Expired50% confidenceFactExact time
The Yakit firing range runs on local port 127.0.0.1:8787, has a large number of built-in vulnerability scenarios including various OWASP vulnerabilities, and can be launched with a single click after download with no additional configuration required.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/2/2026
First Seen
Valid until: 9/30/2026(expired)
Sources
Claude + Trae IDE with Yakit: Automated Penetration Testing via MCP in Practice
bilibili一个想当文人的黑客6/6/2026
Related Claims
UnverifiedYakit integrates MITM proxy packet capture, vulnerability scanning, Fuzzer testing, encoding/decoding tools, DNSLog, and built-in vulnerable lab environments67% similarUnverifiedThe security vulnerabilities in Yarbo lawn mowers have exposed sensitive user information including GPS coordinates, Wi-Fi passwords, and email addresses.65% similarUnverifiedKRACK 攻击针对 Wi-Fi、BlueBorne 漏洞针对蓝牙协议栈、中间人攻击通过 NFC 实施，多种无线协议都被证明存在可利用的安全缺陷58% similarUnverifiedShai-Hulud 攻击载荷通过 postinstall 等生命周期脚本扫描本地敏感信息，包括 npm 令牌、AWS/GCP/Azure 云凭证、环境变量密码及 CI/CD 部署密钥56% similarUnverifiedThe entry point of the JadePuffer attack is an unauthorized code execution vulnerability in Langflow, which allows arbitrary code to be executed on the target server without authentication.56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/51373API
curl https://kongchang.com/api/v1/knowledge/claims/51373MCP
get_claim(id=51373)