v0.2.21 v0.2.22
medium risk
iii-hq/iiiSep 22, 2026 → Sep 22, 20260 days between releases
What's New
Adds race-condition primitives, SQLMap mode, and new injection recipes
New Features
- Adds race-condition primitive (T1.5) for HTTP requests
- Adds SQLMap exploitation mode (T1.3) to prove impact
- Adds injection recipes for SSTI, path-traversal, and XXE
- Labels MITRE techniques with ATT&CK names in reports
The Two Releases
v0.2.21
v0.2.21
Sep 22, 2026· 30 days ago
Introduces a cloud-exploitation playbook for IAM privesc and an adaptive attack-path scoring animation. It also adds exploit recipes for BFLA, SSRF, and GraphQL along with MITRE integration in reports.
Full release notesv0.2.22
v0.2.22
Sep 22, 2026· 30 days ago
Enhances exploitation capabilities with race-condition primitives, SQLMap exploitation mode, and injection recipes for SSTI, path-traversal, and XXE. Improves reporting by labeling MITRE techniques with their ATT&CK names.
Full release notes