All pull requests

Pull requests

• fix(js/net): enforce network policy on proxied target in JS net dial

  #7889·IBazsecI opened Oct 18, 2026·3 of 4 tasks·

  ·
  1

  3

• fix(protocolstate): refresh low-memory warning

  #7887·knakul853 opened Oct 17, 2026Contributor·

  ·
  3

  

• fix(sdk): prevent custom-port HTTP failures from poisoning base host cache and filter skip events

  #7886·TassioSales opened Oct 17, 2026·

  ·
  1

  4

• Docs/improve readme clarity

  #7885·sayan9168 opened Oct 17, 2026·4 tasks done·

  ·
  3

• fix(headless): avoid waiting for an already-fired load event

  #7884·knakul853 opened Oct 17, 2026Contributor·

  ·
  1

  

• feat: post-exploitation module (webshell drop, MySQL UDF privilege escalation, port scan)

  #7883·cqhand1111 opened Oct 16, 2026·

  ·
  23

• feat(installer): add templates update channel

  #7882·NitinReddy-A opened Oct 15, 2026·

  ·
  1

  1

• fix(http): honour template max-size under global response-size-read limit

  #7877·TassioSales opened Oct 14, 2026·

  ·
  1

  3

• fix(runner): set HTTPS_PROXY and all proxy env vars when proxy-internal is enabled

  #7876·TassioSales opened Oct 14, 2026·

  ·
  1

  5

• fix(templates): keep flow and other template options on compiled-cache hits

  #7870·G360-Niek opened Oct 13, 2026Contributor·3 of 4 tasks·

  ·
  2

• fix(headless): enforce network policy on ws and wss schemes (#7867)

  #7868·TassioSales opened Oct 13, 2026·

  ·
  1

  20

• feat(input): pin a target to an ip with the ip key of target lines

  #7863·mazzz3r opened Oct 11, 2026·4 tasks done·

  ·
  1

• feat(progress): report completion by executed templates

  #7861·mazzz3r opened Oct 11, 2026·4 tasks done·

  ·
  1

  4

• perf(protocols/http): defer building FullResponseString when unused by operators

  #7857·AdamMagued opened Oct 10, 2026·

  ·
  1

  9

• feat(reporting): close Linear issues when a finding is fixed

  #7856·knakul853 opened Oct 9, 2026Contributor·

  ·
  16

  

• chore(deps): bump the go_modules group across 1 directory with 2 updates

  dependenciesgo
  #7855·dependabot[bot] opened Oct 9, 2026Bot·

  ·
  1

• fix(extractors): reject invalid xpath expressions during extractor compilation (#7750)

  #7854·TassioSales opened Oct 8, 2026·4 tasks done·

  ·
  1

  2

• fix(catalog): match known config files by exact basename

  #7853·NitinReddy-A opened Oct 8, 2026·

  ·
  1

  2

• fix(http): self-heal HTTP-to-HTTPS requests immediately on detection

  #7850·SamIntruder opened Oct 7, 2026·3 of 4 tasks·

  ·
  1

  2

• fix(installer): fail fast on unremovable templates update lock

  #7831·m10x opened Oct 6, 2026·3 tasks done·

  ·
  5

• fix(http): set ip var from IP-literal target when dial history is empty

  #7828·ruzfi opened Oct 5, 2026·3 of 4 tasks·

  ·
  1

  4

• fix(raw): keep a path that contains "HTTP" in a versionless request line

  #7812·CalvinTjoaquinn opened Oct 1, 2026·3 of 4 tasks·

  ·
  2

• fix(extractors): reject misapplied group and attribute fields on wrong extractor types (#7808)

  #7810·TassioSales opened Oct 1, 2026·3 of 4 tasks·

  ·
  1

  2

• fix(extractors): reject fields the extractor type never reads

  #7809·sandiyochristan opened Sep 30, 2026Contributor·4 tasks done·

  ·
  1

  3

• fix(openapi): send format: binary octet-stream bodies as octet-stream

  #7802·omlahore opened Sep 29, 2026·2 of 4 tasks·

  ·
  1

  2