DEDUPED Hot AI repos, turned into use cases Get the Monday 5

How to run a logged-in grey-box test of your web app with Strix

Test a deployed app with test-account credentials so the agents can reach pages behind login.

Authorization notice. Strix is dual-use. Only use it on software, sites and systems you own or have explicit permission to test.

Credentials. Passing a username and password in the --instruction string can expose them in shell history and logs, so use a test account only.

Who it is forA QA or security engineer who needs coverage of authenticated flows such as account pages and checkout.

The problemA black-box scan without login cannot reach most of the app's real functionality.

The outcomeA scan of the authenticated areas of the app, with findings for access control and auth bypass issues.

What you need first

  • Docker installed and running
  • An LLM API key from a supported provider, or a ChatGPT Plus/Pro subscription sign-in
  • The application source directory or a target URL you are authorized to test
  • A GitHub repository with Actions enabled, if you want the CI workflow

Steps

  1. Create a dedicated test account on the staging app.
  2. Run export STRIX_LLM="openrouter/z-ai/glm-5.3" and export LLM_API_KEY="your-api-key"
  3. Run strix --target https://your-app.com --instruction "Perform authenticated testing using credentials: user:pass"
  4. Review findings for IDOR, privilege escalation, and auth bypass.

Prompt for your agent

Use the usestrix/strix repo to run an authenticated grey-box test against <staging-app-url> using the test account <test-username>, with `strix --target <staging-app-url> --instruction` and the test credentials. Report the findings. Verify that the test account is a dedicated test account and that no production credentials were used.

Caveat. The README names the --instruction flag for credentials but does not describe how those credentials are stored or handled during the run.

Use this in your AI agent

Ask your agent

Using the Deduped MCP, get the setup steps for usestrix/strix and "Run a logged-in grey-box test of your web app"

Add Deduped to Claude Code once

claude mcp add --transport http deduped https://dedupedai.com/mcp

Cursor, ChatGPT, others

Share: X LinkedIn Hacker News Email Copy link

Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer