Skip to main content

Zalgo Text

ItemDescription
Full Fuzzer NameZalgoTextInHeadersFuzzer
Log KeyZTIH
DescriptionThis fuzzer replaces headers with zalgo text. The expectation is that APIs will reject the request as invalid, as these characters should not be present in headers.
Enabled by default?Yes
Target header typesAll
Expected result when fuzzed header is required4XX
Expected result when fuzzed header is optional4XX
Fuzzing logicIteratively replaces headers with zalgo text.
Conditions when this fuzzer will be skippedNone
HTTP methods that will be skippedNone
ReportingReports error if: 1. response code is 404; 2. response code is documented, but not expected; 3. any unexpected exception.

Reports warn if: 1. response code is expected and documented, but not matches response schema; 2. response code is expected, but not documented; 3. response code is 501.

Reports success if: 1. response code is expected, documented and matches response schema.