{
    "vulnerabilities": {
        "Reflected Cross Site Scripting": [
            {
                "method": "GET",
                "path": "/advanced_xss.php",
                "info": "Reflected Cross Site Scripting vulnerability found via injection in the parameter group",
                "parameter": "group",
                "module": "xss",
                "wstg": [
                    "WSTG-INPV-01"
                ]
            },
            {
                "method": "GET",
                "path": "/intermediate_xss.php",
                "info": "Reflected Cross Site Scripting vulnerability found via injection in the parameter group",
                "parameter": "group",
                "module": "xss",
                "wstg": [
                    "WSTG-INPV-01"
                ]
            },
            {
                "method": "GET",
                "path": "/simple_xss.php",
                "info": "Reflected Cross Site Scripting vulnerability found via injection in the parameter group",
                "parameter": "group",
                "module": "xss",
                "wstg": [
                    "WSTG-INPV-01"
                ]
            }
        ]
    },
    "infos": {
        "target": "http://xss/",
        "crawled_pages": [
            {
                "request": {
                    "url": "http://xss/",
                    "method": "GET",
                    "headers": [
                        [
                            "accept",
                            "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
                        ],
                        [
                            "accept-encoding",
                            "gzip, deflate, br"
                        ],
                        [
                            "accept-language",
                            "en-US"
                        ],
                        [
                            "connection",
                            "keep-alive"
                        ],
                        [
                            "host",
                            "xss"
                        ],
                        [
                            "user-agent",
                            "Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0"
                        ]
                    ]
                },
                "response": {
                    "status_code": 200,
                    "body": "<!DOCTYPE html>\n<html>\n<head>\n\t<title>Welcome VulnWebsite</title>\n</head>\n<body>\n\t<p>This is a simple page.</p>\n\t<ul>\n    <li>this is a <a href=\"simple_xss.php\">first link</a> to a simple xss injection</li>\n    <li>this is a <a href=\"intermediate_xss.php\">second link</a> to a partially sanitized one</li>\n    <li>this is a <a href=\"advanced_xss.php\">third link</a> to the harshiest one</li>\n\t</ul>\n</body>\n</html>\n\n",
                    "headers": [
                        [
                            "connection",
                            "Keep-Alive"
                        ],
                        [
                            "content-encoding",
                            "gzip"
                        ],
                        [
                            "content-length",
                            "242"
                        ],
                        [
                            "content-type",
                            "text/html; charset=UTF-8"
                        ],
                        [
                            "server",
                            "Apache/2.4.56 (Debian)"
                        ],
                        [
                            "vary",
                            "Accept-Encoding"
                        ],
                        [
                            "x-powered-by",
                            "PHP/8.1.18"
                        ]
                    ]
                }
            },
            {
                "request": {
                    "url": "http://xss/advanced_xss.php",
                    "method": "GET",
                    "headers": [
                        [
                            "accept",
                            "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
                        ],
                        [
                            "accept-encoding",
                            "gzip, deflate, br"
                        ],
                        [
                            "accept-language",
                            "en-US"
                        ],
                        [
                            "connection",
                            "keep-alive"
                        ],
                        [
                            "host",
                            "xss"
                        ],
                        [
                            "user-agent",
                            "Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0"
                        ]
                    ]
                },
                "response": {
                    "status_code": 200,
                    "body": "<!DOCTYPE html>\n<html>\n<head>\n\t<title>Welcome VulnWebsite</title>\n</head>\n<body>\n\t<p>This is a simple page.</p>\n\t<ul>\n    <p>Hello user, there is something wrong with this page I_guess </p>\n\t</ul>\n</body>\n</html>\n\n",
                    "headers": [
                        [
                            "connection",
                            "Keep-Alive"
                        ],
                        [
                            "content-encoding",
                            "gzip"
                        ],
                        [
                            "content-length",
                            "170"
                        ],
                        [
                            "content-type",
                            "text/html; charset=UTF-8"
                        ],
                        [
                            "server",
                            "Apache/2.4.56 (Debian)"
                        ],
                        [
                            "vary",
                            "Accept-Encoding"
                        ],
                        [
                            "x-powered-by",
                            "PHP/8.1.18"
                        ]
                    ]
                }
            },
            {
                "request": {
                    "url": "http://xss/advanced_xss.php",
                    "method": "GET",
                    "headers": [
                        [
                            "accept",
                            "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
                        ],
                        [
                            "accept-encoding",
                            "gzip, deflate, br"
                        ],
                        [
                            "accept-language",
                            "en-US"
                        ],
                        [
                            "connection",
                            "keep-alive"
                        ],
                        [
                            "host",
                            "xss"
                        ],
                        [
                            "user-agent",
                            "Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0"
                        ]
                    ]
                },
                "response": {
                    "status_code": 302,
                    "body": "<!DOCTYPE html>\n<html>\n<head>\n\t<title>Welcome VulnWebsite</title>\n</head>\n<body>\n\t<p>This is a simple page.</p>\n\t<ul>\n    <p>Hello user, there is something wrong with this page wrong param ! </p>\n\t</ul>\n</body>\n</html>\n\n",
                    "headers": [
                        [
                            "connection",
                            "Keep-Alive"
                        ],
                        [
                            "content-length",
                            "220"
                        ],
                        [
                            "content-type",
                            "text/html; charset=UTF-8"
                        ],
                        [
                            "location",
                            "advanced_xss.php?group=I_guess"
                        ],
                        [
                            "server",
                            "Apache/2.4.56 (Debian)"
                        ],
                        [
                            "x-powered-by",
                            "PHP/8.1.18"
                        ]
                    ]
                }
            },
            {
                "request": {
                    "url": "http://xss/intermediate_xss.php",
                    "method": "GET",
                    "headers": [
                        [
                            "accept",
                            "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
                        ],
                        [
                            "accept-encoding",
                            "gzip, deflate, br"
                        ],
                        [
                            "accept-language",
                            "en-US"
                        ],
                        [
                            "connection",
                            "keep-alive"
                        ],
                        [
                            "host",
                            "xss"
                        ],
                        [
                            "user-agent",
                            "Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0"
                        ]
                    ]
                },
                "response": {
                    "status_code": 200,
                    "body": "<!DOCTYPE html>\n<html>\n<head>\n\t<title>Welcome VulnWebsite</title>\n</head>\n<body>\n\t<p>This is a simple page.</p>\n\t<ul>\n    <p>Hello user, there is something wrong with this page I_guess </p>\n\t</ul>\n</body>\n</html>\n\n",
                    "headers": [
                        [
                            "connection",
                            "Keep-Alive"
                        ],
                        [
                            "content-encoding",
                            "gzip"
                        ],
                        [
                            "content-length",
                            "170"
                        ],
                        [
                            "content-type",
                            "text/html; charset=UTF-8"
                        ],
                        [
                            "server",
                            "Apache/2.4.56 (Debian)"
                        ],
                        [
                            "vary",
                            "Accept-Encoding"
                        ],
                        [
                            "x-powered-by",
                            "PHP/8.1.18"
                        ]
                    ]
                }
            },
            {
                "request": {
                    "url": "http://xss/intermediate_xss.php",
                    "method": "GET",
                    "headers": [
                        [
                            "accept",
                            "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
                        ],
                        [
                            "accept-encoding",
                            "gzip, deflate, br"
                        ],
                        [
                            "accept-language",
                            "en-US"
                        ],
                        [
                            "connection",
                            "keep-alive"
                        ],
                        [
                            "host",
                            "xss"
                        ],
                        [
                            "user-agent",
                            "Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0"
                        ]
                    ]
                },
                "response": {
                    "status_code": 302,
                    "body": "<!DOCTYPE html>\n<html>\n<head>\n\t<title>Welcome VulnWebsite</title>\n</head>\n<body>\n\t<p>This is a simple page.</p>\n\t<ul>\n    <p>Hello user, there is something wrong with this page wrong param ! </p>\n\t</ul>\n</body>\n</html>\n\n",
                    "headers": [
                        [
                            "connection",
                            "Keep-Alive"
                        ],
                        [
                            "content-length",
                            "220"
                        ],
                        [
                            "content-type",
                            "text/html; charset=UTF-8"
                        ],
                        [
                            "location",
                            "intermediate_xss.php?group=I_guess"
                        ],
                        [
                            "server",
                            "Apache/2.4.56 (Debian)"
                        ],
                        [
                            "x-powered-by",
                            "PHP/8.1.18"
                        ]
                    ]
                }
            },
            {
                "request": {
                    "url": "http://xss/simple_xss.php",
                    "method": "GET",
                    "headers": [
                        [
                            "accept",
                            "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
                        ],
                        [
                            "accept-encoding",
                            "gzip, deflate, br"
                        ],
                        [
                            "accept-language",
                            "en-US"
                        ],
                        [
                            "connection",
                            "keep-alive"
                        ],
                        [
                            "host",
                            "xss"
                        ],
                        [
                            "user-agent",
                            "Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0"
                        ]
                    ]
                },
                "response": {
                    "status_code": 200,
                    "body": "<!DOCTYPE html>\n<html>\n<head>\n\t<title>Welcome VulnWebsite</title>\n</head>\n<body>\n\t<p>This is a simple page.</p>\n\t<ul>\n    <p>Hello user, there is something wrong with this page I_guess </p>\n\t</ul>\n</body>\n</html>\n\n",
                    "headers": [
                        [
                            "connection",
                            "Keep-Alive"
                        ],
                        [
                            "content-encoding",
                            "gzip"
                        ],
                        [
                            "content-length",
                            "170"
                        ],
                        [
                            "content-type",
                            "text/html; charset=UTF-8"
                        ],
                        [
                            "server",
                            "Apache/2.4.56 (Debian)"
                        ],
                        [
                            "vary",
                            "Accept-Encoding"
                        ],
                        [
                            "x-powered-by",
                            "PHP/8.1.18"
                        ]
                    ]
                }
            },
            {
                "request": {
                    "url": "http://xss/simple_xss.php",
                    "method": "GET",
                    "headers": [
                        [
                            "accept",
                            "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8"
                        ],
                        [
                            "accept-encoding",
                            "gzip, deflate, br"
                        ],
                        [
                            "accept-language",
                            "en-US"
                        ],
                        [
                            "connection",
                            "keep-alive"
                        ],
                        [
                            "host",
                            "xss"
                        ],
                        [
                            "user-agent",
                            "Mozilla/5.0 (Windows NT 6.1; rv:45.0) Gecko/20100101 Firefox/45.0"
                        ]
                    ]
                },
                "response": {
                    "status_code": 302,
                    "body": "<!DOCTYPE html>\n<html>\n<head>\n\t<title>Welcome VulnWebsite</title>\n</head>\n<body>\n\t<p>This is a simple page.</p>\n\t<ul>\n    <p>Hello user, there is something wrong with this page wrong param ! </p>\n\t</ul>\n</body>\n</html>\n\n",
                    "headers": [
                        [
                            "connection",
                            "Keep-Alive"
                        ],
                        [
                            "content-length",
                            "220"
                        ],
                        [
                            "content-type",
                            "text/html; charset=UTF-8"
                        ],
                        [
                            "location",
                            "simple_xss.php?group=I_guess"
                        ],
                        [
                            "server",
                            "Apache/2.4.56 (Debian)"
                        ],
                        [
                            "x-powered-by",
                            "PHP/8.1.18"
                        ]
                    ]
                }
            }
        ]
    }
}