Skip to content

v1.9.18 — doc refresh + version-string consolidation

Choose a tag to compare

@Nicholas-Kloster Nicholas-Kloster released this 19 May 13:18
· 67 commits to main since this release

What this is

The doc-and-release catch-up. aimap shipped v1.4 through v1.9.17 across April–May 2026; the code landed, the GitHub Releases page did not. v1.9.18 is the catch-up: the public surface (README, man page, PKGBUILD, JSON ToolVersion, banner, User-Agent, -version flag) is now consistent with the code, and the doc gap that produced the drift is closed.

v1.9.18 specifically

  • Single source of truth for the version string. const Version in version.go. The banner, ToolVersion field in JSON output, HTTP User-Agent, and the new -version flag all read from there. No more three-place drift on each release.
  • -version flag. aimap -version prints aimap 1.9.18 and exits.
  • README refresh. Service count corrected from 66 to 120 (50 deep enumerators). 24-row category table covers every fingerprint that ships. About reframed to honor both audiences — defenders running it on their own networks, researchers running it on authorized populations — and credit the population-FP discipline.
  • Man page refresh. Updated from "aimap 1.3, April 2026, 36 services" to current reality. ML-adjacency rule and cross-cutting credential scanner described.
  • PKGBUILD bump. pkgver=1.9.18, description updated.

No behavior changes, no new fingerprints, no new enumerators. All existing tests pass.

What shipped between v1.3.0 and v1.9.18

Brief catalogue of the work that landed in code but not in a published release artifact:

  • v1.4 – v1.5 — container/k8s/MCP/medical-AI expansion (13 platforms), image-generation pack (5 platforms + 3 enumerators), agent-memory/data-labeling/vector-DB fingerprints (11), ComfyUI-Manager probe fix
  • v1.6 — Elasticsearch / OpenSearch / ClickHouse deep enumerators
  • v1.7 – v1.8 — Lunary fingerprint, extortion classifier (Meow / Indexrm read_me detector), --exclude-compromised flag, actor attribution from extortion marker docs
  • v1.9.0 – v1.9.3 — AutoGen Studio, Flowise FP fix (honeypot over-match), anti-detect CDP server fingerprint, code-assistant fingerprints (Sourcegraph, Tabnine, Refact, Sweep AI, Dyad, bolt.diy, Sourcebot)
  • v1.9.4 — llama.cpp fingerprint, parallelized PHASE 3 (single-threaded bug fix)
  • v1.9.5 – v1.9.8 — large fingerprint expansion (95 → 120), Elasticsearch / OpenSearch + ClickHouse deep enumerators
  • v1.9.9 – v1.9.11 — extortion-classifier shipped, actor attribution from marker documents, One API + NewAPI fingerprints
  • v1.9.12 – v1.9.15 — Docker registry catalog-content classifiers for Jetson/NVIDIA edge, healthcare (PACS/DICOM), and finance (algotrading) operator attribution; international healthcare signal coverage (RU/DE/ES/FR/IT/CN/JP)
  • v1.9.16 – v1.9.17 — three boundary-FP fixes on registry classifiers (tegra/mcintegration, ray/krayzdrav, dicom//adicom); cross-cutting Exposed API Credentials fingerprint + scanCredentials (extracts and format-validates vendor keys in HTTP responses independent of host's primary service)

See CHANGELOG.md for the full per-release detail.

Install

# Linux amd64
curl -LO https://github.com/Nicholas-Kloster/aimap/releases/download/v1.9.18/aimap-linux-amd64
chmod +x aimap-linux-amd64 && sudo mv aimap-linux-amd64 /usr/local/bin/aimap

# Linux arm64
curl -LO https://github.com/Nicholas-Kloster/aimap/releases/download/v1.9.18/aimap-linux-arm64

# macOS
curl -LO https://github.com/Nicholas-Kloster/aimap/releases/download/v1.9.18/aimap-darwin-arm64

# Or go install
go install github.com/Nicholas-Kloster/aimap@v1.9.18

Verify the download against SHA256SUMS (also attached to this release).

Companion tools

  • aimap-profile — target classification + disclosure routing
  • BARE — Metasploit module ranking from scanner findings
  • recongraph — seed-polymorphic recon graph
  • cortex — auth-context analyzer