licenseopen-sourceannouncement
Exploitmatic is now Apache 2.0 🎉
The runtime and the solution corpus are both Apache License 2.0 now. One license, no CLA, and no source-release obligation, even for hosted services.
Read postBlog
From the blog
Writeups, protocol deep dives, and the ideas behind attacks written down as data. The full corpus and reference live in the documentation.
Topics: announcementdesignengineeringformatgoidentitylicensellmmigrationopen-sourceprotocolsrust
Subscribe
rustgomigrationengineering
Why We Moved Exploitmatic from Go to Rust
Exploitmatic moved from Go to Rust as a product decision, not a performance one. Here is why, what the rewrite changed, and what the benchmarks do and do not show.
Read post designformatllm
Attacks as data: why a plain text format beats a script
Exploitmatic formalizes the hand-rolled replay script with a grammar. A solution is data, never code. There is no supply chain, and the result comes from the tests.
Read post protocolsidentitydesign
Eighteen protocols, one grammar
A step's identity is the protocol it speaks, from the IANA/STIX vocabulary. A closed grammar keeps every protocol expressible as the same plain text shape.
Read postGive exploit research a common language.
Bring a PoC, a writeup, or an AI-generated draft into an Exploitmatic solution: inspect it, validate it, and replay it against a target you own. The runtime and the corpus are open source.