All pull requests

Pull requests

• fix(exploits): escape {query} brace crashing SQLi exploit generation

  #295·harshitgavita-07 opened Oct 31, 2026·

  ·

• fix(mcp): remove stray self. references breaking two AI analysis tools

  #294·harshitgavita-07 opened Oct 31, 2026·

  ·

• fix: make server command timeout configurable

  #293·CamranShahvali opened Oct 30, 2026·

  ·
  2

• Security: bind to localhost, require an API token off-host, confine file paths

  #292·wilsonhj opened Oct 28, 2026·

  ·
  2

• fix: broken /api/visual/* routes + /api/command PATH (issues #001, #002); add WEP methodology doc

  #291·curtisrichman666 opened Oct 28, 2026·

  ·

• app.run honors API_HOST & --host CLI arg

  #290·SYANiDE- opened Oct 26, 2026·

  ·

• fix(security): guard legacy command API configuration

  #289·pei711 opened Oct 22, 2026·

  ·
  1

• HTTPS + threaded server, web console, and orchestration layer (chains/skills/agents/workflows)

  #288·DamianLevy87 opened Oct 21, 2026·

  ·

• Add root / index endpoint to fix 404 on GET /

  #287·DamianLevy87 opened Oct 21, 2026·

  ·

• docs: correct stale MCP tool names in README

  #280·dajiaohuang opened Oct 19, 2026·

  ·

• fix(files): contain FileOperationsManager paths inside the sandbox (CWE-22)

  #278·bharathvemula opened Oct 17, 2026·

  ·

• fix(vuln-intel): use exploits_found key in threat-feeds correlation and mark simulated IP/hash results

  #277·bharathvemula opened Oct 12, 2026·

  ·
  1

• New files from Fly.io Launch

  #276·zio289360 opened Oct 9, 2026·

  ·

• ohoiii

  #275·devilcompetition opened Oct 8, 2026·

  ·
  1

• Optimize cyclic payloads and add host process monitor

  #273·Tone730 opened Oct 1, 2026·

  ·

• fix: installer + fast accurate tool detection + MCP handshake/requirements fixes (v6.0.1)

  #269·ZanderoDev opened Sep 13, 2026·

  ·

• Medin v20260909

  #267·smedina78 opened Sep 9, 2026·

  ·

• Fix command injection via additional_args across all /api/tools/* endpoints

  #266·carfeii opened Sep 9, 2026·

  ·
  1

• Fix command injection in nmap/gobuster target parameters

  #264·carfeii opened Sep 9, 2026·

  ·

• docs: add reproducibility note

  #240·Nortaq-PlayNexus opened Sep 4, 2026·

  ·

• Fix broken star history chart

  #234·FaintFlower opened Aug 17, 2026·

  ·
  1

• fix: restore visual summary reports

  #233·Iams4kura opened Aug 16, 2026·

  ·
  1

• Fix Windows portability: hardcoded /tmp paths

  #228·ideabib opened Aug 10, 2026·

  ·
  1

• feat(security): fail-closed auth, scope enforcement, audit logging, Docker isolation

  #226·fxinfo24 opened Aug 7, 2026·

  ·

• Add CLAUDE.md with architecture and integration guidance

  #221·hooeymail42 opened Jul 22, 2026·

  ·