easybuggy.postman_collection.json

{
	"info": {
		"_postman_id": "f74c7c3f-55a3-4186-bb40-11578255a723",
		"name": "easybuggy",
		"schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
	},
	"item": [
		{
			"name": "ping",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/eb/v1/ping",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"ping"
					]
				}
			},
			"response": []
		},
		{
			"name": "index",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/eb/v1/",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						""
					]
				}
			},
			"response": []
		},
		{
			"name": "admins",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/eb/v1/admins/main",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"admins",
						"main"
					]
				}
			},
			"response": []
		},
		{
			"name": "run command",
			"request": {
				"method": "POST",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/legacy/runCommand/{{cmd}}",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"legacy",
						"runCommand",
						"{{cmd}}"
					]
				}
			},
			"response": []
		},
		{
			"name": "get time",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/v2/authed/getTime",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"v2",
						"authed",
						"getTime"
					]
				}
			},
			"response": []
		},
		{
			"name": "internal",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/internal",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"internal"
					]
				}
			},
			"response": []
		},
		{
			"name": "op1",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/internal/op1",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"internal",
						"op1"
					]
				}
			},
			"response": []
		},
		{
			"name": "login page",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/eb/v1/login",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"login"
					]
				}
			},
			"response": []
		},
		{
			"name": "login",
			"request": {
				"method": "POST",
				"header": [],
				"body": {
					"mode": "formdata",
					"formdata": [
						{
							"key": "userid",
							"value": "admin",
							"type": "text"
						},
						{
							"key": "password",
							"value": "password",
							"type": "text"
						},
						{
							"key": "",
							"value": "pasworld",
							"type": "text",
							"disabled": true
						}
					]
				},
				"url": {
					"raw": "http://localhost:8080/eb/v1/login",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"login"
					]
				}
			},
			"response": []
		},
		{
			"name": "csrf",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/eb/v1/admins/csrf",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"admins",
						"csrf"
					]
				}
			},
			"response": []
		},
		{
			"name": "csrf - change password",
			"request": {
				"method": "POST",
				"header": [],
				"body": {
					"mode": "formdata",
					"formdata": [
						{
							"key": "password",
							"value": "12345678",
							"type": "text"
						}
					]
				},
				"url": {
					"raw": "http://localhost:8080/eb/v1/admins/csrf",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"admins",
						"csrf"
					]
				}
			},
			"response": []
		},
		{
			"name": "logout",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/eb/v1/logout",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"logout"
					]
				}
			},
			"response": []
		},
		{
			"name": "clickjacking",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/eb/v1/admins/clickjacking",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"admins",
						"clickjacking"
					]
				}
			},
			"response": []
		},
		{
			"name": "clickjacking - change mail",
			"request": {
				"method": "POST",
				"header": [],
				"body": {
					"mode": "formdata",
					"formdata": [
						{
							"key": "mail",
							"value": "sample@gmail.com",
							"type": "text"
						}
					]
				},
				"url": {
					"raw": "http://localhost:8080/eb/v1/admins/clickjacking",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"admins",
						"clickjacking"
					]
				}
			},
			"response": []
		},
		{
			"name": "bruteforce",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/eb/v1/bruteforce/login",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"bruteforce",
						"login"
					]
				}
			},
			"response": []
		},
		{
			"name": "bruteforce login",
			"request": {
				"method": "POST",
				"header": [],
				"body": {
					"mode": "formdata",
					"formdata": [
						{
							"key": "userid",
							"value": "admin",
							"type": "text"
						},
						{
							"key": "password",
							"value": "password",
							"type": "text"
						}
					]
				},
				"url": {
					"raw": "http://localhost:8080/eb/v1/bruteforce/login",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"bruteforce",
						"login"
					]
				}
			},
			"response": []
		},
		{
			"name": "ldap injection",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/eb/v1/ldapijc/login",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"ldapijc",
						"login"
					]
				}
			},
			"response": []
		},
		{
			"name": "ldap injection login",
			"request": {
				"method": "POST",
				"header": [],
				"body": {
					"mode": "formdata",
					"formdata": [
						{
							"key": "userid",
							"value": "*)(|(objectClass=*",
							"type": "text"
						},
						{
							"key": "password",
							"value": "aaaaaaa)",
							"type": "text"
						}
					]
				},
				"url": {
					"raw": "http://localhost:8080/eb/v1/ldapijc/login",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"ldapijc",
						"login"
					]
				}
			},
			"response": []
		},
		{
			"name": "sql injection reflection",
			"request": {
				"method": "GET",
				"header": [],
				"url": {
					"raw": "http://localhost:8080/eb/v1/sqlijc-reflection",
					"protocol": "http",
					"host": [
						"localhost"
					],
					"port": "8080",
					"path": [
						"eb",
						"v1",
						"sqlijc-reflection"
					]
				}
			},
			"response": []
		}
	],
	"variable": [
		{
			"key": "cmd",
			"value": "whoami"
		}
	]
}