Release v0.1.2 · jolovicdev/hayduk

Bugfix release. No features, no breaking changes.

Engine

Stale monitor events could delete a live session. Session IDs are per-link counters, so after a reconnect a close buffered on the dead link deleted the replacement link's session with the reused ID. All monitor events now carry and check the monitor's identity.
Chunked route output lost earlier chunks. console.read drains only what printed since the last read, so large route tables lost every chunk but the last and logged those rows as removals. Reads now concatenate before parsing.
Hail Mary targeted closed services. The attack matcher ignored the service state, so closed ports still drew exploit launches. Only open or stateless services match now.

A module or payload options error enabled Launch. Both option loads now hold the button and show the error instead of submitting an empty option set; payloads that require LHOST can no longer be sent with no way to enter it.

Team mode accepted unreachable binds. localhost and scoped IPv6 loopback such as ::1%lo passed validation while staying unreachable to remote operators. Hostnames are resolved and all-loopback binds are rejected, scoped IPv6 included.