Comments (1)
en-milie
commented on August 25, 2024
CATS is actually sending the malformed JSON, but due to the way it creates the reports it can only incorporate valid JSONs. In order to make this more visible, the following updates were made:
- Add a section in README.md with details about the MalformedJsonFuzzer
- Add a new log line saying
Final payload:before doing the service call to check the exact payload that is being sent to the service - The report will contain the following
Scenariostring forMalformedJsonFuzeer:Scenario: Send a malformed JSON which has the string 'bla' at the end (the report won't actually display it as all requests need to be actual JSONs, but please check the logs to see the actual request payload)
from cats.
Related Issues (20)
- java.lang.IllegalArgumentException When header.yaml file is given as input HOT 5
- Link fuzzer reports with actual vulnerabilities HOT 2
- README has not got enough information. HOT 1
- The project structure seems a bit confusing HOT 2
- execution handling in readme file HOT 1
- README translation HOT 1
- For some spec files cyclic redundancy check goes into infinite loop HOT 3
- Error when fuzzing `Expected to find an object with property ['th'] in path $['th'] but found 'net.minidev.json.JSONArray'` HOT 2
- windows ： i use command java -jar cats.jar on the cmd . but there is nothing ! HOT 1
- Does exist a Docker compose example with something like PetClinic to test the cats? HOT 1
- IllegalStateException when cats executes DELETE/GET requests with URL parameters and w/o requested body HOT 2
- Response body is not being validated by OpenAPI schema HOT 2
- How to fuzz only methods that are implemented? HOT 1
- Out of bounds for length 0 HOT 5
- Default value [application/json] or any other value in produces and consumes are not fetched for swagger 2.0 HOT 2
- Incomplete group expression HOT 4
- I want to use the Bearer Token in authorization which is generated by entering the Username and password in payload for post request. HOT 1
- Use all 3 type of authorization (Oauth , Api key and Basic Auth) on different paths present in swagger application HOT 1
- Customise expected response code for API paths
- Customise expected response code for API paths
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cats.