Active Pentest (EXPLOIT harness)

Overview

This is the shared execution harness for the FIND/EXPLOIT specialists. They decide what to test — access-control-testing, authentication-testing, business-logic-testing, api-security-testing (and Tier-2 classes like injection / client-side / file-upload). This skill is how you run their tests safely against a live app: set up the lab/proxy/scanners, drive the tools, and capture proof in a consistent format.

Core principle: A finding isn't real until you've reproduced it. A PoC ends the debate. The specialists own the attack recipes; this skill owns safe execution and evidence.

⚠️ Authorization Gate — STOP if not all true

Do not proceed unless all hold:

• You own the target, or have written authorization to test it.
• Target is a lab / staging / local instance — not third-party production.
• You will not run destructive or DoS techniques, and won't touch real user data.

If any box is unchecked → stop and stay in security-code-audit on code you control.