v0.2.24 v0.2.25

medium risk

imputnet/cobaltSep 22, 2026 → Sep 23, 20261 day between releases

What's New

Adds AP4 adaptive scoring and new exploit recipes for NoSQL, deserialization, and IDOR.

New Features

  • AP4 adaptive scoring scoreboard now streams to the live view
  • New NoSQL injection exploit recipe added
  • New deserialization exploit recipe added
  • New non-numeric IDOR exploit recipe added

Upgrade Notes

No configuration changes are required for this patch update. Existing playbooks remain compatible.

The Two Releases

v0.2.24

v0.2.24

Sep 22, 2026· 30 days ago

Introduces a GraphQL security audit playbook, enhances the bug-bounty web surface scan with WAF and directory discovery tools, and maps cross-finding kill-chains to MITRE ATT&CK.

Full release notes
v0.2.25

v0.2.25

Sep 23, 2026· 29 days ago

Adds the AP4 adaptive scoring scoreboard to the live view and introduces new exploit recipes for NoSQL injection, deserialization, and non-numeric IDOR.

Full release notes