ExploitSpec v0.1.0 — turn proven exploits into permanent regression tests

[Pazificateur69]

Pentest findings should not die in a PDF.

I released ExploitSpec v0.1.0, a free and open-source runner that turns a proven HTTP exploit into a deterministic regression test.

The loop is deliberately small:

1. Import a sanitized cURL request.
2. Describe the security invariant in readable YAML.
3. Prove RED on the vulnerable build.
4. Prove GREEN after the fix.
5. Keep it STABLE in CI.

Try the complete local demo first — it starts only synthetic loopback targets:

git clone https://github.com/pazent/exploitspec.git
cd exploitspec
make demo

Then install the CLI with
go install github.com/pazent/exploitspec/cmd/exploitspec@v0.1.0, install the
GitHub Action from Marketplace,
or fork the passing consumer template.

What ships in v0.1.0:

• a deterministic Go CLI with no LLM in the execution path;
• RED → GREEN → STABLE calibration;
• sanitized cURL import that fails closed around secrets;
• captures, JSONPath assertions, isolated cookie jars, and safe redirects;
• text, JSON, and JUnit reports;
• a free GitHub Action and a versioned open schema;
• Linux, macOS, and Windows binaries with SHA-256 checksums.

ExploitSpec is local-first, Apache-2.0, account-free, telemetry-free, and has no paid tier. There is one edition: the complete one.

It is not a vulnerability scanner. It starts where a pentester already proved the bug and makes sure the same exploit never silently comes back.

Try the demo and send technical feedback or a sanitized real-world workflow:

• Repository
• GitHub Marketplace
• Passing GitHub Actions template
• BOLA/IDOR case study
• v0.1.0 release
• Specification
• Roadmap

Every security bug deserves a regression test.