zahedmohammed
commented
5 years ago Project : bizpay
Job : Default
Env : Default
Region : Test19
Result : fail
Status Code : 301
Headers : {Server=[nginx], Date=[Mon, 21 Jan 2019 10:38:56 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/plans/]}
Endpoint : http://api.bizpay.co.uk/v1.25/plans/
Request :
{ }
Response :
301 Moved Permanently
Logs :
Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [301 == 401 OR 301 == 403 OR == true] result [Failed]
--- FX Bot ---
Project : bizpay
Job : Default
Env : Default
Category : ABAC_Level1
Tags : [FX Top 10 - API Vulnerability]
Severity : Major
Region : FXLabs/US_WEST_1
Result : fail
Status Code : 301
Headers : {Server=[nginx], Date=[Mon, 21 Jan 2019 06:16:39 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/plans/]}
Endpoint : http://api.bizpay.co.uk/v1.25/plans/
Request :
{ }
Response :
301 Moved Permanently
Logs :
2019-01-21 06:16:37 DEBUG [null] : URL [http://api.bizpay.co.uk/v1.25/plans] 2019-01-21 06:16:37 DEBUG [null] : Method [POST] 2019-01-21 06:16:37 DEBUG [null] : Request [{ }] 2019-01-21 06:16:37 DEBUG [null] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckFAYml6cGF5LmNvLnVrOnVzZXJB]}] 2019-01-21 06:16:37 DEBUG [null] : Response [
301 Moved Permanently
] 2019-01-21 06:16:37 DEBUG [null] : Response-Headers [{Server=[nginx], Date=[Mon, 21 Jan 2019 06:16:39 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/plans]}] 2019-01-21 06:16:37 DEBUG [null] : StatusCode [301] 2019-01-21 06:16:37 DEBUG [null] : Time [611] 2019-01-21 06:16:37 DEBUG [null] : Size [178] 2019-01-21 06:16:37 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [301 == 200 OR 301 == 201] result [Failed] 2019-01-21 06:16:37 DEBUG [PostPlanCreateUserAInitAbac_Headers] : Headers [{Server=[nginx], Date=[Mon, 21 Jan 2019 06:16:39 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/plans]}] 2019-01-21 06:16:37 DEBUG [PostPlanCreateUserAInitAbac_Headers] : Headers [{Server=[nginx], Date=[Mon, 21 Jan 2019 06:16:39 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/plans]}] 2019-01-21 06:16:37 DEBUG [PostPlanCreateUserAInitAbac_Headers[2]] : Headers [{Server=[nginx], Date=[Mon, 21 Jan 2019 06:16:39 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/plans]}] 2019-01-21 06:16:37 DEBUG [PostPlanCreateUserAInitAbac_Headers[2]] : Headers [{Server=[nginx], Date=[Mon, 21 Jan 2019 06:16:39 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/plans]}] 2019-01-21 06:16:38 DEBUG [PlansIdPutUsercDisallowAbac] : URL [http://api.bizpay.co.uk/v1.25/plans/] 2019-01-21 06:16:38 DEBUG [PlansIdPutUsercDisallowAbac] : Method [PUT] 2019-01-21 06:16:38 DEBUG [PlansIdPutUsercDisallowAbac] : Request [{ }] 2019-01-21 06:16:38 DEBUG [PlansIdPutUsercDisallowAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckNAYml6cGF5LmNvLnVrOnVzZXJD]}] 2019-01-21 06:16:38 DEBUG [PlansIdPutUsercDisallowAbac] : Response [
301 Moved Permanently
] 2019-01-21 06:16:38 DEBUG [PlansIdPutUsercDisallowAbac] : Response-Headers [{Server=[nginx], Date=[Mon, 21 Jan 2019 06:16:39 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/plans/]}] 2019-01-21 06:16:38 DEBUG [PlansIdPutUsercDisallowAbac] : StatusCode [301] 2019-01-21 06:16:38 DEBUG [PlansIdPutUsercDisallowAbac] : Time [609] 2019-01-21 06:16:38 DEBUG [PlansIdPutUsercDisallowAbac] : Size [178] 2019-01-21 06:16:38 ERROR [PlansIdPutUsercDisallowAbac] : Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [301 == 401 OR 301 == 403 OR == true] result [Failed] 2019-01-21 06:16:38 DEBUG [PlansIdDeleteAbstractAbac] : URL [http://api.bizpay.co.uk/v1.25/plans/] 2019-01-21 06:16:38 DEBUG [PlansIdDeleteAbstractAbac] : Method [DELETE] 2019-01-21 06:16:38 DEBUG [PlansIdDeleteAbstractAbac] : Request [null] 2019-01-21 06:16:38 DEBUG [PlansIdDeleteAbstractAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckFAYml6cGF5LmNvLnVrOnVzZXJB]}] 2019-01-21 06:16:38 DEBUG [PlansIdDeleteAbstractAbac] : Response [
301 Moved Permanently
] 2019-01-21 06:16:38 DEBUG [PlansIdDeleteAbstractAbac] : Response-Headers [{Server=[nginx], Date=[Mon, 21 Jan 2019 06:16:40 GMT], Content-Type=[text/html], Content-Length=[178], Connection=[keep-alive], Location=[https://api.bizpay.co.uk/v1.25/plans/]}] 2019-01-21 06:16:38 DEBUG [PlansIdDeleteAbstractAbac] : StatusCode [301] 2019-01-21 06:16:38 DEBUG [PlansIdDeleteAbstractAbac] : Time [611] 2019-01-21 06:16:38 DEBUG [PlansIdDeleteAbstractAbac] : Size [178] 2019-01-21 06:16:38 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [301 == 200] result [Failed]
--- FX Bot ---