If you discover a security vulnerability in Serpantoxide itself (not in a target system you are assessing), please do not open a public issue.

Report it privately by emailing the repository maintainer or using GitHub's private vulnerability reporting.

Include:

• A clear description of the vulnerability
• Steps to reproduce it
• Any relevant logs or screenshots
• Your suggested severity

You can expect an acknowledgement within 72 hours and a resolution timeline within 14 days for critical issues.

Serpantoxide is an offensive-security research tool. It is intended for use only against systems you are authorised to assess. Misuse against systems without explicit written permission is illegal and unethical. The project maintainers accept no responsibility for unlawful or unauthorised use.