Halcyon · Run 2completed
recall 16%found 4 / 25reported 5cost $0.120tokens 48kduration 18 minengine 98c06f3+bp2
Found in this run — 4
API:3001 · Node1
HIGHProfile IDORCWE-639
Cloud:8081 · Flask2
CRITSQL injection · loginCWE-89
MEDSecrets / env disclosureCWE-200
Legacy:8090 · PHP1
MEDphpinfo disclosureCWE-200
Missed in this run — 21
CRIT SQL injection · loginCRIT Admin command execution (RCE)CRIT Command injection (RCE)CRIT SQL injection · loginHIGH SQL injection · searchHIGH Excessive data exposureHIGH Orders IDORHIGH Broken access control · adminHIGH Unauthenticated password resetHIGH Public secrets / env dumpHIGH Public path traversalHIGH Weak JWT signing secretHIGH Resource IDORHIGH Unrestricted file uploadHIGH Template injection (SSTI)HIGH Debug console exposedHIGH Unauthenticated password resetHIGH Authentication bypassMED Stored XSSMED Weak signing secretMED Backup file exposure