Starstruk Logo MarkStarstruk

v0.2.21

gohugoio/hugov0.2.21Sep 22, 2026by github-actions[bot]

Upgrading?

What changed from v0.2.20 → v0.2.21?What's new in v0.2.22 after v0.2.21?

AI Summary

Adds a cloud exploitation playbook for IAM privilege escalation and various exploit recipes. Enhances reports with MITRE integration.

Key Highlights

  • Cloud exploitation playbook (Theme 2) for IAM privilege escalation
  • Theme 1 exploit recipes (BFLA/SSRF/GraphQL/auth-bypass)
  • AP6 positioning
  • MITRE integration in reports (T3.1)

New Features

  • Cloud exploitation playbook (IAM privesc)
  • Theme 1 exploit recipes
  • AP6 positioning
  • MITRE integration in reports

Full Release Notes

## Pentest Swarm AI v0.2.21

Install via Homebrew:
```
brew install Armur-Ai/tap/pentestswarm
```

Install via AUR (once submitted):
```
yay -S pentestswarm-bin
```

Run via Docker (16 security tools pre-installed):
```
docker run --rm ghcr.io/armur-ai/pentestswarm:v0.2.21 scan example.com
```

## Changelog
### Features
* c5d44c5dd8db0174937ba921bb740371c8589b54: feat(playbook): Theme 2 — cloud-exploitation playbook (IAM privesc pathing) (@AkhilSharma90)
* 637cb2da765a5399b08765a97e5ac7300b1bc945: feat: AP6 positioning + Theme 1 exploit recipes (BFLA/SSRF/GraphQL/auth-bypass) + T3.1 MITRE in reports (@AkhilSharma90)
### Docs
* d8226c5a1d83ad3b56016dfd9a1e2e6ea5a6a9e5: docs(readme): AP5 — adaptive attack-path scoring animation (GIF) in the hero (@AkhilSharma90)
### Other
* f0c832d22b34392b832239bf25f67ebb42325d1e: chore(release): 0.2.21 — positioning, exploit-class recipes (BFLA/SSRF/GraphQL), MITRE reports, adaptive-scoring GIF, cloud playbook (@AkhilSharma90)

---
Full source: github.com/Armur-Ai/Pentest-Swarm-AI

Related Repositories

ollama/ollama★ 184,234

Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.

fatedier/frp★ 110,064

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

infiniflow/ragflow★ 92,629

RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs

junegunn/fzf★ 83,715

:cherry_blossom: A command-line fuzzy finder

caddyserver/caddy★ 78,251

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS