Skip to content

Commit 827c6e2

Browse files
arjun-aktoarjun-akto
committed
fixed all DoS templates
1 parent 6898613 commit 827c6e2

23 files changed

+1272
-33
lines changed

‎Lack-of-Resources-and-Rate-Limiting/DateFieldInputDoS.yml‎

Lines changed: 33 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,36 @@ api_selection_filters:
3333
response_code:
3434
gte: 200
3535
lt: 300
36+
response_payload:
37+
not_contains:
38+
- Error
39+
- Internal Server
40+
- Failed
41+
- Unauthorized
42+
- access denied
43+
- Forbidden
44+
- Method Not allowed
45+
- Gateway timeout
46+
- request timeout
47+
- server error
48+
- server busy
49+
- authentication error
50+
- authorization error
51+
- validation error
52+
- Permission Denied
53+
- invalid token
54+
- token expired
55+
- session expired
56+
- session timeout
57+
- unexpected error
58+
- unable to process request
59+
- bad request
60+
- service unavailable
61+
- account is locked
62+
- account is blocked
63+
- multiple failed attempts
64+
- "NotAuthenticated"
65+
3666
or:
3767
- request_payload:
3868
for_one:
@@ -144,8 +174,9 @@ execute:
144174
- add_header:
145175
dummy_Header_Key: "dummyValue"
146176
- validate:
147-
percentage_match:
148-
gte: 90
177+
response_payload:
178+
percentage_match:
179+
gte: 90
149180
- success: x2
150181
- failure: exit
151182
- req:

‎Lack-of-Resources-and-Rate-Limiting/DoSAttachFileInBody.yml‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -41,6 +41,36 @@ api_selection_filters:
4141
response_code:
4242
gte: 200
4343
lt: 300
44+
response_payload:
45+
not_contains:
46+
- Error
47+
- Internal Server
48+
- Failed
49+
- Unauthorized
50+
- access denied
51+
- Forbidden
52+
- Method Not allowed
53+
- Gateway timeout
54+
- request timeout
55+
- server error
56+
- server busy
57+
- authentication error
58+
- authorization error
59+
- validation error
60+
- Permission Denied
61+
- invalid token
62+
- token expired
63+
- session expired
64+
- session timeout
65+
- unexpected error
66+
- unable to process request
67+
- bad request
68+
- service unavailable
69+
- account is locked
70+
- account is blocked
71+
- multiple failed attempts
72+
- "NotAuthenticated"
73+
4474
execute:
4575
type: multiple
4676
requests:

‎Lack-of-Resources-and-Rate-Limiting/DoSAttachLargeFile.yml‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,35 @@ api_selection_filters:
4848
response_code:
4949
gte: 200
5050
lt: 300
51+
response_payload:
52+
not_contains:
53+
- Error
54+
- Internal Server
55+
- Failed
56+
- Unauthorized
57+
- access denied
58+
- Forbidden
59+
- Method Not allowed
60+
- Gateway timeout
61+
- request timeout
62+
- server error
63+
- server busy
64+
- authentication error
65+
- authorization error
66+
- validation error
67+
- Permission Denied
68+
- invalid token
69+
- token expired
70+
- session expired
71+
- session timeout
72+
- unexpected error
73+
- unable to process request
74+
- bad request
75+
- service unavailable
76+
- account is locked
77+
- account is blocked
78+
- multiple failed attempts
79+
- "NotAuthenticated"
5180
request_headers:
5281
for_one:
5382
value:
@@ -78,3 +107,6 @@ validate:
78107
- compare_greater:
79108
- ${x2.response.stats.median_response_time}
80109
- ${x1.response.stats.median_response_time} * 5
110+
111+
strategy:
112+
run_once: /

‎Lack-of-Resources-and-Rate-Limiting/DoSDeeplyNestedJSONBody.yml‎

Lines changed: 64 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,36 @@ api_selection_filters:
3434
response_code:
3535
gte: 200
3636
lt: 300
37+
response_payload:
38+
not_contains:
39+
- Error
40+
- Internal Server
41+
- Failed
42+
- Unauthorized
43+
- access denied
44+
- Forbidden
45+
- Method Not allowed
46+
- Gateway timeout
47+
- request timeout
48+
- server error
49+
- server busy
50+
- authentication error
51+
- authorization error
52+
- validation error
53+
- Permission Denied
54+
- invalid token
55+
- token expired
56+
- session expired
57+
- session timeout
58+
- unexpected error
59+
- unable to process request
60+
- bad request
61+
- service unavailable
62+
- account is locked
63+
- account is blocked
64+
- multiple failed attempts
65+
- "NotAuthenticated"
66+
3767
request_payload:
3868
for_one:
3969
key:
@@ -48,8 +78,37 @@ execute:
4878
- add_header:
4979
dummy_Header_Key: "dummyValue"
5080
- validate:
51-
percentage_match:
52-
gte: 90
81+
response_payload:
82+
percentage_match:
83+
gte: 90
84+
not_contains:
85+
- Error
86+
- Internal Server
87+
- Failed
88+
- Unauthorized
89+
- access denied
90+
- Forbidden
91+
- Method Not allowed
92+
- Gateway timeout
93+
- request timeout
94+
- server error
95+
- server busy
96+
- authentication error
97+
- authorization error
98+
- validation error
99+
- Permission Denied
100+
- invalid token
101+
- token expired
102+
- session expired
103+
- session timeout
104+
- unexpected error
105+
- unable to process request
106+
- bad request
107+
- service unavailable
108+
- account is locked
109+
- account is blocked
110+
- multiple failed attempts
111+
- "NotAuthenticated"
53112
- success: x2
54113
- failure: exit
55114
- req:
@@ -66,3 +125,6 @@ validate:
66125
- compare_greater:
67126
- ${x2.response.stats.median_response_time}
68127
- ${x1.response.stats.median_response_time} * 5
128+
129+
strategy:
130+
run_once: /

‎Lack-of-Resources-and-Rate-Limiting/DoSTestCSVFileURL.yml‎

Lines changed: 61 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,36 @@ api_selection_filters:
3434
response_code:
3535
gte: 200
3636
lt: 300
37+
response_payload:
38+
not_contains:
39+
- Error
40+
- Internal Server
41+
- Failed
42+
- Unauthorized
43+
- access denied
44+
- Forbidden
45+
- Method Not allowed
46+
- Gateway timeout
47+
- request timeout
48+
- server error
49+
- server busy
50+
- authentication error
51+
- authorization error
52+
- validation error
53+
- Permission Denied
54+
- invalid token
55+
- token expired
56+
- session expired
57+
- session timeout
58+
- unexpected error
59+
- unable to process request
60+
- bad request
61+
- service unavailable
62+
- account is locked
63+
- account is blocked
64+
- multiple failed attempts
65+
- "NotAuthenticated"
66+
3767
or:
3868
- request_payload:
3969
for_one:
@@ -59,6 +89,34 @@ execute:
5989
response_payload:
6090
percentage_match:
6191
gte: 90
92+
not_contains:
93+
- Error
94+
- Internal Server
95+
- Failed
96+
- Unauthorized
97+
- access denied
98+
- Forbidden
99+
- Method Not allowed
100+
- Gateway timeout
101+
- request timeout
102+
- server error
103+
- server busy
104+
- authentication error
105+
- authorization error
106+
- validation error
107+
- Permission Denied
108+
- invalid token
109+
- token expired
110+
- session expired
111+
- session timeout
112+
- unexpected error
113+
- unable to process request
114+
- bad request
115+
- service unavailable
116+
- account is locked
117+
- account is blocked
118+
- multiple failed attempts
119+
- "NotAuthenticated"
62120
- success: x2
63121
- failure: exit
64122
- req:
@@ -77,3 +135,6 @@ validate:
77135
- compare_greater:
78136
- ${x2.response.stats.median_response_time}
79137
- ${x1.response.stats.median_response_time} * 5
138+
139+
strategy:
140+
run_once: /

‎Lack-of-Resources-and-Rate-Limiting/DoSTestHeaderKey.yml‎

Lines changed: 64 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,36 @@ api_selection_filters:
3434
response_code:
3535
gte: 200
3636
lt: 300
37+
response_payload:
38+
not_contains:
39+
- Error
40+
- Internal Server
41+
- Failed
42+
- Unauthorized
43+
- access denied
44+
- Forbidden
45+
- Method Not allowed
46+
- Gateway timeout
47+
- request timeout
48+
- server error
49+
- server busy
50+
- authentication error
51+
- authorization error
52+
- validation error
53+
- Permission Denied
54+
- invalid token
55+
- token expired
56+
- session expired
57+
- session timeout
58+
- unexpected error
59+
- unable to process request
60+
- bad request
61+
- service unavailable
62+
- account is locked
63+
- account is blocked
64+
- multiple failed attempts
65+
- "NotAuthenticated"
66+
3767
request_headers:
3868
for_one:
3969
key:
@@ -57,8 +87,37 @@ execute:
5787
- add_header:
5888
dummy_Header_Key: "dummyValue"
5989
- validate:
60-
percentage_match:
61-
gte: 90
90+
response_payload:
91+
percentage_match:
92+
gte: 90
93+
not_contains:
94+
- Error
95+
- Internal Server
96+
- Failed
97+
- Unauthorized
98+
- access denied
99+
- Forbidden
100+
- Method Not allowed
101+
- Gateway timeout
102+
- request timeout
103+
- server error
104+
- server busy
105+
- authentication error
106+
- authorization error
107+
- validation error
108+
- Permission Denied
109+
- invalid token
110+
- token expired
111+
- session expired
112+
- session timeout
113+
- unexpected error
114+
- unable to process request
115+
- bad request
116+
- service unavailable
117+
- account is locked
118+
- account is blocked
119+
- multiple failed attempts
120+
- "NotAuthenticated"
62121
- success: x2
63122
- failure: exit
64123
- req:
@@ -76,3 +135,6 @@ validate:
76135
- compare_greater:
77136
- ${x2.response.stats.median_response_time}
78137
- ${x1.response.stats.median_response_time} * 5
138+
139+
strategy:
140+
run_once: /

0 commit comments

Comments
 (0)