jaleelsyed / fxt_local

0 stars 0 forks source link

SQLInjection2 : ExampleV1HotelsGetQueryParamPageInvalidDatatype #233

Closed jaleelsyed closed 5 years ago

jaleelsyed commented 5 years ago

Project : SQLInjection2

Job : invalid Data

Env : Default

Category : Invalid_Data

Tags : [OWASP - OTG-BUSLOGIC-001, Fuzz]

Severity : Major

Region : local

Result : fail

Status Code : 500

Headers : {}

Endpoint : http://localhost:8090/example/v1/hotels?page=4FSjz1&size=975259951

Request :

Response :
I/O error on GET request for "http://localhost:8090/example/v1/hotels": Connect to localhost:8090 [localhost/127.0.0.1, localhost/0:0:0:0:0:0:0:1] failed: Connection refused: connect; nested exception is org.apache.http.conn.HttpHostConnectException: Connect to localhost:8090 [localhost/127.0.0.1, localhost/0:0:0:0:0:0:0:1] failed: Connection refused: connect

Logs :
2019-01-22 10:13:48 DEBUG [ExampleV1HotelsGetQueryParamPageInvalidDatatype] : URL [http://localhost:8090/example/v1/hotels?page=4FSjz1&size=975259951] 2019-01-22 10:13:48 DEBUG [ExampleV1HotelsGetQueryParamPageInvalidDatatype] : Method [GET] 2019-01-22 10:13:48 DEBUG [ExampleV1HotelsGetQueryParamPageInvalidDatatype] : Request [] 2019-01-22 10:13:48 DEBUG [ExampleV1HotelsGetQueryParamPageInvalidDatatype] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic Y2hhbmdlbWVAZnhsYWJzLmlvOmNoYW5nZXRoaXNwYXNzd29yZA==]}] 2019-01-22 10:13:48 DEBUG [ExampleV1HotelsGetQueryParamPageInvalidDatatype] : Response [I/O error on GET request for "http://localhost:8090/example/v1/hotels": Connect to localhost:8090 [localhost/127.0.0.1, localhost/0:0:0:0:0:0:0:1] failed: Connection refused: connect; nested exception is org.apache.http.conn.HttpHostConnectException: Connect to localhost:8090 [localhost/127.0.0.1, localhost/0:0:0:0:0:0:0:1] failed: Connection refused: connect] 2019-01-22 10:13:48 DEBUG [ExampleV1HotelsGetQueryParamPageInvalidDatatype] : Response-Headers [{}] 2019-01-22 10:13:48 DEBUG [ExampleV1HotelsGetQueryParamPageInvalidDatatype] : StatusCode [500] 2019-01-22 10:13:48 DEBUG [ExampleV1HotelsGetQueryParamPageInvalidDatatype] : Time [2032] 2019-01-22 10:13:48 DEBUG [ExampleV1HotelsGetQueryParamPageInvalidDatatype] : Size [361] 2019-01-22 10:13:48 ERROR [ExampleV1HotelsGetQueryParamPageInvalidDatatype] : Assertion [@StatusCode == 404] resolved-to [500 == 404] result [Failed] 2019-01-22 10:13:48 ERROR [ExampleV1HotelsGetQueryParamPageInvalidDatatype] : Assertion [@StatusCode == 401] resolved-to [500 == 401] result [Failed]

--- FX Bot ---