{
  "steps": [
    {
      "kind": "runner",
      "tool": "nextjs.ssrf",
      "status": "completed",
      "status_code": 200,
      "result_path": "/Users/x/websafe/06-case-studies/generated-runs/nextjs-nextjs--CVE-2024-34351-20260318035648/logs/attack.json"
    }
  ],
  "success": true,
  "detail": "server-side callback reached the local sink",
  "before": {},
  "attack": {
    "status_code": 200,
    "ok": true,
    "body": {
      "ok": true,
      "detail": "server-side callback reached the local sink",
      "case_id": "nextjs--CVE-2024-34351"
    }
  },
  "after": {},
  "proof": {
    "status_code": 200,
    "ok": true,
    "body": {
      "success": true,
      "detail": "server-side callback reached the local sink",
      "case_id": "nextjs--CVE-2024-34351",
      "sink_hits": 1,
      "uploads": [],
      "events": [
        {
          "event": "seed",
          "detail": "nextjs--CVE-2024-34351"
        },
        {
          "event": "sink-hit",
          "detail": "case_id=nextjs--CVE-2024-34351"
        },
        {
          "event": "attack",
          "detail": "server-side callback reached the local sink"
        }
      ]
    }
  },
  "assertions": [
    {
      "name": "proof-success",
      "kind": "runner-proof",
      "passed": true,
      "detail": "server-side callback reached the local sink"
    }
  ]
}