- New discovery engine (engine/discovery.sh): crawls target for real
URLs, forms, parameters, and API endpoints before attacking
- New nuclei vector (21): runs nuclei templates for real CVE detection
(critical/high/medium severity)
- Rebuilt SQLi vector: tests discovered forms and URL params with
error-based and time-based blind payloads, sqlmap injection
- Rebuilt XSS vector: multi-context payloads against discovered
forms/params, confirms payload reflection
- Rebuilt LFI vector: tests all discovered and common file parameters
with traversal payloads, confirms by reading /etc/passwd
- Updated main analyzer with 5-step pipeline: connectivity →
discovery → recon → Ollama brain → exploitation
