search

blst-security / cherrybomb

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.
https://www.blstsecurity.com/cherrybomb
Apache License 2.0
1.08k stars 78 forks source link

Schema not recognised by cherry bomb #125

Open kraktus opened 1 year ago

kraktus commented 1 year ago

Hello,

Thank you for your project, however I am unable to run it on the Lichess spec due to the following error:

$ cherrybomb --file ../berserk/lichess-spec-fixed.json --profile passive 

╭━━━┳╮╱╱╱╱╱╱╱╱╱╱╱╱╭╮╱╱╱╱╱╱╱╭╮
┃╭━╮┃┃╱╱╱╱╱╱╱╱╱╱╱╱┃┃╱╱╱╱╱╱╱┃┃
┃┃╱╰┫╰━┳━━┳━┳━┳╮╱╭┫╰━┳━━┳╮╭┫╰━╮
┃┃╱╭┫╭╮┃┃━┫╭┫╭┫┃╱┃┃╭╮┃╭╮┃╰╯┃╭╮┃
┃╰━╯┃┃┃┃┃━┫┃┃┃┃╰━╯┃╰╯┃╰╯┃┃┃┃╰╯┃
╰━━━┻╯╰┻━━┻╯╰╯╰━╮╭┻━━┻━━┻┻┻┻━━╯
╱╱╱╱╱╱╱╱╱╱╱╱╱╱╭━╯┃
╱╱╱╱╱╱╱╱╱╱╱╱╱╱╰━━╯       v1.0.0

Starting Cherrybomb...
Opening OAS file...
Parsing OAS file...
Error: Error creating OAS struct: data did not match any variant of untagged enum SchemaRef

I believe it's the same as https://github.com/blst-security/cherrybomb/issues/100.

You can find the spec online at: https://lichess.org/api.

OmerWow commented 1 year ago

Hey @kraktus We're checking what the issue is and we'll update you soon.

Thanks for reaching out :)

karolpawlowski commented 1 year ago

Hey @OmerWow! What is the progress of this issue? I'm trying your tool with openapi.json generated by FastAPI but have the same error as @kraktus

GuyL99 commented 1 year ago

Hi @karolpawlowski, we are still checking it out, we'll should get back to you pretty soon, sorry for the delay

eamon0989 commented 10 months ago

Hi, I am also running into the same error:

Starting Cherrybomb...
Opening OAS file...
Parsing OAS file...
Error: Error creating OAS struct: data did not match any variant of untagged enum SchemaRef

I'm using an openapi.json file generated by swagger.

security101 commented 10 months ago

Hi, I am also running into the same error:

Starting Cherrybomb... Opening OAS file... Parsing OAS file... Error: Error creating OAS struct: data did not match any variant of untagged enum SecSchemeRef

Cherrybomb v1.0.0 within the ECR provided container