 |
The third method is Detecting vulnerable endpoints by replacing parameters.
In this method, parameters that are not described in the reference are estimated by type conversion and combining of numbers and strings in the parameters.
For example, if there is an endpoint /wp/v2/status with parameters, and the parameters id and status are numeric and string types, the replacement and combination processes are performed for each parameter.
The original parameters for the replacement and combination process will be the combination of the parameters used in the reference validation, saved in the previous step.
In the example, 5 is used as the "ID" and Publish is used as the "Status".
The first step in the replacement and combination process for numeric parameters is to replace them with an any string type.
In this presentation, we will use "a" as an any string.
The ID value used, "5", is replaced with "a" to create the parameter.
Next, combine the original ID value of "5" with "a" to generate the parameter "5a".
The generated parameter is used to send a request to determine if there is a vulnerability.
For string type parameters, it replaces any numeric value with the string and combines it.
Use "1" as an any numeric value, and replace the original string "publish" with "1".
Then, combine "publish" with "1" to create the parameter "publish1" and send the request. |
IEEE/ICACT20220047 Slide.13
[Big Slide]