v1.9.18 — doc refresh + version-string consolidation
What this is
The doc-and-release catch-up. aimap shipped v1.4 through v1.9.17 across April–May 2026; the code landed, the GitHub Releases page did not. v1.9.18 is the catch-up: the public surface (README, man page, PKGBUILD, JSON ToolVersion, banner, User-Agent, -version flag) is now consistent with the code, and the doc gap that produced the drift is closed.
v1.9.18 specifically
- Single source of truth for the version string.
const Versioninversion.go. The banner,ToolVersionfield in JSON output, HTTP User-Agent, and the new-versionflag all read from there. No more three-place drift on each release. -versionflag.aimap -versionprintsaimap 1.9.18and exits.- README refresh. Service count corrected from 66 to 120 (50 deep enumerators). 24-row category table covers every fingerprint that ships. About reframed to honor both audiences — defenders running it on their own networks, researchers running it on authorized populations — and credit the population-FP discipline.
- Man page refresh. Updated from "aimap 1.3, April 2026, 36 services" to current reality. ML-adjacency rule and cross-cutting credential scanner described.
- PKGBUILD bump.
pkgver=1.9.18, description updated.
No behavior changes, no new fingerprints, no new enumerators. All existing tests pass.
What shipped between v1.3.0 and v1.9.18
Brief catalogue of the work that landed in code but not in a published release artifact:
- v1.4 – v1.5 — container/k8s/MCP/medical-AI expansion (13 platforms), image-generation pack (5 platforms + 3 enumerators), agent-memory/data-labeling/vector-DB fingerprints (11), ComfyUI-Manager probe fix
- v1.6 — Elasticsearch / OpenSearch / ClickHouse deep enumerators
- v1.7 – v1.8 — Lunary fingerprint, extortion classifier (Meow / Indexrm
read_medetector),--exclude-compromisedflag, actor attribution from extortion marker docs - v1.9.0 – v1.9.3 — AutoGen Studio, Flowise FP fix (honeypot over-match), anti-detect CDP server fingerprint, code-assistant fingerprints (Sourcegraph, Tabnine, Refact, Sweep AI, Dyad, bolt.diy, Sourcebot)
- v1.9.4 — llama.cpp fingerprint, parallelized PHASE 3 (single-threaded bug fix)
- v1.9.5 – v1.9.8 — large fingerprint expansion (95 → 120), Elasticsearch / OpenSearch + ClickHouse deep enumerators
- v1.9.9 – v1.9.11 — extortion-classifier shipped, actor attribution from marker documents, One API + NewAPI fingerprints
- v1.9.12 – v1.9.15 — Docker registry catalog-content classifiers for Jetson/NVIDIA edge, healthcare (PACS/DICOM), and finance (algotrading) operator attribution; international healthcare signal coverage (RU/DE/ES/FR/IT/CN/JP)
- v1.9.16 – v1.9.17 — three boundary-FP fixes on registry classifiers (
tegra/mcintegration,ray/krayzdrav,dicom//adicom); cross-cuttingExposed API Credentialsfingerprint +scanCredentials(extracts and format-validates vendor keys in HTTP responses independent of host's primary service)
See CHANGELOG.md for the full per-release detail.
Install
# Linux amd64
curl -LO https://github.com/Nicholas-Kloster/aimap/releases/download/v1.9.18/aimap-linux-amd64
chmod +x aimap-linux-amd64 && sudo mv aimap-linux-amd64 /usr/local/bin/aimap
# Linux arm64
curl -LO https://github.com/Nicholas-Kloster/aimap/releases/download/v1.9.18/aimap-linux-arm64
# macOS
curl -LO https://github.com/Nicholas-Kloster/aimap/releases/download/v1.9.18/aimap-darwin-arm64
# Or go install
go install github.com/Nicholas-Kloster/aimap@v1.9.18Verify the download against SHA256SUMS (also attached to this release).
Companion tools
- aimap-profile — target classification + disclosure routing
- BARE — Metasploit module ranking from scanner findings
- recongraph — seed-polymorphic recon graph
- cortex — auth-context analyzer