How do I reproduce a finding myself?

Steps

1. Start from Issues or a scan's Findings tab and click the finding.
2. Click the Evidence tab and scroll to Reproduction steps.
3. Read every step before you run any, because each one has a command and an expected result that you should understand first.
4. Run step 1 first. Early steps often set a baseline, so that the results of later steps make sense when you compare them.
5. Run the rest in order. Compare each outcome with the expected result written under the step.
6. Note what you saw in the finding's Notes box and click Update status.

Good to know

• Only run the steps against systems you are authorised to test. Staging is the usual choice.
• Read each command before you paste it. Some steps read data, and a step may change it.
• If a step does not give the expected result, someone may already have fixed the issue.
• Keep the same steps for later. After a fix, run them again and check that the result has changed. Same steps, new answer.

The steps sit beside the HTTP request, HTTP response and Screenshot blocks, and together they show what happened during the scan and how to see it again. For reading a raw request, use how to see the request and response.

When the results look right, record the fix. Read how to mark a finding as fixed. The Knowledge Hub also explains the idea of a proof of concept.

Related questions

• How do I see the HTTP request and response that proved a finding?
• How do I see the exact payload used to prove a finding?
• Where do I find the screenshot captured as evidence?
• How do I confirm my fixes worked?
• How do I mark a finding as fixed?

Full tutorial

How to read a finding in Cyberlop: Summary and Evidence

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre