False Positive Reduction
- Vulnerability deduplication by endpoint + attack vector (eliminates duplicate findings)
- Prompt hardening to block 403/public-endpoint false positives
- Session context integration for smarter vulnerability assessment
Vulnerability Management
- Added endpoint and attack_vector fields to vulnerability tracking
- New tools:
web-get-vulnerabilitiesandweb-get-vuln-detail - Unit tests for dedup, tools, and session context
TUI Improvements
- Copy button in vulnerability detail panel header
- Text selection enabled in vulnerability detail panel
Documentation
- Added HackBrowser section to README
- Expanded proxy tester documentation