Home / Help centre / Results & findings
Results & findings
How do I see the HTTP request and response that proved a finding?
Open the finding and click its Evidence tab. The HTTP request block holds the raw request that proved the issue, and the HTTP response block holds the raw reply. An Authentication line above them says which login, if any, the proving request used.
Steps
- Go to Issues and click the finding's row. You can also open it from a scan's Findings tab.
- Click the Evidence tab.
- Read the Authentication line first. It states which login or header the proving request used, or that none was attached.
- Scroll to HTTP request for the raw request.
- Scroll on to HTTP response for the raw reply.
Good to know
| Block | What it shows |
|---|---|
| Authentication | Which role or header the request used. A finding can say that no auth header was attached. |
| Payload injected | The exact input that was sent. |
| HTTP request | Method and path, Host, Content-Type, User-Agent, Accept and the body. |
| HTTP response | Status line, Server, Content-Type, Content-Length and an excerpt of the body. |
The response is an excerpt, so a long page appears cut down to the part that matters. Reading the two blocks side by side lets you check the claim yourself: the request is what was sent, and the response is what came back.
Proof varies with the finding. Findings are graded Confirmed, Likely or Unconfirmed by how strongly they were proven, so a weaker grade may carry thinner evidence. The blocks are plain text, so you can select them and copy them into a ticket.
To run the same steps yourself, read how to reproduce a finding. To see the screenshot, use the Screenshot block. The Knowledge Hub explains a proof of concept.
Related questions
- How do I see the exact payload used to prove a finding?
- How do I reproduce a finding myself?
- Where do I find the screenshot captured as evidence?
- How do I see the full details of a finding?
- Why aren't any of my findings marked Confirmed?
How to read a finding in Cyberlop: Summary and Evidence
Step-by-step, with annotated screenshots.
Updated · Back to the help centre
Still stuck?
Tell us what you see on screen and an engineer will help you sort it out.