search

jaleelsyed / fx-local

0 stars 0 forks source link

hotel : ExampleV1HotelsGetAuthInvalid #5

Open jaleelsyed opened 5 years ago

jaleelsyed commented 5 years ago

Project : hotel

Job : j1

Env : Default

Category : InvalidAuth

Tags : [OWASP A2, OWASP A5, OWASP A6, OWASP A7, [PCI DSS 3.0] 6.5.8, [PCI DSS 3.0] 6.5.10, OTG-AUTHN-004, FX Top 10 - API Vulnerability, Non-Intrusive]

Severity : Major

Region : local

Result : fail

Status Code : 500

Headers : {}

Endpoint : http://:/example/v1/hotels?page=0&size=100

Request :

Response :
I/O error on GET request for "http://%3Chost%3E/%3Cport%3E/example/v1/hotels": ; nested exception is java.net.UnknownHostException:

Logs :
2019-02-18 09:57:56 DEBUG [ExampleV1HotelsGetAuthInvalid] : URL [http://:/example/v1/hotels?page=0&size=100] 2019-02-18 09:57:56 DEBUG [ExampleV1HotelsGetAuthInvalid] : Method [GET] 2019-02-18 09:57:56 DEBUG [ExampleV1HotelsGetAuthInvalid] : Request [] 2019-02-18 09:57:56 DEBUG [ExampleV1HotelsGetAuthInvalid] : Request-Headers [{Content-Type=[application/json], Accept=[application/xml, application/json], Authorization=[Basic aW52YWxpZHVzZXJAZnhsYWJzLmlvOlRoaXNJc0ludmFsaWRQYXNzd29yZA==]}] 2019-02-18 09:57:56 DEBUG [ExampleV1HotelsGetAuthInvalid] : Response [I/O error on GET request for "http://%3Chost%3E/%3Cport%3E/example/v1/hotels": ; nested exception is java.net.UnknownHostException: ] 2019-02-18 09:57:56 DEBUG [ExampleV1HotelsGetAuthInvalid] : Response-Headers [{}] 2019-02-18 09:57:56 DEBUG [ExampleV1HotelsGetAuthInvalid] : StatusCode [500] 2019-02-18 09:57:56 DEBUG [ExampleV1HotelsGetAuthInvalid] : Time [68] 2019-02-18 09:57:56 DEBUG [ExampleV1HotelsGetAuthInvalid] : Size [144] 2019-02-18 09:57:56 ERROR [ExampleV1HotelsGetAuthInvalid] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [500 == 401 OR 500 == 403] result [Failed]

--- FX Bot ---

jaleelsyed commented 5 years ago

Project : hotel

Job : j1

Env : Default

Region : local

Result : fail

Status Code : 500

Headers : {}

Endpoint : http://:/example/v1/hotels?page=0&size=100

Request :

Response :
I/O error on GET request for "http://%3Chost%3E/%3Cport%3E/example/v1/hotels": ; nested exception is java.net.UnknownHostException:

Logs :
2019-02-18 10:04:46 DEBUG [ExampleV1HotelsGetAuthInvalid] : URL [http://:/example/v1/hotels?page=0&size=100] 2019-02-18 10:04:46 DEBUG [ExampleV1HotelsGetAuthInvalid] : Method [GET] 2019-02-18 10:04:46 DEBUG [ExampleV1HotelsGetAuthInvalid] : Request [] 2019-02-18 10:04:46 DEBUG [ExampleV1HotelsGetAuthInvalid] : Request-Headers [{Content-Type=[application/json], Accept=[application/xml, application/json], Authorization=[Basic aW52YWxpZHVzZXJAZnhsYWJzLmlvOlRoaXNJc0ludmFsaWRQYXNzd29yZA==]}] 2019-02-18 10:04:46 DEBUG [ExampleV1HotelsGetAuthInvalid] : Response [I/O error on GET request for "http://%3Chost%3E/%3Cport%3E/example/v1/hotels": ; nested exception is java.net.UnknownHostException: ] 2019-02-18 10:04:46 DEBUG [ExampleV1HotelsGetAuthInvalid] : Response-Headers [{}] 2019-02-18 10:04:46 DEBUG [ExampleV1HotelsGetAuthInvalid] : StatusCode [500] 2019-02-18 10:04:46 DEBUG [ExampleV1HotelsGetAuthInvalid] : Time [75] 2019-02-18 10:04:46 DEBUG [ExampleV1HotelsGetAuthInvalid] : Size [144] 2019-02-18 10:04:46 ERROR [ExampleV1HotelsGetAuthInvalid] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [500 == 401 OR 500 == 403] result [Failed]

--- FX Bot ---