Display attack vector (AV) data.
Values allowed: 0, 1, open, closed, accepted, invalid, all.
Specifying 0 displays minimal data on open, closed, and accepted AVs.
Specifying 1 displays details on open, closed, and accepted AVs.
Specifying 'all' displays details on AVs of all statuses.
Specifying 'open' displays details on open AVs.

With the exception of 0, 1, and 'all', comma-separated combinations of these options are also allowed.
EXAMPLE: 'open,accepted'

Display whether or not notes exist for each attack vector.

Display attack vector notes for each attack vector.

Display the 'flagged' value for each attack vector.

Display scanner tags for each attack vector.

Displays attack vectors that have the given ''unreachable'' status. If a vector has this flag set to TRUE (1), a retest on the vector returned a response that was significantly different from the original response, indicating a very different page is now associated with the attack vector path.

Display attack vector (AV) request information. Displayed by default, but can be omitted from output by setting this flag to 0.

Display attack vector (AV) response information. Displayed by default, but can be omitted from output by setting this flag to 0.

Display attack vector response body. Response body data returned may be quite large. Note that if display_response=0, this param is meaningless.

Display attack vector response body match. The body match is a portion of the body. Body match data returned may be quite large, and will include a HTML-tagged highlight of the vulnerability. Note that if display_response=0, this param is meaningless.

Display an abbreviated body match as part of the attack vector response content. PREREQUISITE: display_body=1

Display attack vector request and response headers. Note that this param is meaningless if display_request=0 and display_response=0, since headers are a part of these.

Display attack vector request parameter name and value. Displayed by default, but can be omitted from output by setting this flag to 0. Note that if display_request=0, this param is meaningless.

Requested resource format for the response.

Generated from available response content types