Fetching metadata from the HF Docker repository... Today
-
Forward required program identity even when it matches the default agent literal Running
Wuhp
-
Keep derived scope candidates compact and analyze their source instructions once
Wuhp
-
Preserve program identity, broaden compatible root-scope pipelines and remove 100-target cap
Wuhp
-
Fix keyless WPScan, Arjun parameter 404 handling and discovery identity policy checks
Wuhp
-
Integrate compact bounty browser into scope and fix reusable identity setup
Wuhp
Yesterday
-
Use SQLmap's advertised identity option and verify installed parser offline
Wuhp
-
Keep published URL scope constraints in exact-URL discovery scan profiles
Wuhp
-
Correct literal escaping in no-automation policy matcher
Wuhp
-
Handle quoted policy identity literals and explicit automation bans
Wuhp
-
Preserve requested pipeline order when applying program constraints
Wuhp
-
Add bbcollect bounty discovery and program-specific scope/rule enforcement
Wuhp
-
Use observed live routes for Arjun and skip missing baseline endpoints
Wuhp
-
Match native Dalfox budget notices across equivalent root URL forms
Wuhp
-
Fix Arjun unhealthy-response crash and improve bounded Dalfox/Retire coverage
Wuhp
2 days ago
-
Give Amass startup headroom and distinguish completed policy early stops
Wuhp
-
Fix state-counter pointer validator binding
Wuhp
-
Add private bounded race replay and NoSQL HTTP operator checks
Wuhp
-
Add scoped GraphQL, CORS, takeover, S3, WebSocket and VCS metadata reviews
Wuhp
-
Add keyless native WAFW00F inventory and supplied-source Semgrep review
Wuhp
-
Extend bounded ZAP passive waits and persist upgrade-safe browser preferences
Wuhp
-
Use native TruffleHog verification across all built-in detectors
Wuhp
-
Add opt-in bounded TruffleHog provider verification with redacted result states
Wuhp
-
Tighten delimited input validation and verify format-help outside-click behavior
Wuhp
-
Add direct URL and multi-format target imports with accessible format examples
Wuhp
-
Deduplicate equivalent origin URLs before selecting extra crawl seeds
Wuhp
-
Add customizable guided pipeline planning, scoped data reuse and HF coverage profiles
Wuhp
-
Keep the WPScan source label on its skipped preflight result
Wuhp
-
Fix idle queue order, scoped parameter handoff and redirected page sampling diagnostics
Wuhp
-
Correct indentation of the gated ZAP session reset
Wuhp
-
Add optional bounded parallel target scheduling with shared ZAP/cache isolation
Wuhp
-
Fix narrow-screen scope controls and keep explicit IDOR references single-target
Wuhp
-
Add bounded IDOR-Forge comparison profile and reorganize scan workspace, jobs and logs
Wuhp
-
Keep Nettacker DNS validation independent of the Wapiti environment
Wuhp
-
Reject ambiguous double-slash paths in template drafts
Wuhp
-
Complete HF-aware remaining scanner profiles and artifact-aware applicability
Wuhp
-
Add keyless Retire.js and bounded Wapiti modules with opt-in Nuclei checks
Wuhp
-
Install Nikto reporting dependencies and preserve explicit URL ports
Wuhp
-
Add bounded Nikto, WordPress-gated WPScan and HTTPS-only testssl modules
Wuhp
-
Preserve timed-out module output and isolate ZAP reporting failures
Wuhp
-
Handle nested ZAP passive tasks and validate Dalfox CLI flags in Docker
Wuhp
-
Detect stalled global ZAP passive queues without masking pending work
Wuhp
-
Bound Dalfox v3 scan phases and reuse same-host Arjun GET parameters
Wuhp
-
Define GAU mode in validated scan options model
Wuhp
-
Repair Python newline serialization in GAU mode update
Wuhp
-
Add GAU fast balanced mode and opt-in expanded archives with clearer coverage reporting
Wuhp
-
Expose actual scanner file exposure candidates in Findings panel
Wuhp
-
Wait longer for ZAP passive scans and paginate exact-host alerts
Wuhp
-
Run Nuclei exposure templates at web origin and avoid Arjun static manifest targets
Wuhp
3 days ago
-
Run Nuclei template preflight automatically before queuing scans
Wuhp
-
Preflight Nuclei combinations and enforce per-job HTTP request budget
Wuhp