Halcyon · Run 2completed
recall 16%found 4 / 25reported 5cost $0.891tokens 7357kduration 17 minengine 98c06f3+bp2
Found in this run — 4
API:3001 · Node1
HIGHWeak JWT signing secretCWE-798
Legacy:8090 · PHP3
CRITSQL injection · loginCWE-89
HIGHAuthentication bypassCWE-287
MEDphpinfo disclosureCWE-200
Missed in this run — 21
CRIT SQL injection · loginCRIT Admin command execution (RCE)CRIT SQL injection · loginCRIT Command injection (RCE)HIGH SQL injection · searchHIGH Excessive data exposureHIGH Orders IDORHIGH Profile IDORHIGH Broken access control · adminHIGH Unauthenticated password resetHIGH Public secrets / env dumpHIGH Public path traversalHIGH Resource IDORHIGH Unrestricted file uploadHIGH Template injection (SSTI)HIGH Debug console exposedHIGH Unauthenticated password resetMED Stored XSSMED Secrets / env disclosureMED Weak signing secretMED Backup file exposure