******************************************************************************** Configuration options gathered from: command line args: ['-cl', '-C', 'LOW', '-S', 'LOW', '-o', 'results.txt', '--config-file', 'keystone.conf', 'run'] config files: ['keystone.conf'] ================================================================================ colorize = True config_dir = None config_file = ['keystone.conf'] excluded_types = [''] min_confidence = LOW min_severity = LOW outfile = results.txt output_format = json sub_command = test_types = [''] test.length_diff_percent = 1000.0 test.max_length = 500 test.max_time = 10 test.time_diff_percent = 1000.0 logging.http_request_compression = False logging.log_dir = logs user.deserialize_format = json user.domain_id = user.domain_name = Default user.endpoint = https://rcwong.open-test.ibmcloud.com:5000 user.password = **** user.project_id = user.project_name = admin user.serialize_format = json user.tenant_id = user.tenant_name = user.token = **** user.token_ttl = 1800 user.user_id = **** user.username = admin user.version = v2.0 syntribos.endpoint = https://rcwong.open-test.ibmcloud.com:5000 syntribos.exclude_results = [''] syntribos.payload_dir = data syntribos.templates = [('get_image_members_all.template', 'GET /v2/images/{image_id:CALL_EXTERNAL|syntribos.extensions.glance.client:get_image_id:[]|}/members HTTP/1.1\nAccept: application/json\nX-Auth-Token: CALL_EXTERNAL|syntribos.extensions.identity.client:get_scoped_token_v3:["user"]|\n')] ******************************************************************************** ------------ TEMPLATE FILE ------------ file.......: get_image_members_all.template tests......: ['AUTH', 'BUFFER_OVERFLOW_BODY', 'BUFFER_OVERFLOW_HEADERS', 'BUFFER_OVERFLOW_PARAMS', 'BUFFER_OVERFLOW_URL', 'COMMAND_INJECTION_BODY', 'COMMAND_INJECTION_HEADERS', 'COMMAND_INJECTION_PARAMS', 'COMMAND_INJECTION_URL', 'CORS_WILDCARD_HEADERS', 'INTEGER_OVERFLOW_BODY', 'INTEGER_OVERFLOW_HEADERS', 'INTEGER_OVERFLOW_PARAMS', 'INTEGER_OVERFLOW_URL', 'LDAP_INJECTION_BODY', 'LDAP_INJECTION_HEADERS', 'LDAP_INJECTION_PARAMS', 'LDAP_INJECTION_URL', 'SQL_INJECTION_BODY', 'SQL_INJECTION_HEADERS', 'SQL_INJECTION_PARAMS', 'SQL_INJECTION_URL', 'SSL_ENDPOINT_BODY', 'STRING_VALIDATION_BODY', 'STRING_VALIDATION_HEADERS', 'STRING_VALIDATION_PARAMS', 'STRING_VALIDATION_URL', 'XML_EXTERNAL_ENTITY_BODY', 'XSS_BODY'] [1000] : AUTH (, 'POST', 'https://rcwong.open-test.ibmcloud.com:5000/v3/auth/tokens') {'headers': {'Content-Type': u'application/json', 'Accept': u'application/json'}, 'params': None, 'sanitize': True, 'requestslib_kwargs': {'timeout': 10}, 'data': u'{"auth": {"scope": {"project": {"domain": {"name": "Default", "id": ""}, "name": "admin", "id": ""}}, "identity": {"password": {"user": {"domain": {"name": "Default", "id": ""}, "password": "****", "id": "", "name": "admin"}}, "methods": ["password"]}}}'} Starting new HTTPS connection (1): rcwong.open-test.ibmcloud.com "POST /v3/auth/tokens HTTP/1.1" 201 8291 ------------ REQUEST SENT ------------ request method.......: POST request url..........: https://rcwong.open-test.ibmcloud.com:5000/v3/auth/tokens request params.......: request headers size.: 6 request headers......: {'Content-Length': u'262', 'Accept-Encoding': u'gzip, deflate', 'Accept': u'application/json', 'User-Agent': u'python-requests/2.11.1', 'Connection': u'keep-alive', 'Content-Type': u'application/json'} request body size....: 262 request body.........: {"auth": {"scope": {"project": {"domain": {"name": "Default", "id": ""}, "name": "admin", "id": ""}}, "identity": {"password": {"user": {"domain": {"name": "Default", "id": ""}, "password": "****", "id": "", "name": "admin"}}, "methods": ["password"]}}} ----------------- RESPONSE RECEIVED ----------------- response status..: response headers.: {'Content-Length': '8291', 'X-Subject-Token': 'dee38177974c4ec4b3282083f63b8ad3', 'Vary': 'X-Auth-Token', 'Connection': 'close', 'Content-Type': 'application/json', 'x-openstack-request-id': 'req-3c910b7d-df63-47e4-ae8b-aab37e26887e'} response time....: 0.238726 response size....: 8291 response body....: {"token": {"methods": ["password"], "roles": [{"id": "ed88963a658947438cdfa024ce7015f0", "name": "admin"}, {"id": "363ef9e2688840e4811f650254671ab9", "name": "heat_stack_owner"}], "expires_at": "2016-11-30T15:56:11.507497Z", "project": {"domain": {"id": "default", "name": "Default"}, "id": "eac80fea9c4949d9ab0bc052955ffc5c", "name": "admin"}, "catalog": [{"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:35357/", "region": "RegionOne", "interface": "admin", "id": "4c3963ffdd2c4a9497fbe8d5beaf0f70"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:5000/", "region": "RegionOne", "interface": "internal", "id": "766dd16c1c554d5c902e935a0c35bffa"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:5000/", "region": "RegionOne", "interface": "public", "id": "d663ea43d91640c9a9302a53fe5c13c5"}], "type": "identity", "id": "0526f9671af744b39c89bd367e432d1b", "name": "keystone"}, {"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8777", "region": "RegionOne", "interface": "admin", "id": "7b0b6c56fdcd467e8bd20a8cdc399454"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8777", "region": "RegionOne", "interface": "internal", "id": "cb2e3cdc7b99436e9434fc26ff897de5"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8777", "region": "RegionOne", "interface": "public", "id": "fb57df45f8774e2a988d403552f0151c"}], "type": "metering", "id": "2c4ef2c932db41fba7b47da564557450", "name": "ceilometer"}, {"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8774/v2/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "admin", "id": "42e0fb2d922a4aa2898d5fece5eda9be"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8774/v2/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "internal", "id": "a556a2bdd11144e09abca1065e2502d5"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8774/v2/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "public", "id": "e786a29db2b148adacd275117b441f85"}], "type": "compute", "id": "2e39250c40b44862b5e1394cf0bb8bcb", "name": "nova"}, {"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:6385", "region": "RegionOne", "interface": "admin", "id": "280f76c6a3ad490cb0f19b35dfc9aa36"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:6385", "region": "RegionOne", "interface": "public", "id": "903483c428e8433292153a62772b19e1"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:6385", "region": "RegionOne", "interface": "internal", "id": "9db53dc97d0349bda7bfcee05a90dcb2"}], "type": "baremetal", "id": "75eed2006393418aa72b51e6f896c4d6", "name": "ironic"}, {"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:9292", "region": "RegionOne", "interface": "public", "id": "1469e938e5954d1dbfd0d1bee253929c"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:9292", "region": "RegionOne", "interface": "admin", "id": "3cf1177003ed4cb3a2fb06749ac30c75"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:9292", "region": "RegionOne", "interface": "internal", "id": "6bad11a4125149a28b73ea72bb38c87c"}], "type": "image", "id": "7b3a353f5e8647178771d7c8a8739c20", "name": "glance"}, {"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8000/v1", "region": "RegionOne", "interface": "admin", "id": "056558073a3b4601b6ffbbdf0a8d9ec6"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8000/v1", "region": "RegionOne", "interface": "public", "id": "3b410afb539d45e5995c9fe4263e3ad7"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8000/v1", "region": "RegionOne", "interface": "internal", "id": "a3ff9dcd83e64fc5a8c3f424920d20bd"}], "type": "cloudformation", "id": "9d01fda88ce24d0f8151ffefa6f1b568", "name": "heat-cfn"}, {"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8776/v2/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "public", "id": "4bb3f2a2847e46028c7d72b6f18561d9"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8776/v2/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "admin", "id": "b7819e52152747bfb51c1d21fee452a0"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8776/v2/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "internal", "id": "e29d26ed3bf44f12831c9fce6c5094e1"}], "type": "volumev2", "id": "a3f65e64a42c4a598e636890a82e3196", "name": "cinderv2"}, {"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8776/v1/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "admin", "id": "05b6f4a5429b4823890e96f8c73dd1b2"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8776/v1/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "public", "id": "425b20c3df9048828c01aab98a40a188"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8776/v1/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "internal", "id": "8969fb1d4a10411bae69382c95f8c2c6"}], "type": "volume", "id": "a64522d2d92441198ca40c75123e802c", "name": "cinder"}, {"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8004/v1/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "public", "id": "9d9aefe35485400ab974970e6e0b51d4"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8004/v1/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "admin", "id": "c12aecc0b95c4058ad2d9f4049ced277"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8004/v1/eac80fea9c4949d9ab0bc052955ffc5c", "region": "RegionOne", "interface": "internal", "id": "c727b941bc254cf5a65a0eaaf105b07c"}], "type": "orchestration", "id": "bdac65536e384621b67e97b781703553", "name": "heat"}, {"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:9696", "region": "RegionOne", "interface": "internal", "id": "80146e0c6d1446b48cab4ecab0e923d1"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:9696", "region": "RegionOne", "interface": "public", "id": "935a00bada9e46a6a312b87e93e41968"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:9696", "region": "RegionOne", "interface": "admin", "id": "9d0e9f85215f4de886715995625ec648"}], "type": "network", "id": "ce3d79d15dea4f8e84bb3f1312498281", "name": "neutron"}, {"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8042", "region": "RegionOne", "interface": "internal", "id": "742812fb21e74865b99a3850e7aab5e3"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8042", "region": "RegionOne", "interface": "public", "id": "7e4b86d835f24861bda97550691d7911"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:8042", "region": "RegionOne", "interface": "admin", "id": "d47a25363e0c4c9ea35889666fcf6775"}], "type": "alarming", "id": "f8770b3630f0429c9dd907f9ee080fe2", "name": "aodh"}, {"endpoints": [{"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:35357/v3", "region": "RegionOne", "interface": "admin", "id": "5760babd9fea4c08ab802ca7ac35b29b"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:5000/v3", "region": "RegionOne", "interface": "public", "id": "aa4152461a774338b14394ec9480a5eb"}, {"region_id": "RegionOne", "url": "https://rcwong.open-test.ibmcloud.com:5000/v3", "region": "RegionOne", "interface": "internal", "id": "e1c40fea77ab48fab87356af7fb16cda"}], "type": "identityv3", "id": "fb4fbe5dca2442f08b10a3a4b1e0db22", "name": "keystonev3"}], "user": {"domain": {"id": "default", "name": "Default"}, "id": "1654540d294f417da3b90501f66012df", "name": "admin"}, "audit_ids": ["H0-NFI_mQu-VceixWAmnNQ"], "issued_at": "2016-11-29T15:56:11.507543Z"}} ------------------------------------------------------------------------------- curl -g -i -X GET -H 'Accept-Encoding: gzip, deflate' -H 'Accept: */*' -H 'User-Agent: python-glanceclient' -H 'Connection: keep-alive' -H 'X-Auth-Token: {SHA1}2653cfb0ed55d2f3d12ddc7436640bd8a0c4f92a' -H 'Content-Type: application/octet-stream' --cert None --key None https://rcwong.open-test.ibmcloud.com:5000/v2/images?limit=20 Starting new HTTPS connection (1): rcwong.open-test.ibmcloud.com