We’ve added attack support. PTK now ships with CVE-focused DAST modules that use the React2Shell attack flow, including coverage for scenarios like CVE-2025-55182-style labs.