cats

cats copied to clipboard

java.lang.NullPointerException when trying to parse a swagger v2.0 with custom extentions

2

cats --server=https://my_server --contract=[swagger.json](https://apiconsole.ru1.wallarm.ru/swagger.json) --headers=my_headers.yaml --paths=/v1/objects/hint/create --blackbox --debug [**********][*******] 👣 trace Getting fields for prefix: [**********][*******] 👣 trace Getting fields for prefix: clientid java.lang.NullPointerException at com.endava.cats.model.FuzzingData.getFields(FuzzingData.java:94) at com.endava.cats.model.FuzzingData.getFields(FuzzingData.java:105) at com.endava.cats.model.FuzzingData.getAllFieldsAsCatsFields(FuzzingData.java:147) at...

vzhirnov

NullPointerException in PayloadGenerator.parseFromInnerSchema

3

(swagger.json in the attached zip file) ./cats --debug --paths=/api/groopits/create --contract=swagger.json --dryRun --server=http://example.com ` java.lang.NullPointerException at com.endava.cats.model.generator.PayloadGenerator.parseFromInnerSchema(PayloadGenerator.java:360) at com.endava.cats.model.generator.PayloadGenerator.processSchemaProperties(PayloadGenerator.java:342) at com.endava.cats.model.generator.PayloadGenerator.resolveModelToExample(PayloadGenerator.java:318) at com.endava.cats.model.generator.PayloadGenerator.getExampleFromArraySchema(PayloadGenerator.java:274) at com.endava.cats.model.generator.PayloadGenerator.resolvePropertyToExample(PayloadGenerator.java:137) at com.endava.cats.model.generator.PayloadGenerator.parseFromInnerSchema(PayloadGenerator.java:364) at com.endava.cats.model.generator.PayloadGenerator.processSchemaProperties(PayloadGenerator.java:342) at com.endava.cats.model.generator.PayloadGenerator.resolveModelToExample(PayloadGenerator.java:318)...

jvert

Link fuzzer reports with actual vulnerabilities

2

`cats` is good when cherry-picking a fuzzer and running it on one endpoint. However, today I'm scanning an API for a customer, ran on all endpoints using: `cats -c open_api.yml...

ocervell

**What is the issue** For some of the openapi/swagger spec file the current cyclic redundancy check goes in infinite loop [openapi-recursive-component-schemas.json](https://github.com/Endava/cats/files/14601124/openapi-recursive-component-schemas.json) **Step To Reproduce** Steps to reproduce the behaviour: 1....

ganeshnikam18

[Bug]: Path parameters are not fuzzed for PUT/PATCH/POST methods

3

Sample OpeAPI Definition: > paths: > /test1/{orderId}: > put: > summary: Create a new resource > parameters: > - in: path > name: orderId > required: true > schema: >...

ganeshnikam18

I want to use the Bearer Token in authorization which is generated by entering the Username and password in payload for post request.

1

Scenario 1: I have a application in which user has to provide the username and password in payload and in response it will generate the Bearer Token. I want to...

nayanmathur25

Use all 3 type of authorization (Oauth , Api key and Basic Auth) on different paths present in swagger application

1

I have a application where some request required ( Oauth and Basic Auth ) and some request required (API key with Basic Auth) and some only required Oauth or API...

nayanmathur25

Is there a way to customise response codes as success for specific endpoints like it is possible for [fuzzers](https://endava.github.io/cats/docs/advanced-topics/fuzzers-config)? I would like to customise for individual endpoints instead of doing...

krishna-aw

Does exist a Docker compose example with something like PetClinic to test the cats?

1

Hi, I found the solution, but I didn´t find the typical example to test it. Do you have one example to review it? Many thanks in advance Juan Antonio

ESJBRE1

Cats not using provided API examples

3

**Describe the bug** When the flag --useExamples is explicitly set, cats still uses random data input. This is a problem as when running tests that require correct data in a...

blackgrease