hunt-grpc
Warn
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the grpcurl tool from FullStory's GitHub repository. While widely used, binary installation from external repositories involves a supply chain dependency.\n- [EXTERNAL_DOWNLOADS]: Instructs cloning an exploit PoC for CVE-2023-44487 from an unverified GitHub repository (secengjeff/rapidresetclient).\n- [COMMAND_EXECUTION]: Utilizes multiple command-line utilities for network scanning and service interaction, including nmap, openssl, and grpcurl.\n- [DYNAMIC_EXECUTION]: Includes steps to compile external source code at runtime using go build, creating an executable binary from untrusted source material.
Audit Metadata