microsoft / restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
MIT License
2.52k stars 284 forks source link

When fuzzing, only the first query parameter is fuzzed, other query parameters are contant #774

Open slxiao opened 1 year ago

slxiao commented 1 year ago

Description

As the figure shows: There are three query parameters: "VpcId, VpcName, ResourceGroupId", all with "restler_fuzzable_string" type.

During fuzzing, only the value of VpcId was changed, the other two parameters VpcName, ResourceGroupId, however, are constant value "fuzzstring". How to make them changes as well?

image

Steps to reproduce

../restler_bin/restler/Restler fuzz-lean --grammar_file Compile/grammar.py --dictionary_file dictNew.json --settings ./setting.json

Expected results

No response

Actual results

No response

Environment details

No response