RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
MIT License
2.52k
stars
284
forks
source link
[Feature Request] Allow static User-Agent header value #756
Some API endpoints will only accept requests if User-Agent criterion are met. A setting which allows users to provide a static value for the User-Agent header would make fuzzing these endpoints possible.
Design Notes
It seems like RESTler may have certain overrides for this specific header today (for example, a setting exists to decide whether or not User-Agent should be sent at all in requests). This may need to be a separate option entirely to ensure a custom value is included in all areas where requests could be sent.
💡 Idea
Some API endpoints will only accept requests if User-Agent criterion are met. A setting which allows users to provide a static value for the User-Agent header would make fuzzing these endpoints possible.
Design Notes
It seems like RESTler may have certain overrides for this specific header today (for example, a setting exists to decide whether or not User-Agent should be sent at all in requests). This may need to be a separate option entirely to ensure a custom value is included in all areas where requests could be sent.