Terms
Terms of use
The short version: use Exploitmatic only against systems you own or are authorized to test, and read the license files before redistributing anything.
Authorized use only
Exploitmatic is an offensive-security tool. You may use it only against systems you own or are explicitly authorized to test. You are responsible for the targets you choose and for complying with applicable law.
Open source
The runtime is licensed under the Apache License 2.0. The solution corpus is Apache-2.0. Use is governed by the license files in the respective repositories.
No warranty
The software is provided as is, without warranty of any kind. A verified result means the step asserts passed on your run, against your target. It is not a claim that a system is secure, and it is not a guarantee against misuse.
No liability
To the maximum extent permitted by law, the maintainers are not liable for any damages arising from the use of the software, including damage to systems you did not own or were not authorized to test.
Contact
Questions about these terms can be emailed to [email protected] or raised through the GitHub repository.
The full legal texts: runtime license and the license overview.
Give exploit research a common language.
Bring a PoC, a writeup, or an AI-generated draft into an Exploitmatic solution: inspect it, validate it, and replay it against a target you own. The runtime and the corpus are open source.