Exploit for vuln-templates

## https://sploitus.com/exploit?id=F43CC900-78DC-5B73-B05D-6CC0FAF47A8A
# vuln-templates

Curated, well-documented vulnerability report templates for every common bug class. Includes PoC scaffolds, impact language, and remediation guidance. Write professional bug bounty reports in seconds.

## Features

- **15+ bug class templates** — IDOR, XSS, SSRF, RCE, SQLi, Auth bypass, and more
- **Auto-fill CLI** — Fill in target, endpoint, and parameters interactively
- **Impact language** — Pre-written severity descriptions aligned with CVSS
- **PoC scaffolds** — Ready-to-fill proof-of-concept sections
- **Remediation** — Developer-friendly fix recommendations
- **Platform-aware** — Outputs formatted for HackerOne, Bugcrowd, or plain Markdown
- **Customizable** — Add your own templates

## Installation

```bash
pip install vuln-templates
```

Or from source:

```bash
git clone https://github.com/D3wier/vuln-templates.git
cd vuln-templates
pip install -e .
```

## Quick Start

```bash
# List available templates
vuln-templates list

# Generate a report interactively
vuln-templates generate idor

# Generate with pre-filled values
vuln-templates generate xss \
  --target "https://app.example.com" \
  --endpoint "/api/v1/comments" \
  --param "body" \
  --severity high

# Output to file
vuln-templates generate ssrf -o report.md

# Copy to clipboard
vuln-templates generate sqli | pbcopy
```

## Available Templates

| Template | Bug Class | Severity Range |
|----------|-----------|----------------|
| `idor` | Insecure Direct Object Reference | Medium – Critical |
| `xss-reflected` | Reflected Cross-Site Scripting | Low – High |
| `xss-stored` | Stored Cross-Site Scripting | Medium – Critical |
| `xss-dom` | DOM-based XSS | Low – High |
| `ssrf` | Server-Side Request Forgery | Medium – Critical |
| `sqli` | SQL Injection | High – Critical |
| `rce` | Remote Code Execution | Critical |
| `auth-bypass` | Authentication Bypass | High – Critical |
| `privilege-escalation` | Privilege Escalation | High – Critical |
| `info-disclosure` | Information Disclosure | Low – High |
| `csrf` | Cross-Site Request Forgery | Low – High |
| `open-redirect` | Open Redirect | Low – Medium |
| `race-condition` | Race Condition | Medium – High |
| `path-traversal` | Path Traversal / LFI | Medium – Critical |
| `business-logic` | Business Logic Flaw | Medium – Critical |

## Template Structure

Each template includes:

```markdown
## Summary
[One-line description of the vulnerability]

## Severity
[CVSS score and justification]

## Affected Endpoint
[URL, method, parameters]

## Steps to Reproduce
1. [Step-by-step reproduction]
2. ...

## Proof of Concept
[Code, curl commands, or screenshots]

## Impact
[What an attacker can do — real-world consequences]

## Remediation
[How to fix it — developer-friendly guidance]
```

## Custom Templates

Add your own templates to `~/.vuln-templates/`:

```markdown
---
name: my-template
class: Custom Bug Class
severity_range: Medium - High
fields:
  - target
  - endpoint
  - param
  - payload
---

## Summary
{{class}} vulnerability in {{target}} at {{endpoint}}...
```

## License

MIT License — see [LICENSE](LICENSE)