AuthProbe is a security-testing tool. Use it only against systems you own or have explicit written authorization to test. Unauthorized scanning or access of computer systems may violate laws such as the U.S. Computer Fraud and Abuse Act and equivalents elsewhere. You are responsible for ensuring you have permission.

To reduce accidental misuse, AuthProbe refuses to scan non-local targets unless you pass --i-have-authorization (or set settings.allow_remote: true), and it prints an authorized-use banner on every run.

The bundled targets/vulnerable_ats.py is intentionally insecure and exists only so the scanner has a safe, self-contained thing to test. Do not deploy it.

Please open a private GitHub Security Advisory rather than a public issue.