Details

Description

Check for differences in response based on fuzzed User Agent (eg. mobile sites, access as a Search Engine Crawler). Compares the response statuscode and the hashcode of the response body with the original response.

Raw Output

{
  "alert": "User Agent Fuzzer",
  "alertRef": "10104",
  "attack": "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)",
  "confidence": "Medium",
  "cweid": "0",
  "description": "Check for differences in response based on fuzzed User Agent (eg. mobile sites, access as a Search Engine Crawler). Compares the response statuscode and the hashcode of the response body with the original response.",
  "evidence": "",
  "id": "3084",
  "inputVector": "",
  "messageId": "44990",
  "method": "POST",
  "name": "User Agent Fuzzer",
  "other": "",
  "param": "Header User-Agent",
  "pluginId": "10104",
  "reference": "https://owasp.org/wstg",
  "risk": "Informational",
  "solution": "",
  "sourceMessageId": 602,
  "sourceid": "1",
  "tags": {
    "CUSTOM_PAYLOADS": "",
    "POLICY_PENTEST": "",
    "SYSTEMIC": "https://www.zaproxy.org/docs/desktop/addons/common-library/alerttags/#systemic"
  },
  "url": "https://easm.liifecore.com/scans/policies",
  "wascid": "0"
}

Update Status