◆ Exploitation & C2

xalgorix

v4.6.5 open-source

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

source ↗ website ↗ rss ↗ last repo push Aug 30, 2026

XALGORIX_PPROF_ADDR=127.0.0.1:6060 xalgorix
curl -s https://xalgorix.example.com/api/findings/retest/<id> \
  -H 'Authorization: Bearer <token>'

Summary

Autonomous AI pentesting agents — real-time reconnaissance, vulnerability detection, and exploitation orchestration. Go + TypeScript.

Release history

v4.6.5 Aug 30, 2026 · issue 012

xalgorix v4.6.5 adds opt-in Discord/Telegram scan-completion notifications via XALGORIX_NOTIFY_SCAN_COMPLETE
└──▷ GET THIS VERSION
```
$ git clone --branch v4.6.5 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:
$ git checkout v4.6.5
```
- ›Adds XALGORIX_NOTIFY_SCAN_COMPLETE environment variable (default false) to opt in to Discord and Telegram notifications when a scan completes, separate from per-vulnerability alerts.
v4.6.3 Aug 27, 2026 · issue 011

xalgorix v4.6.3 surfaces LLM token usage and hosted cost info at scan completion.
└──▷ GET THIS VERSION
```
$ git clone --branch v4.6.3 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:
$ git checkout v4.6.3
```
- ›Displays LLM token usage and a hosted cost note at the end of each scan run.
v4.6.2 Aug 26, 2026 · issue 011

Adds native MiniMax web_search integration when the MiniMax provider is selected.
└──▷ GET THIS VERSION
```
$ git clone --branch v4.6.2 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:
$ git checkout v4.6.2
```
- ›Adds native web_search support via the MiniMax provider, enabling web search queries to route through MiniMax's own search capability.
v4.5.156 Aug 23, 2026 · issue 011

xalgorix v4.5.156 adds a light/dark/system theme toggle and multi-file Postman upload with variable and auth resolution.
└──▷ GET THIS VERSION
```
$ git clone --branch v4.5.156 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:
$ git checkout v4.5.156
```
- ›Adds multi-file Postman collection upload with automatic variable and authentication resolution in the context view.
- ›Adds a light theme to the web UI with a light/dark/system toggle for display preference control.
v4.5.151 Aug 16, 2026 · issue 011

xalgorix v4.5.151 adds configurable Gemini safety threshold for authorized security testing.
└──▷ GET THIS VERSION
```
$ git clone --branch v4.5.151 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:
$ git checkout v4.5.151
```
- ›Adds configurable Gemini safety threshold to support authorized security testing use cases.
v4.5.141 Aug 14, 2026 · issue 011

xalgorix v4.5.141 adds an opt-in loopback pprof debug server via XALGORIX_PPROF_ADDR.
└──▷ GET THIS VERSION
```
$ git clone --branch v4.5.141 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:
$ git checkout v4.5.141
```
└──▷ TRY IT
Enable the pprof debug server on a local port to capture CPU or memory profiles during a live xalgorix run.
```
$ XALGORIX_PPROF_ADDR=127.0.0.1:6060 xalgorix
```
- ›Adds XALGORIX_PPROF_ADDR environment variable to enable an opt-in loopback pprof debug server for runtime profiling.
v4.5.140 Aug 13, 2026 · issue 011

xalgorix v4.5.140 adds Simplified Chinese (zh-CN) language support.
└──▷ GET THIS VERSION
```
$ git clone --branch v4.5.140 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:
$ git checkout v4.5.140
```
- ›Adds Simplified Chinese (zh-CN) language support to the interface.
v4.5.134 Aug 9, 2026 · issue 011

xalgorix v4.5.134 adds recommendations for current frontier models.
└──▷ GET THIS VERSION
```
$ git clone --branch v4.5.134 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:
$ git checkout v4.5.134
```
- ›Adds recommendations for current frontier models.
v4.5.133 Aug 9, 2026 · issue 011

xalgorix v4.5.133 adds an interactive wizard to simplify first-run onboarding.
└──▷ GET THIS VERSION
```
$ git clone --branch v4.5.133 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:
$ git checkout v4.5.133
```
- ›Adds an interactive wizard for first-run onboarding to guide new users through initial setup.
v4.5.126 Aug 9, 2026 · issue 011

xalgorix v4.5.126 adds authenticated re-test API endpoints to actively recheck a single finding without a full scan.
└──▷ GET THIS VERSION
```
$ git clone --branch v4.5.126 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:
$ git checkout v4.5.126
```
└──▷ TRY IT
Poll a re-test job for its verdict after submission, checking whether the finding is still_vulnerable, fixed, or inconclusive.
```
$ curl -s https://xalgorix.example.com/api/findings/retest/<id> \
  -H 'Authorization: Bearer <token>'
```
- ›Adds POST /api/findings/retest endpoint to actively re-check a single stored finding without launching a full target scan.
- ›Adds GET /api/findings/retest/{id} endpoint to poll the status and verdict of a running or completed re-test job.
- ›Introduces an opaque auth_profile argument (primary / secondary / none) for per-job credentials that remain server-side and never appear in job state or tool schemas.
- ›Terminal jobs report a meaningful_attempt field with counts of request, affected-request, and affected-variant.
v4.5.125 Aug 7, 2026 · issue 011

xalgorix v4.5.125 adds split-APK bundle support and configurable OOB interaction type filtering
└──▷ GET THIS VERSION
```
$ git clone --branch v4.5.125 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:
$ git checkout v4.5.125
```
- ›Supports split-APK bundle formats (.apks, .xapk, .aab) and allows sparse APKs that were previously rejected.
- ›Enables selection of which out-of-band interaction types (DNS, HTTP, SMTP) count as callbacks.