All pull requests

Pull requests

• feat(benchmarks): add a w3af DAST integration

  #828·TianHengZhuang opened Oct 9, 2026Contributor·

  ·
  1

  5

• feat: add two secure JWT levels that read the token from the Authorization header (#402)

  #826·vianbas opened Oct 8, 2026Member·

  ·
  1

  3

• Add PMD SAST scanner integration to benchmark

  #824·connorklose12 opened Oct 8, 2026·

  ·
  1

  4

• feat(benchmarks): add a Nuclei DAST integration

  #823·TianHengZhuang opened Oct 7, 2026Contributor·

  ·
  1

  6

• fix: make UnrestrictedFileUpload work when the app is a jar (or run as non-root)

  #821·pereiravp opened Oct 4, 2026Member·5 tasks done·

  ·
  1

  9

• feat(benchmarks): add Wapiti DAST scanner integration (resolves #807)

  #820·souravC01 opened Oct 3, 2026·

  ·
  1

  25

• feat: add WebSocket vulnerability module (draft, framework + levels 1 to 3)

  #814·pereiravp opened Sep 27, 2026Member·3 tasks done·

  ·
  2

• Fix modern ZAP benchmark runner kill

  #802·preetkaran20 with CopilotAI opened Sep 18, 2026·

  ·
  1

  

• Add CSRF vulnerability lab with 5 challenge levels

  #758·mmustafasenoglu opened Aug 15, 2026·

  ·
  1

  34

• feat: add CSRF vulnerability lab (Fixes #713)

  #738·mmustafasenoglu opened Aug 14, 2026·

  ·
  1

  27

• Enhance vulnerability descriptions with Source, Solution, and Reference (Fixes #89)

  #735·MixhizoR opened Aug 12, 2026Contributor·

  ·
  1

  7

• Add challenge mode for Path Traversal (#560), XSS (#562), and XXE (#563)

  no-pr-activity
  #710·Mubashir78 opened Jul 23, 2026Contributor·

  ·
  3

  10

• Add Challenge mode to JWT Vulnerability (#557)

  #688·Lalatenduswain opened Jul 6, 2026·

  ·
  1

  11

• Implement Level 6 (UUID) and Level 7 (REST Update) for IDOR #512

  #628·anatolii-kandiuk opened May 21, 2026·

  ·
  40