search

amjadafanah / FX-SAAS-9

This project is for testing the security and quality of APIs in FX SaaS
0 stars 0 forks source link

FX-SAAS-9 : ApiV1BotClustersSuperbotnetworkGetPathParamSqlInjectionMysqlPage #560

Open amjadafanah opened 6 years ago

amjadafanah commented 6 years ago

Project : FX-SAAS-9

Job : Dev

Env : Dev

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 200

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Tue, 11 Sep 2018 10:43:33 GMT]}

Endpoint : http://13.56.210.25/api/v1/bot-clusters/superbotnetwork?page=

Request :

Response :
{ "requestId" : "None", "requestTime" : "2018-09-11T10:43:34.105+0000", "errors" : false, "messages" : [ ], "data" : [ { "id" : "8a8080e7657b6af401657b6d2b4f0000", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-08-27T12:47:56.749+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-08-27T12:47:56.831+0000", "version" : null, "inactive" : false, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "account" : { "id" : "8a80808a657aacf801657b0434880028", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-08-27T10:53:17.832+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-08-27T10:53:17.832+0000", "version" : null, "inactive" : false, "name" : "Self_Hosted", "region" : null, "accessKey" : null, "secretKey" : null, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "accountType" : "Self_Hosted", "prop1" : null, "prop2" : null, "prop3" : null, "allowedRegions" : [ ] }, "driver" : "MANUAL", "status" : null, "visibility" : "PRIVATE", "cloudType" : "OTHER", "name" : "US_WEST_1", "region" : "Self_Hosted", "key" : "eoPyhNuYYKZjVpTbONNnJfpDA9sEMzvctmoBIaRZNEo=", "min" : 1, "max" : null, "live" : null, "nodeId" : null, "manual" : false, "manualScript" : "docker run -d -e FX_HOST=13.56.210.25 -e FX_PORT=5672 -e FX_SSL=false -e FX_IAM=sH6XxQyw785qzH0jdQWNUfCYXIR8EOev -e FX_KEY=eoPyhNuYYKZjVpTbONNnJfpDA9sEMzvctmoBIaRZNEo= fxlabs/bot:latest" } ], "totalPages" : 1, "totalElements" : 1 }

Logs :
Assertion [@ResponseTime >= 5000] failed, expected value [5000] but found [43] --- FX Bot ---

amjadafanah commented 6 years ago

Project : FX-SAAS-9

Job : Dev

Env : Dev

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 200

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzEzNDc2OTMtYTY2MC00Y2ZkLTlmMDgtNDMxODU2NTZiOWNm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 12 Sep 2018 10:51:12 GMT]}

Endpoint : http://13.56.210.25/api/v1/bot-clusters/superbotnetwork?page=

Request :

Response :
{ "requestId" : "None", "requestTime" : "2018-09-12T10:51:12.436+0000", "errors" : false, "messages" : [ ], "data" : [ { "id" : "8a8080e7657b6af401657b6d2b4f0000", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-08-27T12:47:56.749+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-08-27T12:47:56.831+0000", "version" : null, "inactive" : false, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "account" : { "id" : "8a80808a657aacf801657b0434880028", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-08-27T10:53:17.832+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-08-27T10:53:17.832+0000", "version" : null, "inactive" : false, "name" : "Self_Hosted", "region" : null, "accessKey" : null, "secretKey" : null, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "accountType" : "Self_Hosted", "prop1" : null, "prop2" : null, "prop3" : null, "allowedRegions" : [ ] }, "driver" : "MANUAL", "status" : null, "visibility" : "PRIVATE", "cloudType" : "OTHER", "name" : "US_WEST_1", "region" : "Self_Hosted", "key" : "eoPyhNuYYKZjVpTbONNnJfpDA9sEMzvctmoBIaRZNEo=", "min" : 1, "max" : null, "live" : null, "nodeId" : null, "manual" : false, "manualScript" : "docker run -d -e FX_HOST=13.56.210.25 -e FX_PORT=5672 -e FX_SSL=false -e FX_IAM=sH6XxQyw785qzH0jdQWNUfCYXIR8EOev -e FX_KEY=eoPyhNuYYKZjVpTbONNnJfpDA9sEMzvctmoBIaRZNEo= fxlabs/bot:latest" } ], "totalPages" : 1, "totalElements" : 1 }

Logs :
Assertion [@ResponseTime >= 5000] failed, expected value [5000] but found [692] --- FX Bot ---

amjadafanah commented 6 years ago

Project : FX-SAAS-9

Job : Dev

Env : Dev

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 200

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Sat, 15 Sep 2018 10:49:56 GMT]}

Endpoint : http://13.56.210.25/api/v1/bot-clusters/superbotnetwork?page=

Request :

Response :
{ "requestId" : "None", "requestTime" : "2018-09-15T10:49:56.992+0000", "errors" : false, "messages" : [ ], "data" : [ { "id" : "8a80807a65ce185c0165ce1af6c80001", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-09-12T14:06:38.280+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-09-12T14:06:38.280+0000", "version" : null, "inactive" : false, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "account" : { "id" : "8a8080da65a8b2070165a9575fbc0015", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-09-05T10:46:40.316+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-09-05T10:46:40.316+0000", "version" : null, "inactive" : false, "name" : "sample", "region" : null, "accessKey" : "FXLabs//admin@fxlabs.io", "secretKey" : "Dylu+k4DQgHBygEFbY7toVjF4oLOEq/1", "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "accountType" : "AWS", "prop1" : null, "prop2" : null, "prop3" : null, "allowedRegions" : [ ] }, "driver" : "MANUAL", "status" : null, "visibility" : "PRIVATE", "cloudType" : "OTHER", "name" : "Bot Testing", "region" : "us-west-1", "key" : "9wEj3d/aI/E8Y1eXmPL0G3o8K8MeiRWV7E7wyayXsQI=", "min" : 6, "max" : null, "live" : null, "nodeId" : null, "manual" : false, "manualScript" : null }, { "id" : "8a80807465cda69c0165cdd9963f21a8", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-09-12T12:55:13.727+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-09-12T12:55:13.743+0000", "version" : null, "inactive" : false, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "account" : { "id" : "8a80808a657aacf801657b0434880028", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-08-27T10:53:17.832+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-08-27T10:53:17.832+0000", "version" : null, "inactive" : false, "name" : "Self_Hosted", "region" : null, "accessKey" : null, "secretKey" : null, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "accountType" : "Self_Hosted", "prop1" : null, "prop2" : null, "prop3" : null, "allowedRegions" : [ ] }, "driver" : "MANUAL", "status" : null, "visibility" : "PRIVATE", "cloudType" : "OTHER", "name" : "vvv", "region" : "Self_Hosted", "key" : "m5GJwkw4cbmIppFlaKEPcfYCOp62jouYlaUP7aBNQjw=", "min" : 1, "max" : null, "live" : null, "nodeId" : null, "manual" : false, "manualScript" : "docker run -d -e FX_IAM=sH6XxQyw785qzH0jdQWNUfCYXIR8EOev -e FX_KEY=m5GJwkw4cbmIppFlaKEPcfYCOp62jouYlaUP7aBNQjw= fxlabs/bot:latest" }, { "id" : "8a80807465cda69c0165cdce3c9f1610", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-09-12T12:42:49.887+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-09-12T12:42:49.906+0000", "version" : null, "inactive" : false, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "account" : { "id" : "8a80808a657aacf801657b0434880028", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-08-27T10:53:17.832+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-08-27T10:53:17.832+0000", "version" : null, "inactive" : false, "name" : "Self_Hosted", "region" : null, "accessKey" : null, "secretKey" : null, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "accountType" : "Self_Hosted", "prop1" : null, "prop2" : null, "prop3" : null, "allowedRegions" : [ ] }, "driver" : "MANUAL", "status" : null, "visibility" : "PRIVATE", "cloudType" : "OTHER", "name" : "Bbot ", "region" : "Self_Hosted", "key" : "TrwOFaS0WtUcyhpdi2zLwQNqOgyp9S54vpRMLt9OTFk=", "min" : 1, "max" : null, "live" : null, "nodeId" : null, "manual" : false, "manualScript" : "docker run -d -e FX_IAM=sH6XxQyw785qzH0jdQWNUfCYXIR8EOev -e FX_KEY=TrwOFaS0WtUcyhpdi2zLwQNqOgyp9S54vpRMLt9OTFk= fxlabs/bot:latest" }, { "id" : "8a80807465cda69c0165cdccb769160d", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-09-12T12:41:10.249+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-09-12T12:41:10.249+0000", "version" : null, "inactive" : false, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "account" : { "id" : "8a8080da65a8b2070165a9575fbc0015", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-09-05T10:46:40.316+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-09-05T10:46:40.316+0000", "version" : null, "inactive" : false, "name" : "sample", "region" : null, "accessKey" : "FXLabs//admin@fxlabs.io", "secretKey" : "Dylu+k4DQgHBygEFbY7toVjF4oLOEq/1", "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "accountType" : "AWS", "prop1" : null, "prop2" : null, "prop3" : null, "allowedRegions" : [ ] }, "driver" : "MANUAL", "status" : null, "visibility" : "PRIVATE", "cloudType" : "OTHER", "name" : "Bot testing", "region" : "us-west-1", "key" : "m3bCBS0cWikDQR1YwU/Dpgs/GDQVUTRr/7x4tsk4bwk=", "min" : 1, "max" : null, "live" : null, "nodeId" : null, "manual" : false, "manualScript" : null }, { "id" : "8a80807465cda69c0165cdb4cca315fd", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-09-12T12:15:02.819+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-09-12T12:15:02.819+0000", "version" : null, "inactive" : false, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "account" : { "id" : "8a8080da65a8b2070165a9575fbc0015", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-09-05T10:46:40.316+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-09-05T10:46:40.316+0000", "version" : null, "inactive" : false, "name" : "sample", "region" : null, "accessKey" : "FXLabs//admin@fxlabs.io", "secretKey" : "Dylu+k4DQgHBygEFbY7toVjF4oLOEq/1", "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "accountType" : "AWS", "prop1" : null, "prop2" : null, "prop3" : null, "allowedRegions" : [ ] }, "driver" : "MANUAL", "status" : null, "visibility" : "PRIVATE", "cloudType" : "OTHER", "name" : null, "region" : "us-west-1", "key" : "8Dv2qs3pdo7dudr48Wh3knt3A9iRdCvIVPGO9J4rKNo=", "min" : 1, "max" : null, "live" : null, "nodeId" : null, "manual" : false, "manualScript" : null }, { "id" : "8a8080e7657b6af401657b6d2b4f0000", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-08-27T12:47:56.749+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-08-27T12:47:56.831+0000", "version" : null, "inactive" : false, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "account" : { "id" : "8a80808a657aacf801657b0434880028", "createdBy" : "8a80808a657aacf801657ab17ca30000", "createdDate" : "2018-08-27T10:53:17.832+0000", "modifiedBy" : "8a80808a657aacf801657ab17ca30000", "modifiedDate" : "2018-08-27T10:53:17.832+0000", "version" : null, "inactive" : false, "name" : "Self_Hosted", "region" : null, "accessKey" : null, "secretKey" : null, "org" : { "id" : "8a80808a657aacf801657ab17dd30003", "createdBy" : "anonymousUser", "createdDate" : "2018-08-27T09:22:57.107+0000", "modifiedBy" : "anonymousUser", "modifiedDate" : "2018-08-27T09:22:57.107+0000", "version" : null, "inactive" : false, "name" : "FXLabs" }, "accountType" : "Self_Hosted", "prop1" : null, "prop2" : null, "prop3" : null, "allowedRegions" : [ ] }, "driver" : "MANUAL", "status" : null, "visibility" : "PRIVATE", "cloudType" : "OTHER", "name" : "US_WEST_1", "region" : "Self_Hosted", "key" : "eoPyhNuYYKZjVpTbONNnJfpDA9sEMzvctmoBIaRZNEo=", "min" : 1, "max" : null, "live" : null, "nodeId" : null, "manual" : false, "manualScript" : "docker run -d -e FX_HOST=13.56.210.25 -e FX_PORT=5672 -e FX_SSL=false -e FX_IAM=sH6XxQyw785qzH0jdQWNUfCYXIR8EOev -e FX_KEY=eoPyhNuYYKZjVpTbONNnJfpDA9sEMzvctmoBIaRZNEo= fxlabs/bot:latest" } ], "totalPages" : 1, "totalElements" : 6 }

Logs :
Assertion [@ResponseTime >= 5000] failed, expected value [5000] but found [13] --- FX Bot ---