https://cybertoolchain.io/tools/shannon New releases and features in shannon, tracked by The Cyber Toolchain. en Tue, 27 Oct 2026 06:01:07 GMT https://github.com/KeygraphHQ/shannon/releases/tag/v3.5.0 https://github.com/KeygraphHQ/shannon/releases/tag/v3.5.0 Tue, 27 Oct 2026 06:01:07 GMT Shannon v3.5.0 adds an experimental `--exp-php2shell` upgrade-verification probe to the CLI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds experimental `--exp-php2shell` upgrade-verification probe flag to the CLI for testing PHP-to-shell attack paths.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v3.4.0 https://github.com/KeygraphHQ/shannon/releases/tag/v3.4.0 Tue, 06 Oct 2026 05:49:57 GMT Shannon v3.4.0 adds an exploit-readiness probe and `--validate-auth` preflight mode, plus hyperlinked finding IDs in PDF reports.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--validate-auth` mode to the `preflight` command to verify authentication configuration before a pentest run.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds an exploit-readiness probe to the `preflight` subsystem to confirm the environment is ready to execute exploits. • Links finding IDs in the PDF report to their corresponding detail sections for faster navigation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v3.3.0 https://github.com/KeygraphHQ/shannon/releases/tag/v3.3.0 Mon, 21 Sep 2026 12:58:11 GMT Shannon v3.3.0 refreshes the AI model catalogue over the network at scan start so new models are available without a tool update.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Refreshes the model catalogue over the network at scan start, ensuring newly available AI models are accessible without updating the tool.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v3.2.0 https://github.com/KeygraphHQ/shannon/releases/tag/v3.2.0 Tue, 08 Sep 2026 21:04:44 GMT Shannon v3.2.0 adds custom pi model configs with registry-resolvable IDs and surfaces startup/preflight failures. • Supports custom pi model configs with registry-resolvable model IDs and distinct model error codes. • Surfaces startup and preflight failures so misconfiguration errors are visible before a scan begins. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v3.1.0 https://github.com/KeygraphHQ/shannon/releases/tag/v3.1.0 Thu, 03 Sep 2026 14:40:42 GMT Shannon v3.1.0 adds per-provider custom base URL support for the OpenAI Responses API. • Adds per-provider custom base URL configuration for the OpenAI Responses API, enabling use of self-hosted models, gateways (e.g. OpenRouter, LiteLLM), or any compatible endpoint. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v2.7.0 https://github.com/KeygraphHQ/shannon/releases/tag/v2.7.0 Fri, 28 Aug 2026 17:19:00 GMT Shannon v2.7.0 adds xAI (Grok) subscription auth so pentests can run on an xAI plan instead of API credits. • Supports running pentests authenticated via an xAI (Grok) subscription, removing the need for pay-per-token API credits. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v1.7.0 https://github.com/KeygraphHQ/shannon/releases/tag/v1.7.0 Fri, 12 Jun 2026 09:27:41 GMT Shannon v1.7.0 adds support for Claude Fable 5 via upgraded Agent SDK • Adds `Claude Fable 5` support by upgrading the underlying Claude Agent SDK to version `0.3.173` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v1.6.0 https://github.com/KeygraphHQ/shannon/releases/tag/v1.6.0 Thu, 11 Jun 2026 20:42:27 GMT shannon v1.6.0 upgrades AI backends to Opus 4.8 and Claude Agent SDK 0.3.163 • Upgrades underlying AI models to use Opus 4.8 Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v1.5.0 https://github.com/KeygraphHQ/shannon/releases/tag/v1.5.0 Fri, 05 Jun 2026 09:28:30 GMT Shannon v1.5.0 adds MCP collector support for structuring intermediate deliverables in the worker • Adds `worker` support for MCP collectors to structure intermediate deliverables Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v1.4.0 https://github.com/KeygraphHQ/shannon/releases/tag/v1.4.0 Thu, 28 May 2026 17:49:46 GMT shannon v1.4.0 adds /etc/hosts forwarding to worker containers and agent session sharing • `docker` mode now forwards the host's `/etc/hosts` entries into each worker container • Authenticated preflight sessions are shared across multiple agents Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v1.3.0 https://github.com/KeygraphHQ/shannon/releases/tag/v1.3.0 Tue, 26 May 2026 05:27:35 GMT shannon v1.3.0 adds auth-validation preflight and email_login credentials to the CLI • Adds `email_login` as a supported credential type for authenticating with remote targets Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v1.1.0 https://github.com/KeygraphHQ/shannon/releases/tag/v1.1.0 Tue, 21 Apr 2026 07:58:05 GMT Shannon v1.1.0 adds library-pipeable pipeline core, provider extensions, and read-only user repos. • `extract_pipeline_core` for library consumption • mount user repo as read-only with writable shannon overlay • provider extensions support (drops `claude-code-router` mode) • use structured outputs for vuln agent exploitation queues Breaking changes: • `claude-code-router` mode is removed and no longer supported. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon https://github.com/KeygraphHQ/shannon/releases/tag/v1.0.0 https://github.com/KeygraphHQ/shannon/releases/tag/v1.0.0 Thu, 26 Mar 2026 21:12:13 GMT New CLI flags (--output, --workspace), new providers (Vertex AI, OpenRouter, DeepSeek), and pipeline controls • Adds `--output` flag to specify a configurable output directory for scan results and deliverables • Adds `--workspace` flag to resume workflows from a named workspace or list available workspaces • Adds Google Vertex AI provider support with automatic service account authentication • Adds OpenRouter provider support for claude-code-router multi-model testing • Adds DeepSeek provider support for claude-code-router multi-model testing • Adds custom base URL support for Anthropic-compatible endpoints via environment variable or config • Adds configurable pipeline retry and concurrency settings to control worker execution • Adds named workspaces and workspace listing capability • Adds preflight validation phase that runs before scanning with structured error reporting • Expands injection analysis scope to include LFI, RFI, SSTI, Path Traversal, and Deserialization Full history on Cyber Toolchain: https://cybertoolchain.io/tools/shannon