Generic Web #1

Live submissions what the tool sent during the run

• flag accepted EF{6183ec4429cf663d9f4721f98d9a3eab} 7:43:16 PM
• flag accepted EF{6183ec4429cf663d9f4721f98d9a3eab} 7:43:24 PM
• finding CWE-22 at app.py:20 7:43:29 PM
• flag accepted EF{6183ec4429cf663d9f4721f98d9a3eab} 7:43:30 PM

Tool activity

[effractor-efbench] checking API Server at https://api.mvp.effractor.com
[effractor-efbench] operation 3e60b667-b549-4e29-aeec-de8988bdcdde started with 5 agent(s)
[effractor-efbench] agent reported accepted flag EF{6183ec4429cf663d9f4721f98d9a3eab}
[effractor-efbench] finished: flag_accepted

Vulnerabilities the ground truth, and how the tool did

• captured gt1 Path traversal in /docs/view page parameter via non-recursive "../" stripping CWE-22 medium capturable app.py:13-31

Captured means the tool exploited the vulnerability and submitted its flag. Found means it located the flaw by class and position without proving exploitation.

Findings what the tool reported

• CWE-22 app.py:20 The normalize_name function uses name.replace("../", "") which only performs a single-pass replacement. This allows attackers to bypass the filter using patterns like "..././" which become "../" after replacement, enabling directory traversal to read arbitrary files such as /proc/self/environ containing environment variables with sensitive flags.

Findings are matched to injected vulnerabilities by class and location. Unmatched findings count against precision.