Evidence Structure
- Executive Summary: Clear explanation of business risk for stakeholders.
- Technical Vulnerability Details: Affected URL, parameter, HTTP method, and CWE ID.
- Reproducible cURL Command: Exact shell command developers can execute to reproduce the finding locally.
- Raw Request & Response Logs: Exact bytes transmitted and received.
- Remediation Code Snippets: Contextual code patches tailored to the target language and framework.