Halcyon · Run 2completed
recall 14%found 3 / 22reported 3cost $0.028tokens 121kduration 17 minengine 98c06f3+bp2
Found in this run — 3
API:3001 · Node1
HIGHProfile IDORCWE-639
Cloud:8081 · Flask1
MEDSecrets / env disclosureCWE-200
Legacy:8090 · PHP1
HIGHAuthentication bypassCWE-287
Missed in this run — 19
CRIT SQL injection · loginCRIT Admin command execution (RCE)CRIT SQL injection · loginCRIT Command injection (RCE)CRIT SQL injection · loginHIGH SQL injection · searchHIGH Excessive data exposureHIGH Orders IDORHIGH Broken access control · adminHIGH Unauthenticated password resetHIGH Public secrets / env dumpHIGH Public path traversalHIGH Resource IDORHIGH Unrestricted file uploadHIGH Template injection (SSTI)HIGH Debug console exposedHIGH Unauthenticated password resetMED Backup file exposureMED phpinfo disclosure