Yogesh OjhaandClaude Opus 5 9279d646eb fix(engines): custom arguments for the main scanning tools were thrown away ...

Stages pass custom arguments to nuclei, httpx, naabu, ffuf, wafw00f and
cdncheck — every one of them calls tool_args for its own binary — but
none was listed as a tool that takes them, and the validator dropped an
unlisted tool without a word. Setting nuclei arguments returned 200 and
stored nothing. The six are now listed, so what the stages already read
is what a user can set, and a tool that genuinely takes no arguments is
refused by name instead of silently ignored.

A failing tool reported only its exit code when it wrote its complaint
to stdout rather than stderr, which naabu does for a bad flag: the scan
said "naabu exited with code 2" while the reason sat one table away.
A short stdout is now used when stderr is empty, so the scan says
"naabu exited with code 2: flag provided but not defined: -source-port".

Every shipped example argument was checked against the binary it names.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01K6LcH8uUddjJbKrahf34ys

2026-09-07 00:18:27 +05:30

..

__init__.py

feat(worker): a stage that comes up short reports partial

2026-09-05 18:37:55 +05:30

executor.py

fix(engines): custom arguments for the main scanning tools were thrown away

2026-09-07 00:18:27 +05:30

fieldmap.py

fix(scans): one NUL byte in a response no longer costs a 66-minute stage

2026-09-06 03:59:33 +05:30

models.py

feat(worker): a stage that comes up short reports partial

2026-09-05 18:37:55 +05:30