v0.2.18

Name: Pentest-Swarm-AI
Author: Armur-Ai

Armur-Ai/Pentest-Swarm-AIv0.2.18Sep 21, 2026by github-actions[bot]

Upgrading?

What changed from v0.2.17 → v0.2.18?What's new in v0.4.3 after v0.2.18?

AI Summary

Pentest Swarm AI v0.2.18 introduces a real execution engine for playbooks, allowing for deterministic tool running per phase, along with embedded playbooks for better distribution. It adds new CLI flags for playbook execution and includes a rapid-response hunt for a specific Magento security vulnerability.

Key Highlights

Implementation of a real execution engine for deterministic playbook execution.
Bundled playbooks are now embedded directly into the binary for easier distribution.
New CLI flags: --scope, --format, and --report-dir added to playbook run.
Rapid-response hunt playbook for CVE-2026-75650 (Magento StyleSmuggler).
Tool options (templates/tags/paths/threads) for nuclei and httpx now honor playbook settings.

New Features

Real execution engine to run declared tools per phase deterministically.
Embedding of bundled playbooks in the binary.
Rapid-response hunt for CVE-2026-75650 (Magento StyleSmuggler).
Support for --scope, --format, and --report-dir flags in playbook runs.
Tool options for nuclei and httpx now honor playbook configuration.

Full Release Notes

## Pentest Swarm AI v0.2.18

Install via Homebrew:
```
brew install Armur-Ai/tap/pentestswarm
```

Install via AUR (once submitted):
```
yay -S pentestswarm-bin
```

Run via Docker (16 security tools pre-installed):
```
docker run --rm ghcr.io/armur-ai/pentestswarm:v0.2.18 scan example.com
```

## Changelog
### Features
* 35b084a768fb2e226957c5758ce0918ab6384016: feat(playbook): add --scope, --format, --report-dir flags to playbook run (@AkhilSharma90)
* 81fdeafcf2bed33eacb0144372d9557ccc6177e0: feat(playbook): embed bundled playbooks in the binary (distribution fix) (@AkhilSharma90)
* 063825a7fbd39a013b84e71e7f5ffd2de4bcaf7b: feat(playbook): rapid-response hunt for CVE-2026-75650 (Magento StyleSmuggler) (@AkhilSharma90)
* 7e7a13f72f9ed442cdd4b44edce25d696ddb5326: feat(playbook): real execution engine — run declared tools per phase, deterministically (@AkhilSharma90)
* cc30ad497fe0821ddff4610dfbf2b959fad28d25: feat(tools): honor playbook options for nuclei + httpx (templates/tags/paths/threads) (@AkhilSharma90)
### Docs
* 75fb1af01b92a7cb054f583435aa15b6725d295f: docs(playbook): document the CVE-2026-75650 StyleSmuggler rapid-response playbook (@AkhilSharma90)
* c496c116b6fbc4fe3af6067bcad5dd9516dedbe1: docs(playbook): document the real execution engine + run flags + embedding (@AkhilSharma90)
* b75d5d87f837347a78deee6487373b88cb018ef5: docs(playbook): fix CVE playbook example — playbook run takes only --target (@AkhilSharma90)
### Other
* 3e086527be9e3d4ced06079668f9d01d85648aa9: chore(release): 0.2.18 — real playbook execution engine + embedded playbooks (@AkhilSharma90)
* 1c5940933f29b5c684755a704589af16ba176723: chore: gitignore docs/ad/ (LinkedIn marketing assets, not part of the repo) (@AkhilSharma90)

---
Full source: github.com/Armur-Ai/Pentest-Swarm-AI

Related Repositories

ollama/ollama★ 184,234

Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

fatedier/frp★ 110,064

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

infiniflow/ragflow★ 92,629

RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs

gohugoio/hugo★ 90,198

The world’s fastest framework for building websites.

junegunn/fzf★ 83,715

:cherry_blossom: A command-line fuzzy finder