microsoft / restler-fuzzer

RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
MIT License
2.52k stars 284 forks source link

[Feature Request] Add Authentication example in demo_server #797

Open Panchjanya opened 11 months ago

Panchjanya commented 11 months ago

💡 Idea

Extend the demo_server to have authenticated APIs and examples to use restler-fuzzer to detect unauthorized access (NameSpaceRuleChecker).

While the current demo_server is a good start, it'd be great to have examples for other Checkers which are off by default. It'd really give a clear picture and potential vulnerability detection.

Design Notes

No response

Panchjanya commented 11 months ago

Thanks a lot for this awesome fuzzer!

I'd be happy to contribute in this feature if general direction / implementation plan is decided.