j3ssie 69e3be23eb feat: add passive security scanning modules for frameworks and APIs ...

- Add 40+ new passive vulnerability detection modules covering:
  - Build/deployment misconfigurations (Next.js, Vite, webpack source maps)
  - Content Security Policy weakness auditing
  - HSTS preload readiness and secure header validation
  - API version detection, gRPC-Web, and WebAssembly discovery
  - Framework fingerprinting (WordPress, Drupal, Joomla, Firebase, Laravel, ASP.NET, Spring, Express, Rails, Django, Flask, FastAPI)
  - Cloud storage detection and signed URL/SAS token leaks
  - REST API analysis with pagination and sensitive field detection
  - GraphQL introspection and error information leakage
  - Debug information exposure (Python, Rails, Django)
  - Session management auditing for Express.js
  - CORS and cache poisoning vulnerabilities

All modules are passive-only with no external HTTP requests sent beyond initial scanning traffic.

2026-04-05 14:32:02 +08:00

..

complex-workflows

feat: add inline module support and improve version output

2026-01-28 16:15:57 +08:00

demo

feat: add LLM step executor with vision and tool support, event workflow system, and inheritance

2026-01-20 18:23:57 +08:00

full-field-workflows

feat: add run cancellation, event enhancements, and performance optimizations

2026-01-24 01:11:33 +08:00

sample-jsonl-output

feat: add passive security scanning modules for frameworks and APIs

2026-04-05 14:32:02 +08:00

workflows

feat: update Next.js build assets and add cloud setup E2E tests

2026-04-04 13:57:34 +08:00