mirror of
https://github.com/CyberSecurityUP/NeuroSploit.git
synced 2026-06-30 07:15:30 +02:00
e565270f43
Root cause of empty results: models emit findings with confidence as a string
('High') or cvss as a number, but the Finding struct typed confidence as f64, so
serde failed the ENTIRE array on any mismatch -> 0 findings every run.
extract_findings now parses into serde_json::Value and coerces each field
(string/number/word), normalizes severity, and accepts qualitative confidence
(High->0.9 etc). Verified live: whitebox on a vulnerable sample now yields
validated findings (IDOR confirmed by vote).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
11 lines
296 B
Plaintext
11 lines
296 B
Plaintext
HTTP/1.1 200 OK
|
|
Cache-Control: private
|
|
Content-Type: text/html; charset=utf-8
|
|
Server: Microsoft-IIS/8.5
|
|
X-AspNet-Version: 2.0.50727
|
|
Set-Cookie: ASP.NET_SessionId=fnvw5h45lqt4ay45z1d0bd2u; path=/; HttpOnly
|
|
X-Powered-By: ASP.NET
|
|
Date: Tue, 23 Jun 2026 21:13:51 GMT
|
|
Content-Length: 13318
|
|
|