mirror of
https://github.com/Strategic-Automation/violin.git
synced 2026-08-14 12:33:37 +02:00
- _method_route_in_text now accepts '-X POST <url>' reproduction commands (quoted URLs no longer break the match) — recovers referral-abuse - coupon-100-discount: decisive patterns (INTERNAL100 / 'discounted to $0') kill the false positive from a neg-qty finding whose checkout sent coupon_code:null - weak-admin-creds: decisive patterns (DefaultCredentials / admin:password) stop mass-assign role-granted text from confirming it - vuln-research playbook + hypothesis template: mandate 1:N Linked findings (an unlinked FIND file scores 0 even with perfect evidence) Calibration still 20/20 + 0/0. Latest run re-scored: 6/20, now all true positives (false coupon + false creds removed, referral recovered).