Q Factory L3 — teaser preview
4 HIGH · 3 MEDIUM. Severe risks are on the public surface. This teaser shows counts and titles. The FULL report unlocks proof links, attacker/agent impact, owner, PoC, fix, and va
Summary (teaser)
This is not “just a technical PDF”
A hacker uses these findings as a map. A hacker agent runs the same playbook in a 24/7 loop. Teaser = severity. FULL = proof + impact + fix.
recon → invasion → destructive · detail in FULLSevere risks are on the public surface. This teaser shows counts and titles. The FULL report unlocks proof links, attacker/agent impact, owner, PoC, fix, and validation — so the team acts.
Stack in this run
| Component | Included? | Note |
|---|---|---|
| Sentinel L3 | YES | public-max |
| ParviClaw Core + AWP | YES (lab) | full pack in FULL |
| ParviSight | partial | as run |
| PayBotFin Witness | as engaged | honest scope in FULL |
HIGH findings — locked in teaser
WordPress REST user enumeration
HIGHMissing major security headers
HIGHDMARC p=none
HIGHPublic wp-login
HIGHMEDIUM findings — short preview
Full REST index open
MEDIUMFull REST index open Full impact, PoC, owner and fix → FULL report.
HubSpot forms third-party
MEDIUMHubSpot forms third-party Full impact, PoC, owner and fix → FULL report.
moodle/equal historical DNS
MEDIUMmoodle/equal historical DNS Full impact, PoC, owner and fix → FULL report.
AWP + Core annexes (preview)
In FULL each file has captions (what it is / what it proves / what it is not) + how to run npx agent-witness-protocol verify.