The extension checks the following things:

1. Application response bodies for specific strings that indicate a vulnerability is present, such as error output indicative of SQLi, Serialization issues, XXE issues, etc
2. Application requests in the URL and Body for potential targets of SSRF/LFI/RFI/Directory Traversal/URL Injection attack
3. Application requests and responses in URLs, bodies, and headers for AWS S3 buckets/Azure Storage containers/Google storage containers
4. Application requests for parameters that might indicate targets for other common attack vectors (similar to HUNT)
5. Application responses for potential leaking of secrets

Usage Note

Items must be in scope for the checks to apply.