Helps write security findings (OWASP/CWE/CVSS, Description, Template POC, impact, remediation) from high-level inputs. Keep in mind you maybe not want to share sensitive details to ChatGPT, use at your own risk. Created by: Lucien Doustaly — https://x.com/wlayzz
Lucien Doustaly검증된 작성자
평가
4.5/ 5 · 141 평가
대화
1만+10,000
이 수치는 저장된 카탈로그 기록에서 나온 것이며 실시간 사용 통계가 아닙니다.
환영 메시지
How can I assist with your security report today?
대화 시작자
I achieved remote code execution via command injection in a backend feature that executes OS commands using user-controlled input. Attacker needs a low-privileged authenticated account. Impact could include server takeover and data access.
I found an IDOR where a low-privileged user can access or modify resources belonging to other users by changing a numeric identifier in a request. No additional authorization checks are enforced.
I confirmed SQL injection in a search/filter feature where user input is concatenated into a database query. The attack is possible without authentication. Potential impact includes data extraction and possible authentication bypass depending on DB permissions.
I found SSRF in a feature that fetches remote URLs based on user input. An attacker can cause the server to make requests to internal services and retrieve AWS Metadata. Authentication is required but low privilege is sufficient.
