Skip to main content

Mutators

Request Body JSON Mutator

key: request.body.json

You can use this mutator to change the JSON body of the request before resending it.

Example

transform:
trigger:
- if: request.body.json
is: { "user": "admin" }
mutate:
- key: request.body.json
jq: '. | {"user": .user + " {{modify_value}}"}'

Properties


Request Body Text Mutator

key: request.body.text

You can use this mutator to change the body (as text) of the request before resending it.

Example

transform:
trigger:
- if: request.body.text
contains: "hello"
mutate:
- key: request.body.text
values:
- "injection 1"
- "injection 2"
- "injection 3"

Properties

  • value: The value to set.
  • values: The values to set, generates multiple queries.
  • regex_replace: Regex replace pattern.

Request Headers Mutator

key: request.headers

You can use this mutator to change the headers of the request before resending it.

Example

transform:
trigger:
- if: schema.url
is: "/api/v1/tested/route"
mutate:
- key: request.headers
name: X-API-version
value: "APIV2"

Properties

  • value: The value to set.
  • values: The values to set, generates multiple queries.
  • regex_replace: Regex replace pattern.
  • name: The header name to match, supports regex.
  • delete: Delete the matched headers.

Request Object Mutator

key: request.object

The detected object scalars (including custom scalars) in the request, with their kind, name and value.

Example

transform:
trigger:
- if: schema.url
is: "/api/v1/tested/route"
mutate:
- key: request.object
select:
type:
is: email
name:
is: "admin_email"
value:
regex: .*@escape.tech
mutate:
regex_replace:
pattern: (.*)@escape.tech
replacement: \1@attacker.com

Request User Mutator

key: request.user

You can use this mutator to change the user of the request before resending it.

Example

transform:
trigger:
- if: schema.url
is: "/api/v1/tested/route"
mutate:
- key: request.user
mutate:
value: admin

Properties

  • value: The value to set.
  • values: The values to set, generates multiple queries.
  • regex_replace: Regex replace pattern.
  • drop_user: Remove the user authentication from the request.

Schema URL Mutator

key: schema.url

You can use this mutator to change the URL of the request before resending it.

Example

transform:
trigger:
- if: schema.url
is: "/api/v1/tested/route"
mutate:
- key: schema.url
mutate:
value: "/api/v2/"

Properties

  • value: The value to set.
  • values: The values to set, generates multiple queries.
  • regex_replace: Regex replace pattern.

Schema Path Reference Mutator

key: schema.path_ref

You can use this mutator to change the operation name in GraphQL or the path in REST before resending it.

Example

transform:
trigger:
- if: schema.path_ref
is: "/api/v1/tested/route"
mutate:
- key: schema.path_ref
mutate:
value: "/api/v2/tested/route"

Properties

  • value: The value to set.
  • values: The values to set, generates multiple queries.
  • regex_replace: Regex replace pattern.