Skip to content

number starting with "0" #175

@westpharmatrihar

Description

@westpharmatrihar

I'm familiar with fuzzers on cats, and use it quite often. But recently, after checking some number validation on my back-end server, I found out one potential fuzzer that could be added

It is to generate in a body field that requires number :

  • value starting with "0" followed by random number (which must not be accepted and return 4XX)
    So basically, this new Fuzzer would be a mix of : ZeroIntegerBody and RandomPositiveIntegerBody as it generates in number field a concatenation :
    "0" + a_random_single_digit

example :
running this fuzzer in POST /test will be something like :
{"my_field": 01}

when my_field is declared in swagger as object field

type: object
    properties:
      my_field:
        description: a field
        type: integer

Of course, the last single digit cannot be lower than minimum if defined in swagger, and higher than maximum if defined in swagger.

Thanks
ps: I didn't look closely the code, I hope this kind of fuzzer is easy to generate

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions