Tagged vulnerabilities

Harden code against OWASP risks in input handling, auth and data storage

Pull active malware IOCs, C2 infrastructure and exploited CVE alerts

Scan project dependencies for known vulnerabilities and CVEs before releases

Evolve a security detection harness against a vulnerability corpus and grade it

Query Wiz cloud security issues, assets and vulnerabilities through Composio Rube MCP

Audit project dependencies for known vulnerabilities and wire checks into CI

Find exploitable flaws in source code with Strix, each backed by a working exploit

Patch root causes of Strix pentest findings and re-test to confirm each fix works

Triage Dependabot and container image CVEs and plan dependency and base image fixes

Scan a repo or pull request diff for vulnerabilities and suggest patches

Set up SAST scanners in CI to catch code vulnerabilities before release

Write and audit Solidity contracts to prevent common smart contract vulnerabilities

Scan a codebase for security flaws by tracing data flows like a security researcher

Scan Solidity contracts with Slither and Mythril for reentrancy and access control bugs

Check SBOM components against NVD CVEs to find vulnerable transitive dependencies

Build a GitLab CI pipeline with SAST, DAST, container and secret scanning templates

Track vulnerability age against severity SLAs with automated escalation and metrics

Deploy DefectDojo to dedupe scanner findings and track remediation through its API

Track risk acceptances with approvals, compensating controls and automatic expiry

Run recurring vulnerability scans in Nessus, Qualys or OpenVAS and track fixes

Test container breakouts via privileged pods, host mounts, runC CVEs and Docker sockets

Test API parameters and request bodies for SQL, NoSQL, LDAP injection and SSRF

Simulate BGP hijacks in a lab to test RPKI, route origin checks and monitoring

Test Android and iOS deep links for intent hijacking, data injection and redirect flaws

Find IDOR flaws by swapping object IDs across sessions with Burp Suite

Test IPv6 networks for SLAAC spoofing, rogue router advertisements and tunnel abuse

Verify and exploit MS17-010 EternalBlue on SMBv1 hosts with Nmap and Metasploit

Escalate to Domain Admin with noPac CVE-2021-42278 and CVE-2021-42287 using Impacket

Test MongoDB and CouchDB apps for NoSQL injection that bypasses login or leaks data

Test race conditions with Burp Turbo Intruder single-packet attacks on rate limits

Exploit SMB flaws with Metasploit to show risks from unpatched Windows and weak shares

Find and exploit SQL injection with manual payloads and sqlmap in authorized pentests

Find server-side template injection in Jinja2, Twig and Freemarker that reaches RCE

Bypass PHP login checks with loose comparison and magic hash type juggling

Confirm CVEs are really exploitable with Metasploit and verify patch remediation

Test WebSockets for auth bypass, cross-site hijacking and injection flaws

Test Zerologon CVE-2020-1472 to reset a DC machine password and dump domain hashes

Generate CycloneDX and SPDX SBOMs with Syft, scan them with Grype and sign with Cosign

Scan container images with Trivy for CVEs, misconfigs and secrets in CI and registries

Find cloud misconfigurations and vulnerabilities across AWS, Azure and GCP with CSPM scans

Add Semgrep, Trivy, OWASP ZAP and Gitleaks scans to CI/CD pipelines

Rank CVE backlogs by EPSS exploitation probability scores from the FIRST API

Identify, test, deploy and verify software updates to close vulnerabilities across IT

Set up Rapid7 InsightVM consoles, scan engines and credentialed vulnerability scans

Write custom Semgrep YAML rules to catch app-specific bugs and enforce coding standards

Automate OpenVAS scans with python-gvm and turn Greenbone XML reports into findings

Design a vulnerability SLA program with severity matrices, exceptions and escalations

Build a vulnerability SLA tracker with breach detection, alerts and compliance metrics

Run OWASP ZAP baseline and API scans in GitHub Actions and GitLab CI as quality gates