Open zahedmohammed opened 5 years ago
Project : ticketlake
Job : Default
Env : Default
Category : Unsecured
Tags : [ OWASP - OTG-AUTHN-002, FX Top 10 - API Vulnerability]
Severity : Major
Region : FXLabs/US_WEST_1
Result : fail
Status Code : 200
Headers : {Date=[Mon, 21 Jan 2019 06:07:00 GMT], Content-Type=[application/json], Connection=[keep-alive], Access-Control-Allow-Headers=[X-Requested-With,Content-Type,Accept,Origin], Access-Control-Allow-Origin=[], Access-Control-Allow-Methods=[], Access-Control-Allow-Credentials=[true]}
Endpoint : http://virtserver.swaggerhub.com/T6352/Ticket-Lake/1.0.0/pet/165684116
Request :
Response : { "id" : 0, "category" : { "id" : 0, "name" : "string" }, "name" : "doggie", "photoUrls" : [ "string" ], "tags" : [ { "id" : 0, "name" : "string" } ], "status" : "available" }
Logs : 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : URL [http://virtserver.swaggerhub.com/T6352/Ticket-Lake/1.0.0/pet/165684116] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Method [GET] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Request [] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Request-Headers [{Content-Type=[application/json], Accept=[application/json]}] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Response [{ "id" : 0, "category" : { "id" : 0, "name" : "string" }, "name" : "doggie", "photoUrls" : [ "string" ], "tags" : [ { "id" : 0, "name" : "string" } ], "status" : "available" }] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Response-Headers [{Date=[Mon, 21 Jan 2019 06:07:00 GMT], Content-Type=[application/json], Connection=[keep-alive], Access-Control-Allow-Headers=[X-Requested-With,Content-Type,Accept,Origin], Access-Control-Allow-Origin=[], Access-Control-Allow-Methods=[], Access-Control-Allow-Credentials=[true]}] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : StatusCode [200] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Time [2297] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Size [207] 2019-01-21 06:06:59 ERROR [PetPetidGetAnonymousInvalid] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [200 == 401 OR 200 == 403] result [Failed]
--- FX Bot ---
Project : ticketlake
Job : Default
Env : Default
Category : Unsecured
Tags : [ OWASP - OTG-AUTHN-002, FX Top 10 - API Vulnerability]
Severity : Major
Region : FXLabs/US_WEST_1
Result : fail
Status Code : 200
Headers : {Date=[Mon, 21 Jan 2019 06:07:00 GMT], Content-Type=[application/json], Connection=[keep-alive], Access-Control-Allow-Headers=[X-Requested-With,Content-Type,Accept,Origin], Access-Control-Allow-Origin=[], Access-Control-Allow-Methods=[], Access-Control-Allow-Credentials=[true]}
Endpoint : http://virtserver.swaggerhub.com/T6352/Ticket-Lake/1.0.0/pet/165684116
Request :
Response :
{ "id" : 0, "category" : { "id" : 0, "name" : "string" }, "name" : "doggie", "photoUrls" : [ "string" ], "tags" : [ { "id" : 0, "name" : "string" } ], "status" : "available" }
Logs :
2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : URL [http://virtserver.swaggerhub.com/T6352/Ticket-Lake/1.0.0/pet/165684116] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Method [GET] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Request [] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Request-Headers [{Content-Type=[application/json], Accept=[application/json]}] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Response [{ "id" : 0, "category" : { "id" : 0, "name" : "string" }, "name" : "doggie", "photoUrls" : [ "string" ], "tags" : [ { "id" : 0, "name" : "string" } ], "status" : "available" }] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Response-Headers [{Date=[Mon, 21 Jan 2019 06:07:00 GMT], Content-Type=[application/json], Connection=[keep-alive], Access-Control-Allow-Headers=[X-Requested-With,Content-Type,Accept,Origin], Access-Control-Allow-Origin=[], Access-Control-Allow-Methods=[], Access-Control-Allow-Credentials=[true]}] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : StatusCode [200] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Time [2297] 2019-01-21 06:06:59 DEBUG [PetPetidGetAnonymousInvalid] : Size [207] 2019-01-21 06:06:59 ERROR [PetPetidGetAnonymousInvalid] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [200 == 401 OR 200 == 403] result [Failed]
--- FX Bot ---