All pull requests

Pull requests

• Add crt.sh Certificate Transparency subdomain enumeration tool

  #300·devilking7x opened Nov 11, 2026·

  ·

• Add HexStrike Command Center web dashboard

  #299·lsrx510srxl-arch opened Nov 8, 2026·

  ·

• Fix placeholder paths in hexstrike-ai-mcp.json

  #298·lsrx510srxl-arch opened Nov 8, 2026·

  ·

• fix(exploits): escape {query} brace crashing SQLi exploit generation

  #295·harshitgavita-07 opened Oct 31, 2026·

  ·

• fix(mcp): remove stray self. references breaking two AI analysis tools

  #294·harshitgavita-07 opened Oct 31, 2026·

  ·

• fix: make server command timeout configurable

  #293·CamranShahvali opened Oct 30, 2026·

  ·
  2

• Security: bind to localhost, require an API token off-host, confine file paths

  #292·wilsonhj opened Oct 28, 2026·

  ·
  2

• fix: broken /api/visual/* routes + /api/command PATH (issues #001, #002); add WEP methodology doc

  #291·curtisrichman666 opened Oct 28, 2026·

  ·

• app.run honors API_HOST & --host CLI arg

  #290·SYANiDE- opened Oct 26, 2026·

  ·

• fix(security): guard legacy command API configuration

  #289·pei711 opened Oct 22, 2026·

  ·
  1

• HTTPS + threaded server, web console, and orchestration layer (chains/skills/agents/workflows)

  #288·DamianLevy87 opened Oct 21, 2026·

  ·

• Add root / index endpoint to fix 404 on GET /

  #287·DamianLevy87 opened Oct 21, 2026·

  ·

• docs: correct stale MCP tool names in README

  #280·dajiaohuang opened Oct 19, 2026·

  ·

• fix(files): contain FileOperationsManager paths inside the sandbox (CWE-22)

  #278·bharathvemula opened Oct 17, 2026·

  ·

• fix(vuln-intel): use exploits_found key in threat-feeds correlation and mark simulated IP/hash results

  #277·bharathvemula opened Oct 12, 2026·

  ·
  1

• New files from Fly.io Launch

  #276·zio289360 opened Oct 9, 2026·

  ·

• ohoiii

  #275·devilcompetition opened Oct 8, 2026·

  ·
  1

• Optimize cyclic payloads and add host process monitor

  #273·Tone730 opened Oct 1, 2026·

  ·

• fix: installer + fast accurate tool detection + MCP handshake/requirements fixes (v6.0.1)

  #269·ZanderoDev opened Sep 13, 2026·

  ·

• Medin v20260909

  #267·smedina78 opened Sep 9, 2026·

  ·

• Fix command injection via additional_args across all /api/tools/* endpoints

  #266·carfeii opened Sep 9, 2026·

  ·
  1

• Fix command injection in nmap/gobuster target parameters

  #264·carfeii opened Sep 9, 2026·

  ·

• docs: add reproducibility note

  #240·Nortaq-PlayNexus opened Sep 4, 2026·

  ·

• Fix broken star history chart

  #234·FaintFlower opened Aug 17, 2026·

  ·
  1

• fix: restore visual summary reports

  #233·Iams4kura opened Aug 16, 2026·

  ·
  1