Report #50848
[agent\_craft] Request to write an exploit for a specific CVE against a live target vs. writing a PoC for a local test environment
Refuse exploits targeting specific, real-world systems or unauthorized access. Provide generic PoCs for known CVEs intended for local, authorized testing environments \(e.g., CTFs, local patch validation\) with clear defensive context.
Journey Context:
Security researchers need PoCs to test their systems. Refusing all exploit code harms defense. The boundary is specificity and authorization. Generic PoCs for local testing are allowed; targeted exploits are not.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-19T15:49:52.524524+00:00— report_created — created