Verified65% confidenceFactTime unknown
Penetration testing frameworks such as Metasploit and Cobalt Strike have been misused by malicious actors in real attacks.
3
Sources
65%
Confidence
Long-term
Relevance
6/1/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedPenetration testing conducted without authorization is essentially an attack.73% similarUnverified研究人员已在多个主流Agent系统上复现提示注入攻击，包括诱导Agent泄露私人邮件或发送消息67% similarUnverifiedIn-the-wild exploitation refers to a vulnerability being actively used in real attacks, as distinct from theoretical vulnerabilities discovered only in security research environments.67% similarUnverifiedCommon prompt injection attack techniques include role hijacking, instruction override, context poisoning, and data exfiltration induction66% similarUnverifiedAPT attackers actively clear logs, forge timestamps, and leverage legitimate tools (i.e., Living off the Land) to evade detection.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/28877API
curl https://kongchang.com/api/v1/knowledge/claims/28877MCP
get_claim(id=28877)