Verification · Threat modeling · Exposure verification
Targeted confirmation
Send a request that demonstrates the weakness on a test deployment.
How to build it
- Select templates that match each exposed service found in discovery.
- Run the templates only against non-production hosts.
- Record the request and response that confirmed each finding.
Signals in a repository
- A nuclei step in a scheduled workflow that passes a templates directory or -t flags.
- A ZAP baseline or API scan job pointed at a staging URL.
In practice
No scanned repository runs a tool for this check. The steps above are the only guidance.