Web CVE Hunting
Before or during a web assessment, always fetch the latest CVEs related to the target's web stack (e.g., Apache, Nginx, Spring, Django, Express).
Objective
If only the web testing type is selected, the agent must be able to independently look up the latest vulnerabilities to ensure no newly discovered flaws are missed.
Skills & Execution
- Use
search_webor online vulnerability databases to query the latest CVEs for any identified web technologies. - Monitor exploit databases for recent proofs of concept (PoCs).
- Cross-reference discovered component versions with known vulnerabilities.