{"action":"created","issue":{"url":"https://api.github.com/repos/muqeed11/unsecured/issues/3","repository_url":"https://api.github.com/repos/muqeed11/unsecured","labels_url":"https://api.github.com/repos/muqeed11/unsecured/issues/3/labels{/name}","comments_url":"https://api.github.com/repos/muqeed11/unsecured/issues/3/comments","events_url":"https://api.github.com/repos/muqeed11/unsecured/issues/3/events","html_url":"https://github.com/muqeed11/unsecured/issues/3","id":415953539,"node_id":"MDU6SXNzdWU0MTU5NTM1Mzk=","number":3,"title":"Demobank2 : ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac","user":{"login":"muqeed11","id":33509947,"node_id":"MDQ6VXNlcjMzNTA5OTQ3","avatar_url":"https://avatars3.githubusercontent.com/u/33509947?v=4","gravatar_id":"","url":"https://api.github.com/users/muqeed11","html_url":"https://github.com/muqeed11","followers_url":"https://api.github.com/users/muqeed11/followers","following_url":"https://api.github.com/users/muqeed11/following{/other_user}","gists_url":"https://api.github.com/users/muqeed11/gists{/gist_id}","starred_url":"https://api.github.com/users/muqeed11/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/muqeed11/subscriptions","organizations_url":"https://api.github.com/users/muqeed11/orgs","repos_url":"https://api.github.com/users/muqeed11/repos","events_url":"https://api.github.com/users/muqeed11/events{/privacy}","received_events_url":"https://api.github.com/users/muqeed11/received_events","type":"User","site_admin":false},"labels":[{"id":1253745840,"node_id":"MDU6TGFiZWwxMjUzNzQ1ODQw","url":"https://api.github.com/repos/muqeed11/unsecured/labels/Demobank2","name":"Demobank2","color":"ededed","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":7,"created_at":"2019-03-01T05:55:34Z","updated_at":"2019-03-01T11:01:34Z","closed_at":null,"author_association":"OWNER","body":"Project  :  Demobank2\n\nJob  :  Default\n\nEnv  :  Default\n\nCategory  :  ABAC_Level1\n\nTags  :  [FX Top 10 - API Vulnerability, Data_Access_Control]\n\nSeverity  :  Major\n\nRegion  :  FXLabs/US_WEST_1\n\nResult  :  fail\n\nStatus Code  :  401\n\nHeaders  :  {WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 05:55:32 GMT]}\n\nEndpoint  :  http://54.215.136.217/api/v1/branches/\n\nRequest  :  \n\n\nResponse  :  \n\n\nLogs  :  \n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac] : URL [http://54.215.136.217/api/v1/branches]\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac] : Method [POST]\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac] : Request [{\n  \"access\" : \"R1nwqYfi\",\n  \"atmAtBranch\" : \"R1nwqYfi\",\n  \"branchMediatedServiceName\" : \"R1nwqYfi\",\n  \"branchName\" : \"R1nwqYfi\",\n  \"branchType\" : \"R1nwqYfi\",\n  \"createdBy\" : \"\",\n  \"createdDate\" : \"\",\n  \"customerSegment\" : \"R1nwqYfi\",\n  \"faxNumber\" : \"R1nwqYfi\",\n  \"id\" : \"\",\n  \"inactive\" : false,\n  \"modifiedBy\" : \"\",\n  \"modifiedDate\" : \"\",\n  \"version\" : \"\"\n}]\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckFAZnhsYWJzLmlvOnVzZXJB]}]\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac] : Response []\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac] : Response-Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 05:55:32 GMT]}]\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac] : StatusCode [401]\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac] : Time [514]\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac] : Size [0]\n2019-03-01 05:55:32  ERROR [null] : Assertion [@StatusCode == 200 AND @Response.errors == false] resolved-to [401 == 200 AND  == false] result [Failed]\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac_Headers] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 05:55:32 GMT]}]\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac_Headers] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 05:55:32 GMT]}]\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac_Headers[2]] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 05:55:32 GMT]}]\n2019-03-01 05:55:32  DEBUG [BranchCreateUserAInitAbac_Headers[2]] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 05:55:32 GMT]}]\n2019-03-01 05:55:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : URL [http://54.215.136.217/api/v1/branches/]\n2019-03-01 05:55:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Method [GET]\n2019-03-01 05:55:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Request []\n2019-03-01 05:55:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckNAZnhsYWJzLmlvOnVzZXJD]}]\n2019-03-01 05:55:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Response []\n2019-03-01 05:55:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Response-Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 05:55:32 GMT]}]\n2019-03-01 05:55:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : StatusCode [401]\n2019-03-01 05:55:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Time [521]\n2019-03-01 05:55:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Size [0]\n2019-03-01 05:55:33   INFO [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [401 == 401 OR 401 == 403 OR  == true] result [Passed]\n2019-03-01 05:55:34  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : URL [http://54.215.136.217/api/v1/branches/]\n2019-03-01 05:55:34  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Method [DELETE]\n2019-03-01 05:55:34  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Request [null]\n2019-03-01 05:55:34  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckFAZnhsYWJzLmlvOnVzZXJB]}]\n2019-03-01 05:55:34  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Response []\n2019-03-01 05:55:34  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Response-Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 05:55:33 GMT]}]\n2019-03-01 05:55:34  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : StatusCode [401]\n2019-03-01 05:55:34  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Time [999]\n2019-03-01 05:55:34  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Size [0]\n2019-03-01 05:55:34  ERROR [null] : Assertion [@StatusCode == 200] resolved-to [401 == 200] result [Failed]\n\n--- FX Bot ---"},"comment":{"url":"https://api.github.com/repos/muqeed11/unsecured/issues/comments/468628492","html_url":"https://github.com/muqeed11/unsecured/issues/3#issuecomment-468628492","issue_url":"https://api.github.com/repos/muqeed11/unsecured/issues/3","id":468628492,"node_id":"MDEyOklzc3VlQ29tbWVudDQ2ODYyODQ5Mg==","user":{"login":"muqeed11","id":33509947,"node_id":"MDQ6VXNlcjMzNTA5OTQ3","avatar_url":"https://avatars3.githubusercontent.com/u/33509947?v=4","gravatar_id":"","url":"https://api.github.com/users/muqeed11","html_url":"https://github.com/muqeed11","followers_url":"https://api.github.com/users/muqeed11/followers","following_url":"https://api.github.com/users/muqeed11/following{/other_user}","gists_url":"https://api.github.com/users/muqeed11/gists{/gist_id}","starred_url":"https://api.github.com/users/muqeed11/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/muqeed11/subscriptions","organizations_url":"https://api.github.com/users/muqeed11/orgs","repos_url":"https://api.github.com/users/muqeed11/repos","events_url":"https://api.github.com/users/muqeed11/events{/privacy}","received_events_url":"https://api.github.com/users/muqeed11/received_events","type":"User","site_admin":false},"created_at":"2019-03-01T11:01:34Z","updated_at":"2019-03-01T11:01:34Z","author_association":"OWNER","body":"Project  :  Demobank2\n\nJob  :  Default\n\nEnv  :  Default\n\nRegion  :  FXLabs/US_WEST_1\n\nResult  :  fail\n\nStatus Code  :  401\n\nHeaders  :  {WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 11:01:32 GMT]}\n\nEndpoint  :  http://54.215.136.217/api/v1/branches/\n\nRequest  :  \n\n\nResponse  :  \n\n\nLogs  :  \n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac] : URL [http://54.215.136.217/api/v1/branches]\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac] : Method [POST]\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac] : Request [{\n  \"access\" : \"rFaB1v1r\",\n  \"atmAtBranch\" : \"rFaB1v1r\",\n  \"branchMediatedServiceName\" : \"rFaB1v1r\",\n  \"branchName\" : \"rFaB1v1r\",\n  \"branchType\" : \"rFaB1v1r\",\n  \"createdBy\" : \"\",\n  \"createdDate\" : \"\",\n  \"customerSegment\" : \"rFaB1v1r\",\n  \"faxNumber\" : \"rFaB1v1r\",\n  \"id\" : \"\",\n  \"inactive\" : false,\n  \"modifiedBy\" : \"\",\n  \"modifiedDate\" : \"\",\n  \"version\" : \"\"\n}]\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckFAZnhsYWJzLmlvOnVzZXJB]}]\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac] : Response []\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac] : Response-Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 11:01:32 GMT]}]\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac] : StatusCode [401]\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac] : Time [576]\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac] : Size [0]\n2019-03-01 11:01:32  ERROR [null] : Assertion [@StatusCode == 200 AND @Response.errors == false] resolved-to [401 == 200 AND  == false] result [Failed]\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac_Headers] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 11:01:32 GMT]}]\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac_Headers] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 11:01:32 GMT]}]\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac_Headers[2]] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 11:01:32 GMT]}]\n2019-03-01 11:01:32  DEBUG [BranchCreateUserAInitAbac_Headers[2]] : Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 11:01:32 GMT]}]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : URL [http://54.215.136.217/api/v1/branches/]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Method [GET]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Request []\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckNAZnhsYWJzLmlvOnVzZXJD]}]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Response []\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Response-Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 11:01:32 GMT]}]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : StatusCode [401]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Time [416]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Size [0]\n2019-03-01 11:01:33   INFO [ApiV1BranchesIdGetUseraCreateBranchUsercDisallowAbac] : Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [401 == 401 OR 401 == 403 OR  == true] result [Passed]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : URL [http://54.215.136.217/api/v1/branches/]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Method [DELETE]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Request [null]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlckFAZnhsYWJzLmlvOnVzZXJB]}]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Response []\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Response-Headers [{WWW-Authenticate=[Basic realm=\"Realm\", Basic realm=\"Realm\"], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Content-Length=[0], Date=[Fri, 01 Mar 2019 11:01:33 GMT]}]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : StatusCode [401]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Time [926]\n2019-03-01 11:01:33  DEBUG [ApiV1BranchesIdDeleteBranchAbstractAbac] : Size [0]\n2019-03-01 11:01:33  ERROR [null] : Assertion [@StatusCode == 200] resolved-to [401 == 200] result [Failed]\n\n--- FX Bot ---"}}
{"actor":{"display_login":"muqeed11"}}