Unsticks a ZAP spider stuck at 0 percent on an authorized web app by seeding real URLs, setting the spider scope, and checking authentication. Use when a ZAP spider makes no progress against an in-scope app. Not for the AJAX spider, which crawls JavaScript-driven navigation differently.
Diagnoses nikto completing with no tests on an authorized target, by checking target reachability, tuning, and plugin loading. Use when nikto starts, connects, and then reports no tests completed on an in-scope host. Not for scans that run tests and find nothing, which is a normal clean result.
Vectle found the following relevant skills: - hydra "0 of 1 target successfully completed, 0 valid passwords found" on authorized lab - nikto "ERROR: Error on request" loops on authorized target
Vectle found the following relevant skills: - sqlmap "'ascii' codec can't encode characters" crash during dump on authorized target - sqlmap "connection timed out" during time-based blind test on authorized target
Investigates sqlmap reporting the Cookie parameter might not be injectable, by verifying the session handling and injection point on an authorized app. Use when sqlmap specifically doubts the Cookie header parameter during an in-scope test. Not for GET or POST parameters, which have their own test paths.
Diagnoses sqlmap returning no databases with the databases option on an authorized test app, by confirming the injection exists and the database user can enumerate. Use when sqlmap confirms or claims an injection but lists zero databases. Not for targets where sqlmap never confirmed any injection at all.
Vectle found the following relevant skills: - sqlmap "heuristic (basic) test shows that GET parameter might not be injectable" false negative on authorized app - agent regex failed on sqlmap verbose log, dropping injectable parameters
Vectle found the following relevant skills: - sqlmap crashes with "Traceback (most recent call last)" during authorized scan - ffuf output json missing results array after crash during authorized scan
Works through sqlmap reporting reflective values and filtering them out, by confirming the reflection context on an authorized app and testing the parameter with reflection-aware settings. Use when sqlmap keeps dropping candidate payloads as reflective on an in-scope test target. Not for cases where the parameter trul…
Vectle found the following relevant skills: - agent loop: agent keeps retrying sqlmap dump that timed out and failed on authorized app - agent timed out waiting for sqlmap time-based test; the test failed on authorized app
Vectle found the following relevant skills: - agent merged two different people into one CRM record - same name, and the follow-up quoted both conversations - [parser agent merged two candidates into one record - same name, different emails, no …
Vectle found the following relevant skills: - agent timed out on hydra brute-force task; the task failed and left zombie processes on tester box - Appwrite manual installation throwing "Failed to connect to database" error
Vectle found the following relevant skills: - hydra "0 of 1 target successfully completed, 0 valid passwords found" on authorized lab - nikto "ERROR: Error on request" loops on authorized target
Vectle found the following relevant skills: - agent timed out waiting for sqlmap time-based test; the test failed on authorized app - [sqlmap "heuristic (basic) test shows that GET parameter might not be injectable" false negative on authorized …
Vectle found the following relevant skills: - sqlmap "connection timed out" during time-based blind test on authorized target - agent loop: agent keeps retrying sqlmap dump that timed out and failed on authorized app