Details

Description

Check for differences in response based on fuzzed User Agent (eg. mobile sites, access as a Search Engine Crawler). Compares the response statuscode and the hashcode of the response body with the original response.

Raw Output

{
  "alert": "User Agent Fuzzer",
  "alertRef": "10104",
  "attack": "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)",
  "confidence": "Medium",
  "cweid": "0",
  "description": "Check for differences in response based on fuzzed User Agent (eg. mobile sites, access as a Search Engine Crawler). Compares the response statuscode and the hashcode of the response body with the original response.",
  "evidence": "",
  "id": "3420",
  "inputVector": "",
  "messageId": "45720",
  "method": "GET",
  "name": "User Agent Fuzzer",
  "other": "",
  "param": "Header User-Agent",
  "pluginId": "10104",
  "reference": "https://owasp.org/wstg",
  "risk": "Informational",
  "solution": "",
  "sourceMessageId": 779,
  "sourceid": "1",
  "tags": {
    "CUSTOM_PAYLOADS": "",
    "POLICY_PENTEST": "",
    "SYSTEMIC": "https://www.zaproxy.org/docs/desktop/addons/common-library/alerttags/#systemic"
  },
  "url": "https://easm.liifecore.com/assets/b029a449-3984-486d-a5c6-2b85694fa150/history",
  "wascid": "0"
}

Update Status