Skip to main content

CRLF

ItemDescription
Full Fuzzer NameCRLFHeadersFuzzer
Log KeyCRLFH
DescriptionThis fuzzer replaces headers with CR & LF characters. The expectation is that APIs reject the request as invalid.
Enabled by default?Yes
Target header typesAll
Expected result when fuzzed header is required4XX
Expected result when fuzzed header is optional4XX
Fuzzing logicIteratively replaces headers with CR & LF characters.
Conditions when this fuzzer will be skippedNone
HTTP methods that will be skippedNone
ReportingReports error if: 1. response code is other than 4XX;

Reports success if: 1. response code is 4XX.