Highlights

Fixed: LAN/remote access hung on "Connecting…" (#159). Opening RedAmon by IP or hostname on a plain docker compose up deploy (no reverse proxy) left the Terminal and AI Agent stuck on "Connecting…" forever, because the browser dialed the web port, which runs no WebSocket server. Only localhost worked. The server now injects a runtime routing hint so the browser reaches the agent's published port directly (ws://<host>:8090/ws/*) with zero config. Reverse-proxied and single-host deploys keep same-origin routing untouched. Runtime-tunable (no rebuild) via AGENT_WS_MODE / AGENT_WS_PUBLIC_URL.

Fixed: Neo4j authentication error / rate-limit lockout (#160). A NEO4J_PASSWORD in .env that disagreed with the password baked into the neo4j data volume surfaced later as a cryptic AuthenticationRateLimit. redamon.sh now verifies the password against the live database on install/update, clears the lockout, and reconciles the volume to your .env value, or stops with clear step-by-step remediation. The insecure changeme123 default is removed everywhere; Compose fails closed if the password is unset.

Changed: TrafficMind capture-proxy config is now DB-driven and hot-reloaded. No more env drift: the database is the single source of truth, materialized to the credential-free proxy and hot-reloaded within seconds. Egress and body-storage settings apply live with no restart, and any start path converges to the DB.

Fixed: Metasploit MCP progress server no longer spams the kali-sandbox log with BrokenPipeError when a client disconnects mid-response.

Changed: LFI and SSTI attack skills sharpened (general methodology: include-vs-stream sink discriminator, log-poisoning hygiene, and a filter-bypass menu for character-restricted template sinks).

Upgrade

./redamon.sh update

Existing installs auto-reconcile the Neo4j password and rebuild the affected images in one step. Databases, scan results, and reports are preserved (volumes are never deleted).

Full details in CHANGELOG.md.