{ "schema_version": 1, "generated": "2026-10-24", "id": "ch1nfo-riftx--research-known-vulnerabilities-for-a-product", "repo": "Ch1nfo/RiftX", "repo_url": "https://github.com/Ch1nfo/RiftX", "repo_slug": "ch1nfo-riftx", "title": "Research known vulnerabilities for a fingerprinted product", "page_title": "How to research known vulnerabilities for a fingerprinted product with RiftX", "summary": "Look up public CVEs and advisories for a product version found during testing, with queries screened first.", "who": "A tester who has fingerprinted a web product version on an authorized target and needs known issues and references quickly.", "problem": "Searching the public web for CVE details and exploit references by hand is slow, and it is easy to paste engagement details into a third-party search.", "outcome": "A short list of relevant CVEs and references for the fingerprinted version, each with a source link and a note on whether it applies.", "steps": [ "Open a session and note the product name and exact version found during testing.", "Ask the Agent to run web_search for known vulnerabilities for that version, using only product and version text.", "Ask the Agent to run web_fetch on the most relevant advisory pages, and for bare CVE ids to pull structured data.", "Check each result against the fingerprint you captured on the target before you treat it as applicable.", "Keep the confirmed references as evidence in the finding notes." ], "agent_prompt": "In RiftX, research known vulnerabilities for version using web_search and web_fetch. Return a list of CVE ids, sources, and whether each one matches the fingerprint. Verify that no query contains credentials, tokens, or target-specific secrets.", "agents": [ "any" ], "difficulty": "Intermediate", "time": "30 minutes", "basis": "readme", "caveat": "RiftX screens out credential-shaped queries, but a public CVE match still has to be confirmed against the actual target before it is reported.", "category": "Security and science", "tags": [ "Security and science" ], "lang": "typescript", "requirements": [ "Written authorization from the owner of the target system, with a defined scope", "A local machine where you can run the RiftX app (the README badges reference Node.js, Next.js, and React)", "A model provider key for OpenAI, Anthropic, Google, or a compatible endpoint", "Playwright and Chromium available for the browser tool" ], "risk": "dual-use", "seen_in_the_wild": false, "mentioned_publicly": false, "risks": [], "best": false, "score": 0.7, "evidence": [], "url": "https://dedupedai.com/use-cases/ch1nfo-riftx/research-known-vulnerabilities-for-a-product/", "md": "https://dedupedai.com/use-cases/ch1nfo-riftx/research-known-vulnerabilities-for-a-product/index.md", "disclaimer": "Deduped lists open-source repositories that belong to other people. We do not own, maintain, audit, or vouch for any of them, and a repo appearing here is not an endorsement or a safety check. The use cases, steps, and prompts are written by AI and may be incomplete, outdated, or just wrong. Where a use case is marked \"Seen in the wild\", we link to public posts where someone described something similar, but we have not verified those posts and the use case itself is still our AI's own write-up. Use all of this at your own risk. Only run code, commands, or agents on systems and accounts you are authorized to use, and read the code and every command before you run it, especially anything that touches credentials, files, or the network. Nothing here is professional, security, legal, or financial advice. All trademarks and project names belong to their respective owners, and their use here does not imply affiliation. Content is provided as is, without warranties of any kind. Found a mistake, a safety problem, or something you want removed? Email hello@dedupedai.com and we will look at it promptly.", "api": "https://dedupedai.com/api/v1/usecases/ch1nfo-riftx--research-known-vulnerabilities-for-a-product.json", "api_version": "v1" }