License
Open source, permissive
The runtime and the solution corpus are both licensed under the Apache License 2.0.
Exploitmatic is open source under the Apache License 2.0. See the license file in the runtime repository for the full terms.
What the license gives you
- Use, modify, and distribute the runtime, including in closed-source products.
- No source release obligation, including for hosted services.
- A patent grant from every contributor.
- No contributor license agreement required to contribute.
The solution corpus
The attack solutions, the .txt files in the solutions repository, are Apache 2.0 under their own license. Recipes are data, not code, so the permissive license encourages sharing.
Give exploit research a common language.
Bring a PoC, a writeup, or an AI-generated draft into an Exploitmatic solution: inspect it, validate it, and replay it against a target you own. The runtime and the corpus are open source.