Sample report
Every finding, exploited and verified
A real Axeploit run against a demo storefront. Agents mapped every host, made their own accounts, and proved each issue with a working exploit. Filter by host or severity, and open any row for the proof.
- 6 hosts mapped
- 10 verified findings
- PoC for every issue
Security report
Completed
Target
https://axeploitcart.com
Duration1h 23mHosts6Subdomains5
Scan coverage18/42 classes
Subdomain scan enabled. Every discovered host was tested against the selected vulnerability classes.
Total findings
10
Critical
6
High
2
Medium
1
Low
1
Info
0
Hosts
6All hosts · select a node to scope
Vulnerabilities
10SeverityVulnerabilityHostEndpoint
CriticalSQL Injection in Product Filter (CWE-89)https://axeploitcart.com/products
CriticalMass Assignment Vulnerability (CWE-915)https://api.axeploitcart.com/v1/users/me
CriticalOpen S3 Bucket (CWE-200)https://assets.axeploitcart.com
CriticalAdmin Panel Exposed (CWE-284)https://axeploitcart.com/admin
CriticalSubdomain Takeover (DNS Misconfiguration)https://internal.axeploitcart.com
CriticalDefault Credentials (CWE-1390)https://test.api.axeploitcart.com/admin/login
HighInsecure Direct Object Reference (IDOR) on User Profile (CWE-284)https://api.axeploitcart.com/v1/users/{userId}
HighExposed Git Repository (CWE-541)https://staging.api.axeploitcart.com/.git
MediumVerbose Error Messages (CWE-209)https://axeploitcart.com/products
LowMissing Security Headers (OWASP A05:2021)https://axeploitcart.com
Your turn
Get a report like this for your own app
Point Axeploit at a domain. Agents map every host, sign up, exploit what they find, and hand you verified findings with proof.