# ── Fuzzer Config: Session/cookie auth ────────────────────

name: "Session Auth Fuzz"

auth:
  url: "https://example.com/api/login"
  method: POST
  headers:
    Content-Type: "application/json"
  body: '{"username": "{{USERNAME}}", "password": "{{PASS}}"}'
  token_field: "session_token"
  cache: 600

request:
  url: "https://example.com/api/search"
  method: POST
  headers:
    Authorization: "Bearer {{AUTH}}"
    Content-Type: "application/json"
  body: '{"q": "{{FUZZ}}"}'
  fuzz_encoding: json

settings:
  skip_tls_verify: false
  timeout: 30
  delay: 0.5