{
  "version": "1.0",
  "tests": [
    "SQL Injection/?error&blind&time",
    "EL Injection/?template&S2-059",
    "OS Command Execution",
    "Backup Resource Found",
    "Hidden Resource Found",
    "SecretLeak",
    "VulnerableJsLib",
    "Unicode",
    "RobotTxt",
    "Sitemap",
    "RFI/?lfi&rfi&ssrf&path_traversal",
    "ObjectDeserialization",
    "HTTP Headers Check/?owasp&others",
    "Fuzzer/?overflow&fuzzing",
    "Idor",
    "ShellShock",
    "HostHeaderInjection",
    "HTML Parser/?crawler&dirRoot",
    "Knowledge Collector",
    "XSS",
    "Hidden Parameter XSS",
    "XSS in 404 URL",
    "Wordpress Plugin FireStorm Professional Real Estate 2.06.01 SQLI",
    "WordPress Plugin LeagueManager 3.8 SQLI",
    "WordPress Plugin WP Statistics 13.0.7 Time Based SQLI",
    "WordPress Plugin All Video Gallery 1.1 SQLI",
    "WordPress Plugin Jetpack SQLI",
    "WordPress Plugin Hitasoft_player Ripe HD FLV Player 1.1 SQLI",
    "WordPress Plugin Easy Contact Form Lite 1.0.7 SQLI",
    "WordPress Plugin Event Registration 5.4.3 SQLI",
    "WordPress Plugin Post Highlights 2.2 SQLI",
    "WordPress Plugin Facebook Promotions 1.3.3 SQLI",
    "WordPress Plugin AdRotate 3.6.5 SQLI",
    "WordPress Plugin AdRotate 3.6.6 SQLI",
    "WordPress Plugin Link Library 5.2.1 SQLI",
    "WordPress Plugin Bannerize 2.8.7 SQLI",
    "WordPress Plugin Bannerize 2.8.6 SQLI",
    "WordPress Plugin Zotpress 4.4 SQLI",
    "WordPress Plugin Glossary SQLI",
    "WordPress Plugin WP Fastest Cache 0.8.4.8 Blind SQLI",
    "WordPress Plugin Google Document Embedder 2.5.14 SQLI",
    "WordPress Plugin Google Document Embedder 2.5.16 SQLI",
    "WordPress Plugin AdRotate 3.9.4 SQLI",
    "WordPress Plugin NEX Forms 3.0 SQLI",
    "WordPress Plugin Smart Google Code Inserter 3.5 SQLI",
    "WordPress Plugin WP Support Plus Responsive Ticket System 7.1.3 SQLI",
    "WordPress Plugin JTRT Responsive Tables 4.1 SQLI",
    "WordPress Plugin CP Multi View Event Calendar 1.01 SQLI",
    "WordPress Plugin CP Multi View Event Calendar 1.1.4 SQLI",
    "WordPress Plugin CP Multi View Event Calendar 1.1.7 SQLI",
    "WordPress Plugin Chained Quiz 1.0.8 SQLI",
    "WordPress Plugin Users Ultra 1.5.50 Blind SQLI",
    "WordPress Plugin Olimometer 2.56 SQLI",
    "WordPress Plugin VideoWhisper Video Presentation 1.1 SQLI",
    "WordPress Plugin SCORM Cloud 1.0.6.6 SQLI",
    "WordPress Plugin DS FAQ 1.3.2 SQLI",
    "WordPress Plugin Forum Server 1.7 SQLI",
    "WordPress Plugin Business Intelligence SQLI",
    "WordPress Plugin SH Slideshow 3.1.4 SQLI",
    "WordPress Plugin Paid Downloads 2.01 SQLI",
    "WordPress Plugin KNR Author List Widget 2.0.0 SQLI",
    "WordPress Plugin Community Events 1.2.1 SQLI",
    "WordPress Plugin Tune Library 2.17 SQLI",
    "WordPress Plugin Eventify Simple Events 1.7.f SQLI",
    "WordPress Plugin Yolink Search 1.1.4 SQLI",
    "WordPress Plugin OQey Headers 0.3 SQLI",
    "WordPress Plugin File Groups 1.1.2 SQLI",
    "WordPress Plugin Wpfilemanager 6.8 RCE",
    "WordPress 4.6 Blind OS Command Execution",
    "Wordpress Theme Akal XSS",
    "WordPress Login Page Found",
    "Wordpress User Enumeration",
    "Outdated Wordpress Version",
    "Service Detection",
    "HTTPS Tests/?HeartBleed&ssl2&others",
    "Https Redirection",
    "Multiple Passive Checks/?https&passive&https&subresourceitegrity",
    "Basic Authentication Test/?https&https&bruteforce",
    "Outdated Server Application",
    "Outdated PHP Version",
    "Password on Http",
    "PHPInfo",
    "ErrorDetection",
    "Form BruteForce",
    "Unvalidated Redirection",
    "Open Redirection In URL",
    "CRLF Injection in URL",
    "Apache Server Status",
    "Apache Expect Header XSS",
    "Apache 2.4.49 Path Traversal and RCE",
    "Apache mod_proxy 2.4.48 SSRF",
    "Apache Tomcat Manager Tests/?mod_jk&manager&mod_jk",
    "HttpVerb",
    "Apache Struts 2 RCE S2-045",
    "Apache Struts 2 REST plugin XStream RCE S2-052",
    "Apache Struts OGNL expression RCE S2-057",
    "Apache Tomcat JSP Upload RCE",
    "Nginx null byte/?Nginx Code Execution due to Misconfiguration",
    "Nginx Restrriction Bypass via Space Character in URI",
    "Nginx Integer Overflow",
    "Microsoft IIS Tilde Directory Enumeration",
    "PHP CGI Argument Injection RCE",
    "Drupal 'Drupalgeddon2' Remote Code Execution",
    "Drupal 4.1%2F4.2 XSS",
    "Drupal7 Pre Auth SQLI",
    "Joomla! 'J2Store < 3.3.7' SQL Injection",
    "Joomla! Component JCK Editor 6.4.4 SQLI",
    "Joomla! Component com_hdwplayer 4.2 SQLI",
    "Joomla! Component Com_newsfeeds 1.0 SQLI",
    "Joomla! Component Com_fields 3.7 SQLI",
    "Joomla! Component Form Maker 3.6.12 SQLI",
    "Joomla! Component JquickContact 1.3.2.2.1 SQLI",
    "Joomla! Component File Download Tracker 3.0 SQLI",
    "Joomla! 1.5 < 3.4.5 RCE",
    "Joomla! Component Com_contenthistory SQLI",
    "Joomla! 3.2.1 SQLI",
    "Joomla! < 1.7.0 XSS",
    "Joomla! Component Odudeprofile 2.8 'profession' SQLI",
    "Joomla! Component Com_shop 'id' SQLI",
    "Joomla! Component Com_shop 'editid' SQLI",
    "Joomla! Component Com_cbcontact 'contact_id' SQLI",
    "Joomla! Component Com_rsgallery2 2.0 'catid' SQLI",
    "Joomla! Component Reverse Auction Factory 4.3.8 SQLI",
    "Joomla! Component Jobs Factory 2.0.4 SQLI",
    "Joomla! Component Music Collection 3.0.3 SQLI",
    "Joomla! Component JCK Editor 6.4.4 'parent' SQLI",
    "Joomla! Component CcNewsletter 2.x.x 'id' SQLI",
    "Joomla! Pinterest Clone Social Pinboard 2.0 SQLI",
    "Joomla! Component Timetable Responsive Schedule For Joomla! 1.5 'alias' SQLI",
    "Joomla! Component JomEstate PRO 3.7 'id' SQLI",
    "Joomla! Component JGive 2.0.9 SQLI",
    "Joomla! Component JB Bus 2.3 'order_number' SQLI",
    "Joomla! Component InviteX 3.0.5 'invite_type' SQLI",
    "Joomla! Component Google Map Landkarten 4.2.3 SQLI",
    "Joomla! Component Fastball 2.5 'season' SQLI",
    "Joomla! Component DT Register 3.2.7 'id' SQLI",
    "Joomla! Component AllVideos Reloaded 1.2.x 'divid' SQLI",
    "Joomla! Component Aist 2.0 'id' SQLI",
    "Joomla! Component Advertisement Board 3.1.0 'catname' SQLI",
    "Joomla! Component NextGen Editor 2.1.0 'plname' SQLI",
    "Joomla! Component JEXTN Video Gallery 3.0.5 'id' SQLI",
    "Directory Listing",
    "Web Server Path Traversal"
  ],
  "http": {
    "timeout": 60000,
    "maxParallelRequests": 4,
    "maxRequestsPerSecond": false,
    "headers": [
      {
        "name": "Accept",
        "value": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"
      },
      {
        "name": "Accept-Language",
        "value": "en-US,en;q=0.5"
      }
    ],
    "cookies": [],
    "userAgent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3"
  },
  "crawler": {
    "scope": {
      "crawlStartDepth": 0,
      "type": "auto",
      "scanSubDomains": false,
      "scanAbovePath": false
    },
    "evaluteJsWithChromium": true,
    "depth": false,
    "count": 70000,
    "fileExclusion": "*.7z,*.a3c,*.a52,*.aac,*.ac3,*.ace,*.acsm,*.am,*.apk,*.asf,*.asx,*.avi,*.azw3,*.azw4,*.bin,*.bmp,*.bz2,*.cab,*.cmd,*.conf,*.css,*.csv,*.divx,*.djvu,*.doc,*.docx,*.dts,*.dv,*.engine,*.eot,*.eps,*.epub,*.exe,*.fla,*.flac,*.flv,*.fvi,*.gif,*.gxf,*.gz,*.ice,*.ico,*.inc,*.info,*.install,*.iso,*.jar,*.jpe,*.jpeg,*.jpg,*.lang,*.m1v,*.m2ts,*.m2v,*.m4a,*.m4p,*.m4v,*.mdb,*.mid,*.midi,*.mka,*.mkv,*.mod,*.mov,*.movie,*.mp,*.mp1,*.mp2,*.mp3,*.mp4,*.mpeg,*.mpeg1,*.mpeg2,*.mpeg4,*.mpg,*.mpga,*.mpp,*.mpt,*.msi,*.mts,*.mtv,*.mxf,*.oga,*.ogg,*.ogm,*.ogv,*.ogx,*.oma,*.opus,*.pac,*.pcx,*.pdf,*.pgm,*.png,*.ppsx,*.ppt,*.pptx,*.profile,*.ps,*.psd,*.ram,*.rar,*.rb,*.res,*.rmf,*.rpm,*.save,*.scss,*.sh,*.spx,*.sql,*.svg,*.svn-base,*.svn-work,*.swf,*.tar,*.tbz2,*.tgz,*.tif,*.tiff,*.ts,*.tta,*.ttf,*.uff,*.vob,*.vox,*.vro,*.wav,*.wbmp,*.webm,*.wma,*.wmv,*.woff,*.xls,*.xlsx,*.xm,*.zip,*.abw,*.arc,*.azw,*.bz,*.csh,*.ics,*.mpkg,*.odp,*.ods,*.odt,*.otf,*.rtf,*.txt,*.vsd,*.weba,*.webp,*.woff2,*.xul,*.3gp,*.3g2,*.xcf,*.map",
    "urlExclusion": [
      "*sign?out*",
      "*log?out*",
      "*exit*",
      "*kill*",
      "*delete*",
      "*remove*",
      "*/.svn/+",
      "*/.git/+",
      "*/phpMyAdmin/+",
      "*/pgadmin/+",
      "*/roundcube/+",
      "*/%/%/%/%/%/%/%/%/%/%/%/%"
    ]
  },
  "proxy": {
    "type": "system",
    "host": "",
    "port": 0,
    "user": "",
    "pass": ""
  },
  "authentication": {
    "manualLogin": false,
    "http": []
  },
  "form": {
    "inputs": [
      "*;;*;;email;;*;;test@none.nowhere.com",
      "*;;*;;password;;*;;DJrLcmno321@!",
      "*;;*;;number;;*;;2",
      "*;;*;;date;;*;;1990-07-07",
      "*;;*;;range;;*;;1",
      "*;;*;;tell;;*;;7634095446",
      "*;;*mail*;;*;;*;;test@none.nowhere.com",
      "*;;*first*name*;;*;;*;;James",
      "*;;*last*name*;;*;;*;;Bond",
      "*;;*login*;;*;;*;;Test",
      "*;;*username*;;*;;*;;Test",
      "*;;*pass*;;*;;*;;DJrLcmno321@!",
      "*;;*phone*;;*;;*;;7634095446",
      "*;;*address*;;*;;*;;1195 Lobortis Rd.",
      "*;;*city*;;*;;*;;Neverland",
      "*;;*state*;;*;;*;;NY",
      "*;;*country*;;*;;*;;Italy",
      "*;;*prefix*;;*;;*;;Mr.",
      "*;;*day*;;*;;*;;1",
      "*;;*month*;;*;;*;;1",
      "*;;*year*;;*;;*;;1970",
      "*;;*age*;;*;;*;;25",
      "*;;*zip*;;*;;*;;71983",
      "*;;*code*;;*;;*;;71983",
      "*;;*postal*;;*;;*;;71983",
      "*;;*company*;;*;;*;;MyGreaatCo",
      "*;;*org*;;*;;*;;MyGreaatCo",
      "*;;*lang*;;*;;*;;English",
      "*;;*name*;;*;;*;;James Bond",
      "*;;*user*;;*;;*;;Test",
      "*;;*;;*;;*mail*;;test@none.nowhere.com",
      "*;;*;;*;;*first*name*;;James",
      "*;;*;;*;;*last*name*;;Bond",
      "*;;*;;*;;*login*;;Test",
      "*;;*;;*;;*username*;;Test",
      "*;;*;;*;;*pass*;;DJrLcmno321@!",
      "*;;*;;*;;*phone*;;7634095446",
      "*;;*;;*;;*address*;;1195 Lobortis Rd.",
      "*;;*;;*;;*city*;;Neverland",
      "*;;*;;*;;*state*;;NY",
      "*;;*;;*;;*country*;;Italy",
      "*;;*;;*;;*prefix*;;Mr.",
      "*;;*;;*;;*day*;;1",
      "*;;*;;*;;*month*;;1",
      "*;;*;;*;;*year*;;1970",
      "*;;*;;*;;*age*;;25",
      "*;;*;;*;;*zip*;;71983",
      "*;;*;;*;;*code*;;71983",
      "*;;*;;*;;*postal*;;71983",
      "*;;*;;*;;*company*;;MyGreaatCo",
      "*;;*;;*;;*org*;;MyGreaatCo",
      "*;;*;;*;;*lang*;;English",
      "*;;*;;*;;*name*;;James Bond",
      "*;;*;;*;;*user*;;Test"
    ]
  },
  "vector": {
    "vectors": [
      "GET",
      "POST",
      "Cookie",
      "Header",
      "Path"
    ],
    "parameterExclusion": [
      "*;;PHPSESSID;;Any;;*",
      "*;;__VIEWSTATE;;Any;;*",
      "*;;__EVENTTARGET;;POST;;*",
      "*;;__EVENTARGUMENT;;POST;;*",
      "*;;__VIEWSTATEGENERATOR;;POST;;*",
      "*;;__EVENTVALIDATION;;POST;;*",
      "*;;__VIEWSTATEENCRYPTED;;POST;;*",
      "*;;__VSTATE;;Any;;*",
      "*;;__VIEWSTATEFIELDCOUNT;;Any;;*",
      "*;;__COMPRESSEDVIEWSTATE;;Any;;*",
      "*;;__ASYNCPOST;;POST;;*",
      "*;;SCROLLPOSITION?;;QUERY;;*",
      "*;;LASTFOCUS?;;QUERY;;*",
      "*;;utm*;;Any;;*",
      "*;;_ga;;Any;;*",
      "*;;_gat;;Any;;*",
      "*;;__utm*;;Any;;*",
      "*;;submit*;;POST;;*",
      "*;;submit*;;QUERY;;*",
      "*;;_javax.faces.ViewState;;POST;;*",
      "*;;_javax.faces.ViewState;;POST;;*",
      "*;;org.apache.struts.taglib.html.TOKEN;;POST;;*",
      "*;;jsessionid;;Any;;*",
      "*;;cfid;;COOKIE;;*",
      "*;;cftoken;;COOKIE;;*",
      "*;;ASP.NET_SessionId;;Any;;*",
      "*;;ASPSESSIONID*;;Any;;*",
      "*;;SITESERVER;;Any;;*",
      "*;;*csrf*;;Any;;*",
      "*;;*token*;;Any;;*",
      "*;;*nonce*;;Any;;*",
      "*;;*;;*;;COOKIE;;[md5]",
      "*;;*;;*;;COOKIE;;[guid]",
      "*;;*;;*;;PATH;;[year]",
      "*;;*;;*;;Any;;[base64]",
      "*[seo]*;;*;;*;;QUERY;;*",
      "*[non-english]*;;*;;*;;QUERY;;*",
      "*/;;*;;path;;*"
    ]
  },
  "technologies": [],
  "target": {}
}