mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 19:36:33 +00:00
Fix GraphQL mutation syntax and MD5 capitalization in payloads
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
@@ -204,8 +204,8 @@ token_3
|
||||
1609459202
|
||||
|
||||
# MD5 of simple inputs
|
||||
5f4dcc3b5aa765d61d8327deb882cf99 (md5 of "password")
|
||||
e10adc3949ba59abbe56e057f20f883e (md5 of "123456")
|
||||
5f4dcc3b5aa765d61d8327deb882cf99 (MD5 of "password")
|
||||
e10adc3949ba59abbe56e057f20f883e (MD5 of "123456")
|
||||
|
||||
# Short alphanumeric (low entropy)
|
||||
aaa
|
||||
@@ -331,7 +331,7 @@ current_step=final
|
||||
|
||||
# GraphQL mutations
|
||||
{"query":"mutation{resetPassword(email:\"victim@example.com\"){success}}"}
|
||||
{"query":"mutation{resetPassword(email:\"admin@example.com\",token:\""){success}}"}
|
||||
{"query":"mutation{resetPassword(email:\"admin@example.com\",token:\"\"){success}}"}
|
||||
|
||||
# REST API variations
|
||||
PUT /api/v1/users/1/password
|
||||
|
||||
Reference in New Issue
Block a user