postrunner

Documentation

Index

• func FilterImmuneResults(apiTests *[]*tgen.ApiTest, filterImmune *bool)
• func IsDataLeak(target []byte, patterns tgen.DataLeakPatterns) []tgen.DataLeakPatternMatch
• func UpdateDataLeakResult(apiTests *[]*tgen.ApiTest, patterns tgen.DataLeakPatterns)
• func UpdateStatusCodeBasedResult(apiTests *[]*tgen.ApiTest)

Functions

func FilterImmuneResults

func FilterImmuneResults(apiTests *[]*tgen.ApiTest, filterImmune *bool)

removes immune endpoints from the api tests slice

func IsDataLeak

func IsDataLeak(target []byte, patterns tgen.DataLeakPatterns) []tgen.DataLeakPatternMatch

checks for data leak in target as per provided DataLeakPatterns struct

func UpdateDataLeakResult

func UpdateDataLeakResult(apiTests *[]*tgen.ApiTest, patterns tgen.DataLeakPatterns)

Post process test for detecting sensitive data leak in API test response body as per provided data leak patterns. It can be cpu intensive, so it's preffered to only include patterns for which data is available in the API

func UpdateStatusCodeBasedResult

func UpdateStatusCodeBasedResult(apiTests *[]*tgen.ApiTest)

marks api test vulnerable or immune based on the API test VulnerableResponseCodes/ImmuneResponseCodes