search

flipkart-incubator / Astra

Automated Security Testing For REST API's
Apache License 2.0
2.49k stars 396 forks source link

{"status":"Failed"} #86

Closed Jennifer0099 closed 5 years ago

Jennifer0099 commented 5 years ago

I just copied the URL, headers (without any body information) from POSTMAN, and it is in JSON format, but I get {"status":"Failed"}. Why does this happen?

Jennifer0099 commented 5 years ago

I changed the format of the header to XML, and now the status changed to {"status":"a686fbf79f7ae22d2fcfe4d76f27910a"}

Jennifer0099 commented 5 years ago

the header is like ----- OAuth oauth_consumer_key="W8rvRGIPauNLgmNBmEtGqqxG",oauth_token="1026851944051163137-XASS7kzON1WhDLK5PJSQGmsV3DmUu",oauth_signature_method="HMAC-SHA1",oauth_timestamp="1547560314",oauth_nonce="x3UGfxcgLef",oauth_version="1.0",oauth_signature="r74zJx1xlPPobUvy7UjLoDc4Hdc%3D"

Jennifer0099 commented 5 years ago

the URL is like https://api.twitter.com/1.1/statuses/user_timeline.json?screen_name=Jennife1625299

Jennifer0099 commented 5 years ago

image

Jennifer0099 commented 5 years ago

I find I have already got some information, but nothing useful.

sagarpo commented 5 years ago

@Jennifer0099 Can you share the exact header you tried?

Jennifer0099 commented 5 years ago

The first time I copied directly from postman like this --- OAuth oauth_consumer_key="W8rvRGIPauNLgmNBmEtgGqqxG",oauth_token="1026851944051163137-XASS7kzON1WhDLK5PJSpQGmsV3DmUu",oauth_signature_method="HMAC-SHA1",oauth_timestamp="1547627218",oauth_nonce="W7Jgdeq0SJA",oauth_version="1.0",oauth_signature="8ANxoWn0ffZPMyiZCjrzIqcTly8%3D"

sagarpo commented 5 years ago

@Jennifer0099 You need to give it in JSON format.

Jennifer0099 commented 5 years ago

the second time i changed like --- "Consumer Key" : "W8rvRGIPauNLgmNBmEtgGqqx", in JSON format, then I got {"status":"a686fbf79f7ae22d2fcfe4d76f27910a"}

Jennifer0099 commented 5 years ago

it showed completed but I don't get any report

Jennifer0099 commented 5 years ago

and do I must give some information in body? can I leave it be empty

sagarpo commented 5 years ago

@Jennifer0099 That means the URL doesn't have any security vulnerabilities.