Academy / Use cases

A whole investigation from one prompt

Use cases · 2 of 3 · 3:18

One prompt that pulls CVEs, ranks the IPs exploiting them, checks those IPs with internet scanners and saves everything to collections, all in the Cyproxy agent.

In this video

  • One prompt covering several integrations, skills and collections
  • Watching the tool calls as they run
  • Failed tool calls don't use your credits
  • Two collections and a written summary at the end

Chapters

Transcript

So I wanted to record a quick video just to demonstrate some of the capabilities that you'll find within Cyproxy. So what I'm going to do is I'm going to run a essentially a one-shot prompt which isn't necessarily recommended but just to demonstrate using multiple integrations using skills as well as the collections features we have available in Cyproxy now you could run this through your agent of choice whether it's Claude or ChatGPT but for the purposes of this demonstration I'm just going to use the Cyproxy agent which is

Built into our platform so I have pre-prepared a prompt say that three times fast where we're going to take the recent vulnerabilities targeting PHP from Liberty91, return the CVEs, we're then going to pass those CVEs into GreyNoise, we're then going to identify the top 10 highest hitters and then save those into a collection in Cyproxy and we'll then take those and pass them to various internet scanners and attempt to identify any open directories or interesting files. We'll then save those into a second collection and then write up our findings.

So we can see it's now started to get results in and we can see some of the various queries that have been run or some of the tool calls. Incidentally, if you do see that a tool call has failed you will not be charged or you won't lose any credits for failed calls

So now we can see it is saving the results to a collection which we should find over here soon here we go and there we go so we've got our collection of highest hitters. And if we go back to our agent we've started to get a summary through so let's have a look at the collection. So we've got a list of IP

Addresses as we requested, the top 10 IPs identified by GreyNoise scanning or sensors and doing attempted exploitation or scanning. We've then got another collection which is PHP exploitation with or IPs with open directories and if I go back to our Cyproxy

Agent you can see it's given us a write-up in terms of its findings as well as giving us some potential next steps as well so that's it very quick demonstration of what is possible like I said not necessarily the best approach to things or doing a more controlled manner step by step however yeah I think it demonstrates some of the capabilities