-parameter discovery.
- Automatic promotion of confirmed hidden POST parameters into scanner targets.
- Surface-adaptive module budgeting with per-category probe quotas and starvation isolation.
- Expanded high-impact parameter wordlists with context-aware prioritization for admin, cloud, upload and proxy routes.
Fixed
- Preserve final scan status and avoid health-metrics nil pointer panics.
- Count request budgets outside retry loops and preserve HTTP 429 evidence with
Retry-Afterhandling. - Use cryptographic randomness for WAF bypass headers and correct rate-limiter jitter.
- Tighten preflight, scope expansion, non-standard port handling, proxy port allocation and UTF-8 truncation behavior.
Optimized
- Scope TLS misconfiguration checks to root hosts.
- Reduce noisy coverage notices in normal CLI output.
- Run
api_versioningonce per host on root or base API endpoints.