Detailed Scan Results - openAcunetix - WAVSEP Benchmark 2014/2016

Scanner	Version	Vendor
openAcunetix	0.1	John Martinelli

Tested Against WAVSEP Version:

1.0

The SQL Injection Detection Accuracy of the Scanner:

Detection Accuracy

Chart

0.00% Detection Rate
0.00% False Positives

(0/136)
(0/10)

Response Type	Input Vector	Detection Rate	Details
Errorneous 500 Responses	HTTP GET (Query String Parameters)	0 out of 20	Execution Failed.
Errorneous 500 Responses	HTTP POST (Body Parameters)	0 out of 20	Execution Failed.
Errorneous 200 Responses	HTTP GET (Query String Parameters)	0 out of 20	Execution Failed.
Errorneous 200 Responses	HTTP POST (Body Parameters)	0 out of 20	Execution Failed.
Valid 200 Responses	HTTP GET (Query String Parameters)	0 out of 20	Execution Failed.
Valid 200 Responses	HTTP POST (Body Parameters)	0 out of 20	Execution Failed.
Identical 200 Responses	HTTP GET (Query String Parameters)	0 out of 8	Execution Failed.
Identical 200 Responses	HTTP POST (Body Parameters)	0 out of 8	Execution Failed.
False Positive SQLi Test Cases	HTTP GET (Query String Parameters)	0 out of 10	Execution Failed.

The Reflected XSS Detection Accuracy of the Scanner:

Detection Accuracy

Chart

0.00% Detection Rate
0.00% False Positives

(0/66)
(0/7)

Response Type	Input Vector	Detection Rate	Details
Reflected XSS	HTTP GET (Query String Parameters)	0 out of 33	Execution Failed.
Reflected XSS	HTTP POST (Body Parameters)	0 out of 33	Execution Failed.
False Positive RXSS Test Cases	HTTP GET (Query String Parameters)	0 out of 7	Execution Failed.

WAVSEP Scan Log:

The tool did not crawl or locate any exposures, regardless of the URLs or parameters defined.