pentests

Submit a pentest finding

Submit a new finding against a pentest.

Open to hackers and machine integrators contributing results to the pentest. The submission is recorded together with its reporting hacker association.

Args: pentest_slug (str): Public pentest identifier. body (SubmitFindingRequest): The finding submission payload. db (AsyncSession): Request-scoped database session. context (ActiveContext): Resolved caller identity and scope.

Returns: SubmitFindingResponse: The identifier of the submitted finding.

post/v1/pentests/{pentest_slug}/findings/

Request

Base URL
https://api.ethiack.com (the document declares no server; this is the origin it was published from)
Auth
none declared

Path parameters

pentest_slugstring required

Request body

assetstring required

Asset identifier/value.

severitystring required

Severity label.

cweinteger required

CWE identifier.

cvestring nullable

CVE identifier.

scorenumber nullable

CVSS score (0-10.0).

cvss_vectorstring nullable

CVSS vector string.

titlestring required

Finding title.

markdownstring required

Finding description in Markdown.

attachmentsinteger[]

Attachment IDs.

beacon_idinteger nullable

Beacon the engine scanned through; the asset is resolved behind it.

urlstring nullable

Affected URL; resolves the finding to an asset.

modulestring nullable

Engine module that produced the finding.

submodulestring nullable

Engine submodule/template that produced the finding.

confidence_levelstring nullable

Engine confidence label for the finding.

scan_idinteger nullable

Scan that produced the finding.

job_idinteger nullable

Job that produced the finding.

sponsored_contentstring nullable

Vendor content appended to the write-up.

dataobject

Engine metadata, surfaced in the triager view.

Response

Successful Response

resultstring

finding_idstring required

Finding ID as hex string.

Changes

No recorded changes to this operation across all 1 revision of this API.