ExploitSpec v0.2.0

ExploitSpec v0.2.0 adds a bounded, local-only path from a HAR 1.2 capture to a
reviewable version 1 security regression spec.

HAR import

exploitspec import har --list first prints value-free request summaries. An
explicit one-based --entry is then required to create a spec; no request is
selected implicitly and no captured traffic is replayed.

The generated YAML replaces the captured origin, path segments, query and form
names and values, supported header values, JSON object keys, and JSON string
leaves with positional EXPLOITSPEC_HAR_* environment placeholders. Importing
a capture never authorizes its target: non-loopback execution still requires an
explicit run --allow-host decision.

The importer accepts at most 8 MiB and 256 entries, caps generated placeholders
at 4,096, and keeps the ordinary 1 MiB spec limit. Ambiguous JSON members,
custom header names, encoded or binary bodies, multipart data, opaque media
types, and JSON numbers, booleans, or null values fail closed. The documented
format remains version 1.

Distribution integrity

The release contains Linux, macOS, and Windows archives plus SHA256SUMS.
GitHub build-provenance attestations cover every archive and the checksum
manifest and can be checked with gh attestation verify.

Full comparison: v0.1.0...v0.2.0

ExploitSpec v0.1.0

Turn a proven HTTP exploit into a permanent, deterministic security regression test.

Install

Install the GitHub Action from Marketplace, download the archive for your platform below and verify it with SHA256SUMS, or install the CLI with Go:

go install github.com/pazent/exploitspec/cmd/exploitspec@v0.1.0

What ships in v0.1.0

• RED → GREEN → STABLE calibration against vulnerable and fixed baselines
• isolated multi-actor HTTP sessions, captures, JSONPath, regex, and header assertions
• conservative cURL import that redacts secrets without executing the command
• safe redirects, response limits, explicit host authorization, and metadata-IP blocking
• text, JSON, and JUnit reports with deterministic exit codes
• a free composite GitHub Action and versioned JSON Schema
• Linux, macOS, and Windows archives for AMD64 and ARM64

ExploitSpec is Apache-2.0, local-first, account-free, telemetry-free, and has no paid tier.

• GitHub Marketplace
• Passing GitHub Actions template
• BOLA/IDOR case study
• Quick start
• Specification
• Security model
• Launch announcement

Every security bug deserves a regression test.