Skip to content

fix: reduce false positives in detection (v2.0.2)#3

Merged
devploit merged 1 commit intomainfrom
devploit/fix-false-positives
Feb 4, 2026
Merged

fix: reduce false positives in detection (v2.0.2)#3
devploit merged 1 commit intomainfrom
devploit/fix-false-positives

Conversation

@devploit
Copy link
Owner

@devploit devploit commented Feb 4, 2026

Summary

  • Redirect detection: Paths that redirect to the same destination as random paths are filtered as false positives
  • Natural variance measurement: Dynamic sites are detected and ambiguous signals are verified with control requests
  • Improved soft-404 detection: Paths with nearly identical content length to the 404 probe are filtered (within 3%)

Test plan

  • Test with site that redirects /admin/login (should NOT report)
  • Test with dynamic site (news/ads) - should NOT give false positives on params/headers
  • Verify real detections still work

🤖 Generated with Claude Code

- Add redirect detection: compare path redirects with catch-all redirect from random path probe
- Add natural variance measurement: verify ambiguous signals with control request on dynamic sites
- Improve soft-404 detection: filter paths with nearly identical content length (within 3%)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@devploit devploit merged commit 3c696af into main Feb 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant