Detailed Scan Results - WebCruiser Enterprise Edition

Scanner	Version	Vendor
WebCruiser Enterprise Edition	2.7.0	Janus Security

Tested Against WAVSEP Version:

1.5

The SQL Injection Detection Accuracy of the Scanner:

Detection Accuracy

Chart

69.85% Detection Rate
0.00% False Positives

(95/136)
(0/10)

Response Type	Input Vector	Detection Rate	Details
Errorneous 500 Responses	HTTP GET (Query String Parameters)	16 out of 20	Detected (New): 1(2nd),2,3,5-13,15-18 Detected (2.5.1): 1(2nd),3,6-8,11-13,15-18 Missed: 1(1st),4,14,19
Errorneous 500 Responses	HTTP POST (Body Parameters)	14 out of 20	Detected (New): 1(2nd),2,3,5-13,17-18 Detected (2.5.1): 1(2nd),3,7,8,11-13,17,18 Missed: 1(1st),4,14-16,19
Errorneous 200 Responses	HTTP GET (Query String Parameters)	16 out of 20	Detected (New): 1(2nd),2,3,5-13,15-18 Detected (2.5.1): 1(2nd),3,6-8,11-13,15-18 Missed: 1(1st),4,14,19
Errorneous 200 Responses	HTTP POST (Body Parameters)	14 out of 20	Detected (New): 1(2nd),2,3,5-13,17-18 Detected (2.5.1): 1(2nd),3,7,8,11-13,17,18 Missed: 1(1st),4,14-16,19
Valid 200 Responses	HTTP GET (Query String Parameters)	16 out of 20	Detected (New): 1(2nd),2,3,5-13,15-18 Detected (2.5.1): 1(2nd),3,6-8,11-13,15-18 Missed: 1(1st),4,14,19
Valid 200 Responses	HTTP POST (Body Parameters)	16 out of 20	Detected (New): 1(1st&2nd)-13,17-18 (1-4 detected as Xpath Injection) Missed: 14-16,19
Identical 200 Responses	HTTP GET (Query String Parameters)	2 out of 8	Detected (New): 1,2 Detected (2.5.1): 1,2 Cases Missed: 3-8
Identical 200 Responses	HTTP POST (Body Parameters)	1 out of 8	Cases Detected: 1 Cases Missed: 2-8
False Positive SQLi Test Cases	HTTP GET (Query String Parameters)	0 out of 10	None (But Sometimes Confuses SQLi and other exposures with XPATHi)

The Reflected XSS Detection Accuracy of the Scanner:

Detection Accuracy

Chart

24.24% Detection Rate
42.86% False Positives

(16/66)
(3/7)

Response Type	Input Vector	Detection Rate	Details
Reflected XSS	HTTP GET (Query String Parameters)	8 out of 33	Cases Detected: 1-5,30(1st&2nd),32 Cases Missed: 6-29,31 GET-Experimental: 3
Reflected XSS	HTTP POST (Body Parameters)	8 out of 33	Cases Detected: 1-5,30(1st&2nd),32 Cases Missed: 6-29,31 POST-Experimental: 3
False Positive RXSS Test Cases	HTTP GET (Query String Parameters)	3 out of 7	1,2,6

WAVSEP Scan Log:

Each individual directory in WAVSEP was scanned separately, while enabling all the relevant available plug-ins for each scan (The SQL Injection and Xpath plugins for the SQLi directories, and XSS plugins for the XSS directories).