File tree Expand file tree Collapse file tree 5 files changed +235
-7
lines changed
Broken-User-Authentication Expand file tree Collapse file tree 5 files changed +235
-7
lines changed Original file line number Diff line number Diff line change @@ -175,4 +175,46 @@ execute:
175175 - multiple failed attempts
176176 - " OR "
177177 neq : " ${x1.response.body}"
178+ - success : x3
179+ - failure : exit
180+ - req :
181+ - modify_body_param :
182+ userKey : ${userVal}${encodingNegativePayloads}
183+ - validate :
184+ response_code :
185+ gte : 200
186+ lt : 300
187+ response_payload :
188+ length :
189+ gt : 0
190+ not_contains :
191+ - Error
192+ - Internal Server
193+ - Failed
194+ - Unauthorized
195+ - access denied
196+ - Forbidden
197+ - Method Not allowed
198+ - Gateway timeout
199+ - request timeout
200+ - server error
201+ - server busy
202+ - authentication error
203+ - authorization error
204+ - validation error
205+ - Permission Denied
206+ - invalid token
207+ - token expired
208+ - session expired
209+ - session timeout
210+ - unexpected error
211+ - unable to process request
212+ - bad request
213+ - service unavailable
214+ - account is locked
215+ - account is blocked
216+ - multiple failed attempts
217+ - " OR "
218+ eq : " ${x2.response.body}"
178219 - success : vulnerable
220+ - failure : exit
Original file line number Diff line number Diff line change @@ -192,4 +192,52 @@ execute:
192192 - <html>
193193 - </html>
194194 neq : " ${x1.response.body}"
195+ - success : x3
196+ - failure : exit
197+ - req :
198+ - modify_body_param :
199+ userKey : ${userVal}${unionNegativeBasedPayloads}
200+ - validate :
201+ response_code :
202+ gte : 200
203+ lt : 300
204+ response_payload :
205+ length :
206+ gt : 0
207+ not_contains :
208+ - Error
209+ - Internal Server
210+ - Fail
211+ - Unauthorized
212+ - access denied
213+ - Forbidden
214+ - Method Not allowed
215+ - Gateway timeout
216+ - request timeout
217+ - server error
218+ - server busy
219+ - authentication error
220+ - authorization error
221+ - validation error
222+ - Permission Denied
223+ - invalid
224+ - token expired
225+ - session expired
226+ - session timeout
227+ - unexpected error
228+ - unable to process request
229+ - bad request
230+ - service unavailable
231+ - account is locked
232+ - account is blocked
233+ - multiple failed attempts
234+ - Attention Required!
235+ - CloudFlare
236+ - Sorry, you have been blocked
237+ - UNION
238+ - SELECT
239+ - <html>
240+ - </html>
241+ eq : " ${x2.response.body}"
195242 - success : vulnerable
243+ - failure : exit
Original file line number Diff line number Diff line change @@ -193,7 +193,52 @@ execute:
193193 - <html>
194194 - </html>
195195 neq : " ${x1.response.body}"
196+ - success : x3
197+ - failure : exit
198+ - req :
199+ - modify_body_param :
200+ userKey : ${userVal}${unionBasedNegativePayloads}
201+ - validate :
202+ response_code :
203+ gte : 200
204+ lt : 300
205+ response_payload :
206+ length :
207+ gt : 0
208+ not_contains :
209+ - Error
210+ - Internal Server
211+ - Fail
212+ - Unauthorized
213+ - access denied
214+ - Forbidden
215+ - Method Not allowed
216+ - Gateway timeout
217+ - request timeout
218+ - server error
219+ - server busy
220+ - authentication error
221+ - authorization error
222+ - validation error
223+ - Permission Denied
224+ - invalid
225+ - token expired
226+ - session expired
227+ - session timeout
228+ - unexpected error
229+ - unable to process request
230+ - bad request
231+ - service unavailable
232+ - account is locked
233+ - account is blocked
234+ - multiple failed attempts
235+ - Attention Required!
236+ - CloudFlare
237+ - Sorry, you have been blocked
238+ - " UNION"
239+ - " GROUP_CONCAT"
240+ - <html>
241+ - </html>
242+ eq : " ${x2.response.body}"
196243 - success : vulnerable
197-
198-
199-
244+ - failure : exit
Original file line number Diff line number Diff line change @@ -192,7 +192,52 @@ execute:
192192 - <html>
193193 - </html>
194194 neq : " ${x1.response.body}"
195+ - success : x3
196+ - failure : exit
197+ - req :
198+ - modify_body_param :
199+ userKey : ${userVal}${unionBasedNegativePayloads}
200+ - validate :
201+ response_code :
202+ gte : 200
203+ lt : 300
204+ response_payload :
205+ length :
206+ gt : 0
207+ not_contains :
208+ - Error
209+ - Internal Server
210+ - Fail
211+ - Unauthorized
212+ - access denied
213+ - Forbidden
214+ - Method Not allowed
215+ - Gateway timeout
216+ - request timeout
217+ - server error
218+ - server busy
219+ - authentication error
220+ - authorization error
221+ - validation error
222+ - Permission Denied
223+ - invalid
224+ - token expired
225+ - session expired
226+ - session timeout
227+ - unexpected error
228+ - unable to process request
229+ - bad request
230+ - service unavailable
231+ - account is locked
232+ - account is blocked
233+ - multiple failed attempts
234+ - Attention Required!
235+ - CloudFlare
236+ - Sorry, you have been blocked
237+ - " UNION"
238+ - " GROUP_CONCAT"
239+ - <html>
240+ - </html>
241+ eq : " ${x2.response.body}"
195242 - success : vulnerable
196-
197-
198-
243+ - failure : exit
Original file line number Diff line number Diff line change @@ -193,5 +193,53 @@ execute:
193193 - <html>
194194 - </html>
195195 neq : " ${x1.response.body}"
196+ - success : x3
197+ - failure : exit
198+ - req :
199+ - modify_body_param :
200+ userKey : ${userVal}${unionBasedNegativePayloads}
201+ - validate :
202+ response_code :
203+ gte : 200
204+ lt : 300
205+ response_payload :
206+ length :
207+ gt : 0
208+ not_contains :
209+ - Error
210+ - Internal Server
211+ - Fail
212+ - Unauthorized
213+ - access denied
214+ - Forbidden
215+ - Method Not allowed
216+ - Gateway timeout
217+ - request timeout
218+ - server error
219+ - server busy
220+ - authentication error
221+ - authorization error
222+ - validation error
223+ - Permission Denied
224+ - invalid
225+ - token expired
226+ - session expired
227+ - session timeout
228+ - unexpected error
229+ - unable to process request
230+ - bad request
231+ - service unavailable
232+ - account is locked
233+ - account is blocked
234+ - multiple failed attempts
235+ - Attention Required!
236+ - CloudFlare
237+ - Sorry, you have been blocked
238+ - UNION
239+ - SELECT
240+ - " WHERE "
241+ - <html>
242+ - </html>
243+ eq : " ${x2.response.body}"
196244 - success : vulnerable
197-
245+ - failure : exit
You can’t perform that action at this time.
0 commit comments