RESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.
MIT License
2.52k
stars
283
forks
source link
InvalidValueChecker - 505 HTTP Version Not Supported from Jetty #865
run fuzz-lean ./Restler test --grammar_file ./Compile/grammar.py --dictionary_file ./Compile/dict.json --settings /shared/config/user_settings.json --no_ssl
Expected results
No response
Actual results
HTTP/1.1 505 HTTP Version Not Supported\r\nContent-Type: text/html;charset=iso-8859-1\r\nContent-Length: 65\r\nConnection: close\r\nServer: Jetty(11.0.18)\r\n\r\n
Description
Running the fuzz-lean I obtain an 505 error with unconsistent response from Jetty (HTTP/1.1 or HTTP/0.9 ?).
Moreover, trying to replicate the request with curl I don't get that error from the server but rightly a 400 Bad Request.
Steps to reproduce
I'm using a Docker container, here the steps that I perform:
docker build -t restler .
docker run --rm -it restler
wget -O api-docs.json http://my-service:8077/v3/api-docs
./Restler compile --api_spec api-docs.json
./Restler test --grammar_file ./Compile/grammar.py --dictionary_file ./Compile/dict.json --settings /shared/config/user_settings.json --no_ssl
Expected results
No response
Actual results
HTTP/1.1 505 HTTP Version Not Supported\r\nContent-Type: text/html;charset=iso-8859-1\r\nContent-Length: 65\r\nConnection: close\r\nServer: Jetty(11.0.18)\r\n\r\n
Bad Message 505
Environment details
restler v9.2.3