Repository navigation
Final release of the 0.6.x line. Nothing new to maintain - just the docs catching up to what the code does.
In this one
- Usage documentation now covers every command shipped in 0.6.x:
authorize,mine,tls,--openapi, plus the CWE/CVE tagging in reports - README check catalog and command table synced with reality (30+ checks across 8 check families)
The 0.6.x line, documented
| Version | What landed |
|---|---|
| v0.6.0 | OS command injection, SSTI, CRLF, sensitive files; CWE/CVE tagging on every finding |
| v0.6.1 | false-positive extermination (authorize wall guard, SSTI echo guard); complete untruncated evidence |
| v0.6.2 | time-based SQLi (calibrated), GraphQL introspection, 120 param candidates, expanded sensitive paths |
| v0.6.3 | range-based CVE matching (packaging), Heartbleed + Ghostcat entries, YAML specs (pyyaml) |
| v0.6.4 | redirect-following spider (FN reduction), summit tls certificate audit |
| v0.6.5 | this release - documentation complete, 30+ checks cataloged |
Verified in CI on every one of those releases
73 tests, ruff clean, demo-scan smoke test, evidence runner 21/21.
Authorized testing only.