Loading report…
← nittim
No deterministic issues found — not a clean bill of health. 14 dimensions remain unaudited. Run Audit for the verdict.
330 of 461 files scanned (71%). Nothing was cut short by a limit — the rest is mostly images, generated output, and other non-source content this audit doesn't read.
Two scanners read 330 of 461 files: one for committed credentials, one for known vulnerabilities in your dependencies. Neither found anything. That is not a clean bill of health. These two checks cover a narrow slice of what decides whether software is ready to ship. All 14 dimensions — architecture, privacy, reliability, AI-generated-code risk and the rest — are unexamined here. Deep AI is the tier that issues a verdict. This scan does not.
src/main/resources/scripts/Authentication/db/data.sql:6, :10
:6 — -- Real passwo…8zQ' — non-production path
:10 — -- Real passwo…6mW' — non-production path
src/test/java/org/sasanlabs/internal/utility/PasswordHashingUtilsTest.java:41, :53
:41 — String rawPasswo…123"; — non-production path
:53 — String passwo…ord"; — non-production path
src/test/java/org/sasanlabs/service/vulnerability/idor/IDORLoginServiceTest.java:47, :83, :116
:47 — String rawPasswo…026"; — non-production path
:83 — String rawPasswo…026"; — non-production path
:116 — String rawPasswo…026"; — non-production path
src/test/java/org/sasanlabs/service/vulnerability/idor/IDORVulnerabilityTest.java:59, :163
:59 — String validToken …el2"; — non-production path
:163 — String invalidToken …ken"; — non-production path
src/test/java/org/sasanlabs/service/vulnerability/ldapInjection/LDAPInjectionVulnerabilityTest.java:57, :90
:57 — String username = "*)(uid=*", passwo…123"; — non-production path
:90 — String passwo…123"; — non-production path
src/test/java/org/sasanlabs/service/vulnerability/sessionManagement/SessionManagementServiceTest.java:23, :24
:23 — private static final String BAD_PASSWO…ord"; — non-production path
:24 — private static final String FIXED_TOKEN …ken"; — non-production path
Security, privacy, reliability, AI-generated-code risk, 10 more: unaudited, not clean.
The free scan doesn't reason across these — unaudited, not safe. Opus 4.8 scores each, with evidence, impact, and a fix.
Scanned 330 of 461 files · SasanLabs/VulnerableApp
Dependency manifests: 1 Maven/Gradle manifest read (declared versions, advisory). Ruby dependencies detected — dependency-CVE scanning does not cover it yet; CVEs there are UNVERIFIED, not absent.
[](https://nittim.com/library/SasanLabs/VulnerableApp)