Operator
de56d1f494
HTTP/AI adversarial fuzzer. Stripped finding database and internal testing framework references. Configs sanitized.
27 lines
611 B
YAML
27 lines
611 B
YAML
# ── Fuzzer Config: Session/cookie auth ────────────────────
|
|
|
|
name: "Session Auth Fuzz"
|
|
|
|
auth:
|
|
url: "https://example.com/api/login"
|
|
method: POST
|
|
headers:
|
|
Content-Type: "application/json"
|
|
body: '{"username": "{{USERNAME}}", "password": "{{PASS}}"}'
|
|
token_field: "session_token"
|
|
cache: 600
|
|
|
|
request:
|
|
url: "https://example.com/api/search"
|
|
method: POST
|
|
headers:
|
|
Authorization: "Bearer {{AUTH}}"
|
|
Content-Type: "application/json"
|
|
body: '{"q": "{{FUZZ}}"}'
|
|
fuzz_encoding: json
|
|
|
|
settings:
|
|
skip_tls_verify: false
|
|
timeout: 30
|
|
delay: 0.5
|