-
Notifications
You must be signed in to change notification settings - Fork 87
Open
Description
I'm familiar with fuzzers on cats, and use it quite often. But recently, after checking some number validation on my back-end server, I found out one potential fuzzer that could be added
It is to generate in a body field that requires number :
- value starting with "0" followed by random number (which must not be accepted and return 4XX)
So basically, this new Fuzzer would be a mix of : ZeroIntegerBody and RandomPositiveIntegerBody as it generates in number field a concatenation :
"0" + a_random_single_digit
example :
running this fuzzer in POST /test will be something like :
{"my_field": 01}
when my_field is declared in swagger as object field
type: object
properties:
my_field:
description: a field
type: integer
Of course, the last single digit cannot be lower than minimum if defined in swagger, and higher than maximum if defined in swagger.
Thanks
ps: I didn't look closely the code, I hope this kind of fuzzer is easy to generate
Metadata
Metadata
Assignees
Labels
No labels