Skip to main content

String Fields Right Boundary

ItemDescription
Full Fuzzer NameStringFieldsRightBoundaryFuzzer
Log KeySFRB
DescriptionThis fuzzer will send right boundary values in string fields. The expectation is that APIs will reject the request as invalid, as the value is larger than the maxLength.
Enabled by default?Yes
Target field typesOpenAPI type string
Expected result when fuzzed field is required4XX
Expected result when fuzzed field is optional4XX
Expected result when fuzzed value is not matching field pattern4XX
Fuzzing logicIteratively replaces string fields with right boundary values: if the field has a defined maxLength the fuzzer will generate an alphanumeric string of length maxLength + 10; if maxLength > 2147483647 then maxLength will be considered 2147483645. If the field does not have a maxLength is will generate a string of length 10000.
Conditions when this fuzzer will be skippedWhen field is not of type string
HTTP methods that will be skippedNone
ReportingReports error if: 1. response code is 404; 2. response code is documented, but not expected; 3. any unexpected exception.

Reports warn if: 1. response code is expected and documented, but not matches response schema; 2. response code is expected, but not documented; 3. response code is 501.

Reports success if: 1. response code is expected, documented and matches response schema.