Skip to main content

Mutators

Request Body JSON Mutator​

key: request.body.json

You can use this mutator to change the JSON body of the request before resending it.

Example​

transform:
  trigger:
    - if: request.body.json
      is: { "user": "admin" }
  mutate:
    - key: request.body.json
      jq: '. | {"user": .user + " {{modify_value}}"}'

Properties​

Request Body Text Mutator​

key: request.body.text

You can use this mutator to change the body (as text) of the request before resending it.

Example​

transform:
  trigger:
    - if: request.body.text
      contains: "hello"
  mutate:
    - key: request.body.text
      values:
        - "injection 1"
        - "injection 2"
        - "injection 3"

Properties​

  • value: The value to set.
  • values: The values to set, generates multiple queries.
  • regex_replace: Regex replace pattern.

Request Headers Mutator​

key: request.headers

You can use this mutator to change the headers of the request before resending it.

Example​

transform:
  trigger:
    - if: schema.url
      is: "/api/v1/tested/route"
  mutate:
    - key: request.headers
      name: X-API-version
      value: "APIV2"

Properties​

  • value: The value to set.
  • values: The values to set, generates multiple queries.
  • regex_replace: Regex replace pattern.
  • name: The header name to match, supports regex.
  • delete: Delete the matched headers.

Request Object Mutator​

key: request.object

The detected object scalars (including custom scalars) in the request, with their kind, name and value.

Example​

transform:
  trigger:
    - if: schema.url
      is: "/api/v1/tested/route"
  mutate:
    - key: request.object
      select:
        type:
          is: email
        name:
          is: "admin_email"
        value:
          regex: .*@escape.tech
      mutate:
        regex_replace:
          pattern: (.*)@escape.tech
          replacement: \1@attacker.com

Request User Mutator​

key: request.user

You can use this mutator to change the user of the request before resending it.

Example​

transform:
  trigger:
    - if: schema.url
      is: "/api/v1/tested/route"
  mutate:
    - key: request.user
      mutate:
        value: admin

Properties​

  • value: The value to set.
  • values: The values to set, generates multiple queries.
  • regex_replace: Regex replace pattern.
  • drop_user: Remove the user authentication from the request.

Schema URL Mutator​

key: schema.url

You can use this mutator to change the URL of the request before resending it.

Example​

transform:
  trigger:
    - if: schema.url
      is: "/api/v1/tested/route"
  mutate:
    - key: schema.url
      mutate:
        value: "/api/v2/"

Properties​

  • value: The value to set.
  • values: The values to set, generates multiple queries.
  • regex_replace: Regex replace pattern.

Schema Path Reference Mutator​

key: schema.path_ref

You can use this mutator to change the operation name in GraphQL or the path in REST (keeping the domain) before resending it.

Example​

transform:
  trigger:
    - if: schema.path_ref
      is: "/api/v1/tested/route"
  mutate:
    - key: schema.path_ref
      mutate:
        value: "/api/v2/tested/route"

Properties​

  • value: The value to set.
  • values: The values to set, generates multiple queries.
  • regex_replace: Regex replace pattern.