Tieturi L3 — teaser preview
4 HIGH · 5 MEDIUM. Severe risks are on the public surface. This teaser shows counts and titles. The FULL report unlocks proof links, attacker/agent impact, owner, PoC, fix, and va
Summary (teaser)
This is not “just a technical PDF”
A hacker uses these findings as a map. A hacker agent runs the same playbook in a 24/7 loop. Teaser = severity. FULL = proof + impact + fix.
recon → invasion → destructive · detail in FULLSevere risks are on the public surface. This teaser shows counts and titles. The FULL report unlocks proof links, attacker/agent impact, owner, PoC, fix, and validation — so the team acts.
Stack in this run
| Component | Included? | Note |
|---|---|---|
| Sentinel L3 | YES | public-max |
| ParviClaw Core + AWP | YES (lab) | full pack in FULL |
| ParviSight | partial | as run |
| PayBotFin Witness | as engaged | honest scope in FULL |
HIGH findings — locked in teaser
XML-RPC fully enabled
HIGHSSH TCP/22 open on web IP
HIGHDangerous HTTP methods (deep matrix)
HIGHPublic wp-login + weak headers
HIGHMEDIUM findings — short preview
DMARC quarantine pct=25
MEDIUMDMARC quarantine pct=25 Full impact, PoC, owner and fix → FULL report.
Fat SPF ~all
MEDIUMFat SPF ~all Full impact, PoC, owner and fix → FULL report.
No CAA / security.txt
MEDIUMNo CAA / security.txt Full impact, PoC, owner and fix → FULL report.
Related hosts
MEDIUMRelated hosts Full impact, PoC, owner and fix → FULL report.
Session cookie flags incomplete
MEDIUMSession cookie flags incomplete Full impact, PoC, owner and fix → FULL report.
AWP + Core annexes (preview)
In FULL each file has captions (what it is / what it proves / what it is not) + how to run npx agent-witness-protocol verify.