Skip to content

process

The process identity: a command on the operator's host. Every field and what is required.

process runs a command on the operator’s host. It is the object sandboxed scanners cannot reach. The target is ignored.

Write it in English

A process step reads as run "<command>", with an optional in "<directory>" clause for the working directory:

process enum
  run "python ssh_enum.py 127.0.0.1" in "C:\\Temp\\prototest"
  expect the response to match "root is a valid user"

The directives

run

Required. run "<command>" runs the command; an optional in "<directory>" clause sets the working directory.

Example

process whoami
  run "id"
  expect the response to match "uid="

Give exploit research a common language.

Bring a PoC, a writeup, or an AI-generated draft into an Exploitmatic solution: inspect it, validate it, and replay it against a target you own. The runtime and the corpus are open source.