{
  "tool": "sekuscan",
  "target": "wavsep (zaproxy fork)",
  "provenance": {
    "engine_commit": "a2b55e7",
    "tree": "clean",
    "measured_at": "2026-09-09T01:34:52+00:00",
    "host": "Linux 6.8.0-139-generic x86_64"
  },
  "cases": 1265,
  "requests": 71966,
  "by_category": {
    "FALSE_POSITIVE": {
      "clean": 38,
      "false_positive": 1,
      "out_of_scope": 4,
      "answer_key_divergence": 1
    },
    "LFI": {
      "detected": 816
    },
    "OBSOLETE": {
      "out_of_scope": 11
    },
    "REDIRECT": {
      "detected": 60
    },
    "RFI": {
      "detected": 108
    },
    "RXSS": {
      "detected": 91
    },
    "SQLI": {
      "detected": 135
    }
  },
  "misses": [],
  "false_positives": [
    {
      "group": "LFI",
      "url": "http://127.0.0.1:9096/wavsep/active/LFI/LFI-FalsePositives-GET/Case01-LFI-FalsePositive-Forward-TextHtmlValidResponse-FilenameContext-Unrestricted-OSPath-DefaultRelativeInput-NoPathReq-Read.jsp?target=/active/LFI/LFI-FalsePositives-GET/validfile1.jsp",
      "reported": [
        "traversal"
      ]
    }
  ],
  "answer_key_divergences": [
    {
      "group": "RFI",
      "url": "http://127.0.0.1:9096/wavsep/active/RFI/RFI-FalsePositives-GET/Case05-RFI-FalsePositive-UrlClass-TextHtmlValidResponse-FilenameContext-EnumerationResponseOnly-OSPath-DefaultRelativeInput-NoPathReq-Read.jsp?target=http://127.0.0.1:9096/wavsep/active/RFI/RFI-FalsePositives-GET/content.ini",
      "reported": [
        "ssrf"
      ],
      "why": "callback arrived: the target fetched a URL we supplied, which is SSRF; WAVSEP scores this case for remote file INCLUSION, which does not occur"
    }
  ]
}