web-pentest

1{2  "schema": "hermes-web-pentest exploitation-queue v1",3  "vuln_class": "injection|xss|auth|authz|ssrf|infra",4  "generated_at": "ISO 8601 timestamp",5  "engagement_id": "<engagement slug>",6  "candidates": [7    {8      "id": "INJ-001",9      "vuln_subclass": "sql_injection|command_injection|path_traversal|ssti|lfi|rfi|deserialization",10      "endpoint": {11        "method": "GET",12        "url": "https://target.example/api/items",13        "parameter": "id",14        "location": "query|body|header|cookie|path"15      },16      "source_ref": "path/to/file.py:123",17      "slot_type": "SQL-val|CMD-argument|PATH-segment|...",18      "suspected_defense": "none|parameterized|escape|allowlist|...",19      "verdict": "identified|partial|confirmed|critical|false_positive",20      "confidence": 0.7,21      "witness_payload": "' AND 1=1--",22      "witness_response_signal": "row count change | timing | reflected marker | ...",23      "bypass_attempts": [24        {25          "payload": "%2527%20OR%201=1--",26          "blocked": true,27          "notes": "WAF returned 403 on encoded variant"28        }29      ],30      "notes": "free text",31      "next_action": "send_witness | escalate_to_L3 | classify_FP | abort_scope_concern"32    }33  ]34}35