Vectle found the following relevant skills: - auth token expired mid-revocation verification run: agent failed with error 401 unauthorized - vault token expired mid-run while agent failed to pull credentials
Treat the expired session as the first hypothesis when a submit fails mid-flow: detect the login page or an unauthenticated response during the run, re-authenticate once, and replay the form from saved inputs instead of re-filling from scratch. Use when an agent submitting alert rules through a dashboard UI. Not for a…
Vectle found the following relevant skills: - wfuzz "pycurl ERROR 7: Failed to connect" on authorized target - sqlmap error: "unable to connect to target URL" on authorized test target
Fixes an agent workflow failure behind this query: stop driving the logged-in web ui for status updates and switch the step to the product api with a stored credential; if the ui is unavoidable, restore the session first and detect the login redirect explicitly. Use when an automated status page run fails with this pa…
Fixes an agent workflow failure behind this query: stop driving the logged-in web ui for status updates and switch the step to the product api with a stored credential; if the ui is unavoidable, restore the session first and detect the login redirect explicitly. Use when an automated status page run fails with this pa…
Fixes an agent workflow failure behind this query: stop driving the logged-in web ui for status updates and switch the step to the product api with a stored credential; if the ui is unavoidable, restore the session first and detect the login redirect explicitly. Use when an automated status page run fails with this pa…
Fixes an agent workflow failure behind this query: stop driving the logged-in web ui for status updates and switch the step to the product api with a stored credential; if the ui is unavoidable, restore the session first and detect the login redirect explicitly. Use when an automated status page run fails with this pa…
Fixes an agent workflow failure behind this query: stop driving the logged-in web ui for status updates and switch the step to the product api with a stored credential; if the ui is unavoidable, restore the session first and detect the login redirect explicitly. Use when an automated status page run fails with this pa…
Fixes a pentest agent's concurrent scans overwriting each other's output files, by giving every run its own output directory and filename namespace. Use when parallel scans of authorized targets produce missing or interleaved results. Not for sequential runs, where reuse of a working file may be deliberate and documen…
Stops an infinite loop in an agent URL expansion routine on circular redirects, with cycle detection and a hard hop budget. Use when URL expansion hangs or times out on redirect loops set by phishing infrastructure. Not for long but finite redirect chains that complete.
Fixes a pentest agent merging sqlmap and nuclei findings from different hosts into one finding, by enforcing host identity during cross-tool correlation. Use when a merged finding cites evidence from more than one authorized host. Not for one host's findings from two tools, which should correlate into a single finding.
Fixes a pentest agent losing all progress when a scan times out on a large authorized scope, by checkpointing per-target results as the scan runs. Use when a timeout discards completed work on an in-scope engagement. Not for short scans where a simple rerun is cheaper than checkpoint machinery.
Vectle found the following relevant skills: - zap spider stalled at 0 percent on authorized web app - rate limit hit mid-run: agent ZAP spider failed after WAF blocked authorized target scan
Unsticks a ZAP spider stuck at 0 percent on an authorized web app by seeding real URLs, setting the spider scope, and checking authentication. Use when a ZAP spider makes no progress against an in-scope app. Not for the AJAX spider, which crawls JavaScript-driven navigation differently.
Stops ffuf recursion from reporting the same findings at every depth by fixing the recursion trigger and filtering the catch-all response on an authorized target. Use when recursive ffuf runs repeat identical results level after level. Not for genuinely mirrored directory structures, which should be verified by hand b…
Fixes gobuster failing with the first record does not look like a TLS handshake error by matching the URL scheme to the actual service on an authorized target. Use when gobuster dir or vhost mode hits this TLS error on an in-scope host. Not for genuine certificate validation failures, which produce a different message.
Fixes wfuzz failing with pycurl error 7 failed to connect on an authorized target, by checking reachability, proxy settings, and the libcurl build wfuzz uses. Use when wfuzz cannot connect at all to an in-scope host that other tools reach. Not for HTTP error responses, which mean the connection worked.
Vectle found the following relevant skills: - sqlmap error: "unable to connect to target URL" on authorized test target - agent keeps re-running nuclei scan that already failed on authorized target
Vectle found the following relevant skills: - rate limit hit mid-run: agent ZAP spider failed after WAF blocked authorized target scan - agent failed to complete authorized OAuth login for authenticated ZAP scan