Closed tanx16 closed 3 years ago
For some magical reason, if we put operation id as the first variable in a function, we can inject without errors. This still ran into the caching issue though, so I added a check for if the args match when passed in.
This change now allows users to select different authentication headers depending on the operation id. If the function decorated with
victim_account
orattacker_account
starts with aoperation_id
, then the operation id will automatically be passed in when fuzzing.