Is there any output in the body we can parse? If the request is blocked by a WAF for example and returns a custom error page, the check function would report the target vulnerable.