authz

Documentation

Index

• type AccessResult
• type AuthzFinding
  • func TestEndpoint(client *http.Client, method, url string, body string, identities []Identity) []AuthzFinding
• type Identity

Types

type AccessResult

type AccessResult struct {
	Identity   string
	StatusCode int
	BodyLength int
	TimeMs     int64
	HasData    bool
}

type AuthzFinding

type AuthzFinding struct {
	URL      string
	Method   string
	Type     string // "idor", "broken-auth", "privilege-escalation"
	LowPriv  string
	HighPriv string
	Evidence string
}

func TestEndpoint

func TestEndpoint(client *http.Client, method, url string, body string, identities []Identity) []AuthzFinding

TestEndpoint sends the same request with each identity and compares

type Identity

type Identity struct {
	Name    string
	Headers map[string]string
}