ExploitSpec security regression tests

Version updated for https://github.com/pazent/exploitspec to version v0.1.0.

  • This action is used across all versions by 0 repositories.

Action Type

This is a Composite action.

Go to the GitHub Marketplace to find the latest changes.

Action Summary

ExploitSpec is a tool that converts confirmed HTTP exploits into repeatable tests to ensure security vulnerabilities are not reintroduced. It focuses on proven HTTP exploits by running them multiple times to verify they pass without regression. The action provides features like multi-actor support, dynamic workflows, and local execution, making it suitable for maintaining the security of applications.

What’s Changed

ExploitSpec — RED, GREEN, STABLE

Turn a proven HTTP exploit into a permanent, deterministic security regression test.

Install

Install the GitHub Action from Marketplace, download the archive for your platform below and verify it with SHA256SUMS, or install the CLI with Go:

go install github.com/pazent/exploitspec/cmd/exploitspec@v0.1.0

What ships in v0.1.0

  • RED → GREEN → STABLE calibration against vulnerable and fixed baselines
  • isolated multi-actor HTTP sessions, captures, JSONPath, regex, and header assertions
  • conservative cURL import that redacts secrets without executing the command
  • safe redirects, response limits, explicit host authorization, and metadata-IP blocking
  • text, JSON, and JUnit reports with deterministic exit codes
  • a free composite GitHub Action and versioned JSON Schema
  • Linux, macOS, and Windows archives for AMD64 and ARM64

ExploitSpec is Apache-2.0, local-first, account-free, telemetry-free, and has no paid tier.

Every security bug deserves a regression test.