payloads

type AttackGenerator interface {
	// Generate generates payloads for the given endpoint and parameter
	Generate(endpoint types.Endpoint, param *types.Parameter) []Payload

	// Type returns the attack type
	Type() string
}

type AuthBypassGenerator struct{}

type BFLAGenerator struct{}

type BOLAGenerator struct{}

type BlindGenerator struct {
	// contains filtered or unexported fields
}

type BlindSettings struct {
	CallbackHTTP string `yaml:"callback_http" json:"callback_http"`
	CallbackDNS  string `yaml:"callback_dns" json:"callback_dns"`
}

type CORSChecker struct{}

type ContentTypeConfusionGenerator struct{}

type DataExposureGenerator struct{}

type FuzzRequest struct {
	Endpoint types.Endpoint
	Param    *types.Parameter
	Payload  Payload
	Original string
	Position string // query, path, header, body
}

type Generator struct {
	// contains filtered or unexported fields
}

type GraphQLGenerator struct {
	// contains filtered or unexported fields
}

type GraphQLSettings struct {
	MaxDepth     int `yaml:"max_depth" json:"max_depth"`
	MaxBatchSize int `yaml:"max_batch_size" json:"max_batch_size"`
	MaxAliases   int `yaml:"max_aliases" json:"max_aliases"`
}

type IDORGenerator struct {
	// contains filtered or unexported fields
}

type InjectionGenerator struct {
	// contains filtered or unexported fields
}

type JWTGenerator struct{}

type LDAPGenerator struct{}

type MassAssignmentGenerator struct{}

type MethodTamperingGenerator struct{}

type OpenRedirectGenerator struct{}

type PassiveCheckRunner struct {
	// contains filtered or unexported fields
}

type PassiveChecker interface {
	// Check runs the passive check against the endpoint and returns findings.
	Check(ctx context.Context, endpoint types.Endpoint, client *http.Client) []types.Finding
	// Type returns the checker identifier.
	Type() string
}

type PathTraversalGenerator struct{}

type Payload struct {
	Value       string            `json:"value"`
	Type        string            `json:"type"`
	Category    string            `json:"category"`
	Description string            `json:"description"`
	Encoding    string            `json:"encoding,omitempty"` // none, url, base64, etc.
	Metadata    map[string]string `json:"metadata,omitempty"`
}

type RateLimitChecker struct{}

type RateLimitGenerator struct{}

type SSRFGenerator struct{}

type SSTIGenerator struct{}

type SecurityHeaderChecker struct{}

type XPathGenerator struct{}

type XSSGenerator struct{}