This page shows the statistics for the top 30 (by alert count) Active Scan rules last month. You can sort on any column - just click on the column headers.
For more details on what the stats mean see the blog post: Monthly Active Scan Rule Statistics
| Alert | Status | Alert Count | False Positive % | Average Time in Secs |
|---|---|---|---|---|
| User Agent Fuzzer | release | 42519677 | 0.001 | 37 |
| HTTPS Content Available via HTTP | release | 3418753 | 0.001 | 16 |
| SOAP Action Spoofing | beta | 1082882 | 0 | 4 |
| Cookie Slack Detector | beta | 449730 | 0.023 | 21 |
| SQL Injection | release | 429212 | 41.847 | 49 |
| Hidden File Found | release | 427470 | 0.019 | 14 |
| Proxy Disclosure | beta | 425611 | 0.018 | 59 |
| Backup File Disclosure | beta | 373733 | 0.209 | 44 |
| CORS Header | beta | 261794 | 0 | 22 |
| Directory Browsing | release | 216383 | 0.005 | 19 |
| SOAP XML Injection | beta | 209952 | 0.005 | 3 |
| GET for POST | release | 137931 | 0.001 | 4 |
| Cross Site Scripting (Reflected) | release | 115543 | 0 | 24 |
| Insecure HTTP Method | beta | 111101 | 0.005 | 9 |
| .htaccess Information Leak | release | 99157 | 0 | 5 |
| Path Traversal | release | 89424 | 0 | 71 |
| Buffer Overflow | release | 71110 | 0 | 8 |
| HTTP Only Site | release | 61199 | 0.012 | 2 |
| Trace.axd Information Leak | release | 56293 | 0 | 7 |
| .env Information Leak | release | 51617 | 0 | 5 |
| Format String Error | release | 44655 | 0.012 | 8 |
| HTTPS Configuration | alpha | 41726 | 0 | 18 |
| SQL Injection - SQLite (Time Based) | alpha | 31303 | 0.034 | 11 |
| Bypassing 403 | beta | 28068 | 0.182 | 10 |
| Source Code Disclosure - File Inclusion | beta | 25174 | 1.478 | 6 |
| Relative Path Confusion | beta | 24934 | 0 | 12 |
| Cross Site Scripting (Persistent) | release | 16118 | 0 | 5 |
| NoSQL Injection - MongoDB | beta | 15619 | 2.174 | 13 |
| Parameter Tampering | release | 15395 | 0 | 17 |
| XSLT Injection | release | 12965 | 0 | 14 |