Functionsยง
- build_
attack_ chain - Build a credible attack chain from evidence only. Returns
Nonewhen no chain can be justified, so the report can state that explicitly instead of inventing one. - build_
attack_ path - Backward-compatible path builder; returns an empty vector when no credible chain exists.
- build_
scan_ summary - categorize_
modules - classify_
family - Classify a record into an intelligence family plus a specific sub-item.
- compute_
risk_ score - Weighted risk scoring. Severity carries the baseline, but actionable intelligence (CVSS, public exploits, injectable endpoints, known CVEs, exposed services) dominates. Large piles of INFO/LOW noise are capped so they can never outweigh a single exploitable vulnerability.
- detect_
vuln_ kinds - display_
title - exploitability_
assessment - Assess how likely the discovered surface is to be exploitable, based purely on evidence: known exploits/KEV for discovered CVEs and injectable points.
- extract_
endpoint - Extract a normalized endpoint (path + query) from a record if possible.
- group_
findings - Group records into intelligence families and merge evidence.
- infer_
framework - infer_
server - manual_
exploitation_ notes - Flag application-specific vulnerabilities that have no generic Metasploit module so the report can call them out for manual validation instead of inventing a module.
- map_
mitre - severity_
counts - severity_
rank