Open zahedmohammed opened 5 years ago
Project : bizpay
Job : Default
Env : Default
Category : ABAC_Level1
Tags : [FX Top 10 - API Vulnerability, Data_Access_Control]
Severity : Major
Region : Test19
Result : fail
Status Code : 500
Headers : {}
Endpoint : http://api.bizpay.co.uk/v1.25/agreements/
Request :
Response : I/O error on GET request for "http://api.bizpay.co.uk/v1.25/agreements/": Read timed out; nested exception is java.net.SocketTimeoutException: Read timed out
Logs : 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : URL [http://api.bizpay.co.uk/v1.25/agreements] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Method [POST] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Request [{ "customer" : [ { } ], "seller" : [ { } ], "agreement" : [ { } ], "notifications" : [ { } ] }] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckFAYml6cGF5LmNvLnVrOnVzZXJB]}] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Response [
] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Response-Headers [{Server=[nginx], Date=[Fri, 25 Jan 2019 12:04:05 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/agreements]}] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : StatusCode [301] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Time [300] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Size [178] 2019-01-25 00:04:06 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [301 == 200 OR 301 == 201] result [Failed] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac_Headers] : Headers [{Server=[nginx], Date=[Fri, 25 Jan 2019 12:04:05 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/agreements]}] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac_Headers] : Headers [{Server=[nginx], Date=[Fri, 25 Jan 2019 12:04:05 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/agreements]}] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac_Headers[2]] : Headers [{Server=[nginx], Date=[Fri, 25 Jan 2019 12:04:05 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/agreements]}] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac_Headers[2]] : Headers [{Server=[nginx], Date=[Fri, 25 Jan 2019 12:04:05 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/agreements]}] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : URL [http://api.bizpay.co.uk/v1.25/agreements/] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Method [GET] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Request [] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckNAYml6cGF5LmNvLnVrOnVzZXJD]}] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Response [I/O error on GET request for "http://api.bizpay.co.uk/v1.25/agreements/": Read timed out; nested exception is java.net.SocketTimeoutException: Read timed out] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Response-Headers [{}] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : StatusCode [500] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Time [15816] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Size [157] 2019-01-25 00:04:22 ERROR [AgreementsIdGetUsercDisallowAbac] : Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [500 == 401 OR 500 == 403 OR == true] result [Failed]
--- FX Bot ---
Project : bizpay
Job : Default
Env : Default
Category : ABAC_Level1
Tags : [FX Top 10 - API Vulnerability, Data_Access_Control]
Severity : Major
Region : Test19
Result : fail
Status Code : 500
Headers : {}
Endpoint : http://api.bizpay.co.uk/v1.25/agreements/
Request :
Response :
I/O error on GET request for "http://api.bizpay.co.uk/v1.25/agreements/": Read timed out; nested exception is java.net.SocketTimeoutException: Read timed out
Logs :
2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : URL [http://api.bizpay.co.uk/v1.25/agreements] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Method [POST] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Request [{ "customer" : [ { } ], "seller" : [ { } ], "agreement" : [ { } ], "notifications" : [ { } ] }] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckFAYml6cGF5LmNvLnVrOnVzZXJB]}] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Response [
301 Moved Permanently
] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Response-Headers [{Server=[nginx], Date=[Fri, 25 Jan 2019 12:04:05 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/agreements]}] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : StatusCode [301] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Time [300] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac] : Size [178] 2019-01-25 00:04:06 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [301 == 200 OR 301 == 201] result [Failed] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac_Headers] : Headers [{Server=[nginx], Date=[Fri, 25 Jan 2019 12:04:05 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/agreements]}] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac_Headers] : Headers [{Server=[nginx], Date=[Fri, 25 Jan 2019 12:04:05 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/agreements]}] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac_Headers[2]] : Headers [{Server=[nginx], Date=[Fri, 25 Jan 2019 12:04:05 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/agreements]}] 2019-01-25 00:04:06 DEBUG [PostAgreementCreateUserAInitAbac_Headers[2]] : Headers [{Server=[nginx], Date=[Fri, 25 Jan 2019 12:04:05 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/agreements]}] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : URL [http://api.bizpay.co.uk/v1.25/agreements/] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Method [GET] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Request [] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckNAYml6cGF5LmNvLnVrOnVzZXJD]}] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Response [I/O error on GET request for "http://api.bizpay.co.uk/v1.25/agreements/": Read timed out; nested exception is java.net.SocketTimeoutException: Read timed out] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Response-Headers [{}] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : StatusCode [500] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Time [15816] 2019-01-25 00:04:22 DEBUG [AgreementsIdGetUsercDisallowAbac] : Size [157] 2019-01-25 00:04:22 ERROR [AgreementsIdGetUsercDisallowAbac] : Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [500 == 401 OR 500 == 403 OR == true] result [Failed]
--- FX Bot ---