{
  "entrypoint_kind": "endpoint",
  "entrypoint_detail": "GET /?page_id=<id>&pagename=<double-encoded traversal>&+config-create+<php>+<shell-path> against Apache/WordPress front controller",
  "service_started": true,
  "healthcheck_passed": true,
  "target_path_reached": true,
  "runtime_stack": [
    "apache2",
    "php-8.3(mod_php)",
    "wordpress",
    "mysql-8.0"
  ],
  "target_identity": {
    "repository_url": "https://github.com/WordPress/wordpress-develop",
    "target_digest": "450b5e2ceb9276280ccd0a3507f93e1972af54224ed23209de41f3d4bcd245a4",
    "platform": "linux",
    "architecture": "x86_64",
    "commit_sha": "a940fbc1e63a7e24d31a28e707e545ad4873cb84",
    "runtime_digest": "sha256:51464c8fdb100c5cd2ebfaec1834cf111d993bc4929ef2330c1cc721eda0fc30"
  },
  "proof_artifacts": [
    "logs/reproduction_preconditions.log",
    "logs/vuln_attempt1_request.txt",
    "logs/vuln_attempt1_response.txt",
    "logs/vuln_attempt1_command.txt",
    "logs/vuln_attempt1_command_request.txt",
    "logs/vuln_attempt1_lfi_request.txt",
    "logs/vuln_attempt1_lfi_response.txt",
    "logs/vuln_attempt2_request.txt",
    "logs/vuln_attempt2_response.txt",
    "logs/vuln_attempt2_command.txt",
    "logs/vuln_attempt2_command_request.txt",
    "logs/vuln_attempt2_lfi_request.txt",
    "logs/vuln_attempt2_lfi_response.txt",
    "logs/fixed_attempt1_request.txt",
    "logs/fixed_attempt1_response.txt",
    "logs/fixed_attempt1_command.txt",
    "logs/fixed_attempt1_command_request.txt",
    "logs/fixed_attempt1_lfi_request.txt",
    "logs/fixed_attempt1_lfi_response.txt",
    "logs/fixed_attempt2_request.txt",
    "logs/fixed_attempt2_response.txt",
    "logs/fixed_attempt2_command.txt",
    "logs/fixed_attempt2_command_request.txt",
    "logs/fixed_attempt2_lfi_request.txt",
    "logs/fixed_attempt2_lfi_response.txt",
    "logs/vuln.homepage.html"
  ],
  "artifact_sha256": {
    "logs/reproduction_preconditions.log": "a64d0452cc6b1d290f7258e1abe1a82595b51c0de32da566087eadd185f8d6cf",
    "logs/vuln_attempt1_request.txt": "4dc39d271d35cea5320197294b287fb82c6ce4281da776815a43c58b76e95108",
    "logs/vuln_attempt1_response.txt": "7d93cf8be3e9b401d3320b7e55baba53e1f128b80674d40404620a273ffe9dd6",
    "logs/vuln_attempt1_command.txt": "cabf7fd244c48dd1a29783a90f72e3697d0b64bc5493d066d5bf5b9fb15c5da9",
    "logs/vuln_attempt1_command_request.txt": "854d41cd9451e64f27297d5236e3af0351e65e70a95f8bd36f2a7cadc8e0f6ef",
    "logs/vuln_attempt1_lfi_request.txt": "b9d3c8253ca2ad6ce388c0ff2a7ce6561cd755f1d3bab2733550963edc62659c",
    "logs/vuln_attempt1_lfi_response.txt": "104b3cba0d79506c4b2fc8838120e7d1fe7c98b7f6e14b0b37e5ef8e2b51ebad",
    "logs/vuln_attempt2_request.txt": "e5d57d6235126975dd96f573c2ab9d8c43205b44ad3f4a6a719ab3030a5872e0",
    "logs/vuln_attempt2_response.txt": "a454f9adbde58252c79cf0816796e9fb41f2d3a9e9ba4902210174079a6e27e3",
    "logs/vuln_attempt2_command.txt": "37b3e13091be34f06cd7292a64a859e778556f3269dfdf34ed8819c04a7721be",
    "logs/vuln_attempt2_command_request.txt": "5d73f1fcc9195979a6b020973e07231165224f3dd2000a2f5745f17609d5d343",
    "logs/vuln_attempt2_lfi_request.txt": "b9d3c8253ca2ad6ce388c0ff2a7ce6561cd755f1d3bab2733550963edc62659c",
    "logs/vuln_attempt2_lfi_response.txt": "104b3cba0d79506c4b2fc8838120e7d1fe7c98b7f6e14b0b37e5ef8e2b51ebad",
    "logs/fixed_attempt1_request.txt": "2dcbaf21d66bd8620f457f1011e15707d607fd80523eb62cc53228564d99ec1c",
    "logs/fixed_attempt1_response.txt": "4cb50e3c1402c48d981a3ca226d7a2ee26db288f3688b46850148431ed3e9cb9",
    "logs/fixed_attempt1_command.txt": "f564b5cb3b3b8f5bdcba6570822f5dc7c55c8c8a8a4efd0e9c9f9d86d0c64d9e",
    "logs/fixed_attempt1_command_request.txt": "116201879cf4f0d7ae8cff3a569fb25149dbf7f9b1260275f98b63952d2e7d71",
    "logs/fixed_attempt1_lfi_request.txt": "d4d46c275f7d16cd8694d366499cd48c0b47f71432b5cee00e768010fbc07cda",
    "logs/fixed_attempt1_lfi_response.txt": "4cb50e3c1402c48d981a3ca226d7a2ee26db288f3688b46850148431ed3e9cb9",
    "logs/fixed_attempt2_request.txt": "b731815a0dcf1b3aac8deb7af172b7a180dbb2a5a7d519557c94467264c156ee",
    "logs/fixed_attempt2_response.txt": "4cb50e3c1402c48d981a3ca226d7a2ee26db288f3688b46850148431ed3e9cb9",
    "logs/fixed_attempt2_command.txt": "f564b5cb3b3b8f5bdcba6570822f5dc7c55c8c8a8a4efd0e9c9f9d86d0c64d9e",
    "logs/fixed_attempt2_command_request.txt": "cd9e216ca6f5f1f3fbcf3c4afe325e343f838f97fb3bf9f92f8732bcb72d6ab8",
    "logs/fixed_attempt2_lfi_request.txt": "d4d46c275f7d16cd8694d366499cd48c0b47f71432b5cee00e768010fbc07cda",
    "logs/fixed_attempt2_lfi_response.txt": "4cb50e3c1402c48d981a3ca226d7a2ee26db288f3688b46850148431ed3e9cb9",
    "logs/vuln.homepage.html": "4851225b415ae75f3761f138de59e4bf187e85b56907a204d7200085abfafc0c"
  },
  "notes": "2/2 vulnerable attempts: unauthenticated GET included /usr/local/lib/php/pearcmd.php (LFI marker also confirmed) and config-create wrote a webroot shell executed as uid=33(www-data); 2/2 fixed 7.1.2 attempts blocked"
}