HunterX Changelog
Detailed list of changes, improvements, and fixes for each HunterX release.
Version 6.0.0 (July 15, 2026)
Added
- Enhanced AI reasoning engine with improved consensus algorithms
- New cloud security skills: Kubernetes admission controller review, IaC template scanning
- API rate limiting and quota management for enterprise deployments
- Support for custom AI model endpoints and private GPT-4 deployments
- Advanced payload mutation engine with context-aware selection
Changed
- Improved CLI argument parsing and validation
- Updated default timeout values for better reliability
- Enhanced Docker image size reduction (40% smaller)
- Refactored plugin architecture for easier third-party extensions
- Improved logging structure with standardized formats
Fixed
- False positive reduction in XSS detection algorithms
- Memory leak in long-running API server mode
- SSL certificate validation issues with certain enterprise CAs
- Race condition in concurrent scan job handling
- Incorrect CVE mapping for specific vulnerability types
Security
- Updated dependency tree to address known vulnerabilities
- Enhanced input validation to prevent injection attacks
- Improved secrets management in configuration files
- Fixed potential information disclosure in error messages
Version 5.2.0 (April 22, 2026)
Added
- New AWS S3 bucket enumeration and misconfiguration checks
- GraphQL introspection depth limiting to prevent resource exhaustion
- Improved WAF bypass techniques for cloud metadata endpoints
- Enhanced reporting options with customizable templates
Changed
- Updated Chromium embedded version for better compatibility
- Improved JSON report structure for easier parsing
- Enhanced error messaging for network connectivity issues
- Optimized memory usage during large-scale assessments
Fixed
- False negatives in specific SQL injection payloads
- Inaccurate subdomain enumeration in certain network configurations
- API authentication token expiration handling
- Report generation failures with special characters in target names
Version 5.1.0 (January 10, 2026)
Added
- Initial support for OAuth2 flow analysis and token validation
- Improved user-agent rotation and browser fingerprint evasion
- Enhanced CLI completion support for bash and zsh shells
- Basic Kubernetes API server security assessments
Changed
- Default scan profile changed from 'internal' to 'bounty' for better general use
- Improved credential stuffing detection accuracy
- Enhanced mobile application testing capabilities
- Updated built-in payload collections with latest evasion techniques
Fixed
- Incorrect CWE mapping for certain deserialization vulnerabilities
- Memory corruption in high-concurrency scenarios
- Inconsistent behavior in stealth mode timing
- Export failures when special characters present in file paths
How to Read This Changelog
This changelog follows the Keep a Changelog format with the following categories:
Added
New features and capabilities introduced in this version.
Changed
Modifications to existing functionality.
Fixed
Bug corrections and issue resolutions.
Security
Security-related fixes and improvements.