Target Details
About Target Details
The target details page provides a comprehensive view of an Agentic Pentester assessment target and its results.
From this page, you can review discovered endpoints, analyze findings, explore the application's attack surface, and understand how the target is related to connected source code repositories.
The page is organized into tabs that provide different perspectives on the assessment:
Explore: Provides a high-level overview of the target, including vulnerability summaries, attack surface visualization, repository mappings, and OWASP API Top 10 analysis.
Sub-Targets: Displays the URLs and endpoints discovered during assessment and the findings associated with each one.
Connected Repos: Displays repositories associated with the target and their related sub-targets.
Configuration: Displays the current assessment configuration, including authentication settings, deployment environment, URL exclusions, and custom headers.
The header section provides summary information about the target, including the number of findings, deployment environment, connectivity status, and the date of the most recent assessment.
Target summary
The header contains:
Issues
Number of findings identified for the target.
Deployment Environment
Development, Staging, or Production environment.
Connectivity Status
Current connectivity verification status.
Last Scan
Indicates when the target was last assessed.
Explore tab
The Explore tab provides a high-level overview of the target.
Overview section
Sub-Targets
Displays the number of discovered URLs and the ratio of vulnerable versus secured URLs.
Issues Breakdown
Displays findings grouped by severity.
Connected Repos
Displays the number of repositories associated with the target.
Attack Graph
The Attack Graph visualizes the relationship between the target and its discovered endpoints.
Use the graph to:
Understand the discovered attack surface.
Identify vulnerable endpoints.
Explore relationships between endpoints.
Focus investigation on high-risk areas.
OWASP API Top 10
The OWASP API Top 10 section groups findings according to the OWASP API Security Top 10 categories.
Use this section to understand which API security categories are most prevalent within the target.
Sub-Targets tab
The Sub-Targets tab displays all URLs discovered during assessment.
Summary Tiles
URLs Discovered
Total number of discovered URLs.
Vulnerable URLs
Number and percentage of URLs with findings.
Issues
Total number of findings identified.
Filters
Aggregate By
Changes how results are grouped.
Findings
Filters results by finding type.
Search
Finds specific sub-targets.
Results Table
URL
Discovered URL or endpoint.
Findings
Findings associated with the URL, grouped by severity.
Connected Repos tab
OX analyzes the application from two directions:
Discovers exposed URLs and APIs from the running application.
Builds an API inventory from connected repositories.
OX compares endpoints discovered in the running application with APIs identified in the codebase. Verified matches are associated with the target and used throughout assessment and investigation workflows.
Repository mapping methods:
Automatic
OX automatically identifies repositories that are likely associated with the target.
Manual
A user explicitly selects repositories to associate with the target.
Repository correlation helps OX:
Understand application logic.
Improve attack planning.
Associate findings with source code.
Identify gaps between deployed applications and the codebase.
Build a more complete API inventory.
Repository Information
Repository Name
Connected repository.
Sub-Targets
URLs associated with the repository.
Method
Repository mapping methods:
Auto: The repository was automatically associated with the target by OX.
Manual: The repository was manually associated with the target.
To add repositories:
Click Add Repository to associate additional repositories with the target.
Select one or more repositories from the list and then select Add Repositories.
Configuration Tab
The Configuration tab displays the current target configuration used by Agentic Pentester when assessing the application.
Use this tab to review the target settings, authentication method, deployment environment, URL exclusions, and custom headers configured for the target.
Target Name
Name assigned to the target.
Target URL
URL used as the entry point for the assessment.
Authentication Method
Authentication method configured for the target.
Deployment Environment
Environment associated with the target, such as Development, Staging, or Production.
URL Exclusions
Regular expressions used to exclude URLs from assessment.
Custom Headers
Additional HTTP headers included in requests generated during the assessment.
Review the Configuration tab when troubleshooting connectivity issues, validating target settings, or confirming the scope of an assessment.
Last updated