Target Details
About Target Details
The target details page provides a comprehensive view of an Agentic Pentester assessment target and its results.
From this page, you can review discovered endpoints, analyze findings, explore the application's attack surface, and understand how the target is related to connected source code repositories.
The page is organized into tabs that provide different perspectives on the assessment:
Explore: Provides a high-level overview of the target, including vulnerability summaries, attack surface visualization, repository mappings, and OWASP API Top 10 analysis.
Sub-Targets: Displays the URLs and endpoints discovered during assessment and the findings associated with each one.
Connected Repos: Displays repositories associated with the target and their related sub-targets.
Configuration: Displays the current assessment configuration, including authentication settings, deployment environment, URL exclusions, and custom headers.
The header section provides summary information about the target, including the number of findings, deployment environment, connectivity status, and the date of the most recent assessment.
Explore tab
The Explore tab provides a high-level overview of the target.
Overview section
Sub-Targets
Displays the number of discovered URLs and the ratio of vulnerable versus secured URLs.
Issues Breakdown
Displays findings grouped by severity.
Connected Repos
Displays the number of repositories associated with the target.
Attack Graph
The Attack Graph visualizes the relationship between the target and its discovered endpoints.
Use the graph to:
Understand the discovered attack surface.
Identify vulnerable endpoints.
Explore relationships between endpoints.
Focus investigation on high-risk areas.
OWASP API Top 10
The OWASP API Top 10 section groups findings according to the OWASP API Security Top 10 categories.
Use this section to understand which API security categories are most prevalent within the target.
Sub-Targets tab
The Sub-Targets tab displays all URLs discovered during assessment.
Summary Tiles
URLs Discovered
Total number of discovered URLs.
Vulnerable URLs
Number and percentage of URLs with findings.
Issues
Total number of findings identified.
Filters
Aggregate By
Changes how results are grouped.
Findings
Filters results by finding type.
Search
Finds specific sub-targets.
Results Table
URL
Discovered URL or endpoint.
Findings
Findings associated with the URL, grouped by severity.
Connected Repos tab
OX analyzes the application from two directions:
Discovers exposed URLs and APIs from the running application.
Builds an API inventory from connected repositories.
OX compares endpoints discovered in the running application with APIs identified in the codebase. Verified matches are associated with the target and used throughout assessment and investigation workflows.
Repository mapping methods:
Automatic
OX automatically identifies repositories that are likely associated with the target.
Manual
A user explicitly selects repositories to associate with the target.
Repository correlation helps OX:
Understand application logic.
Improve attack planning.
Associate findings with source code.
Identify gaps between deployed applications and the codebase.
Build a more complete API inventory.
Repository Information
Repository Name
Connected repository.
Sub-Targets
URLs associated with the repository.
Method
Repository mapping methods:
Auto: The repository was automatically associated with the target by OX.
Manual: The repository was manually associated with the target.
To add repositories:
Click Add Repository to associate additional repositories with the target.
Select one or more repositories from the list and then select Add Repositories.
Configuration Tab
The Configuration tab displays the current target configuration used by Agentic Pentester when assessing the application.
Use this tab to review the target settings, authentication method, deployment environment, URL exclusions, and custom headers configured for the target.
Target Name
Name assigned to the target.
Target URL
URL used as the entry point for the assessment.
Authentication Method
Authentication method configured for the target.
Deployment Environment
Environment associated with the target, such as Development, Staging, or Production.
URL Exclusions
Regular expressions used to exclude URLs from assessment.
Custom Headers
Additional HTTP headers included in requests generated during the assessment.
Review the Configuration tab when troubleshooting connectivity issues, validating target settings, or confirming the scope of an assessment.
Attacks Tab
The Attacks tab displays the attack categories tested by Agentic Pentester during the penetration test. In addition to showing vulnerabilities that were found, it also shows attack categories that were tested but did not identify exploitable issues.
Use this tab to review the assessment coverage, monitor the status of each attack category, and investigate the attacks performed for individual categories.
Security standard
Select whether to display attack categories from OWASP API Security Top 10 or OWASP Web Security Top 10.
Category filter
Filters the displayed attack categories.
Search
Searches for a specific attack category.
Expand All
Expands every attack category to display detailed attack information.
Collapse All
Collapses all expanded categories.
Attack category
OWASP attack category evaluated during the assessment.
Execution status
Indicates whether the attack category has completed execution or is still pending.
Result
Indicates the assessment result for the attack category, such as whether vulnerabilities were found or no exploitable issues were identified.
Attack details
Displays the individual attacks performed for the selected category, including their status and related findings, when available.
Note: Some attack categories may display Coming Soon, indicating that support for those categories will be added in a future release.
Review the Attacks tab to understand the overall coverage of the penetration test, verify which attack categories were executed, and investigate the results for individual attack categories.
Last updated