Skip to content

ATOR looping #5

@BlhAJvKCmPyTiaSxcyTi

Description

@BlhAJvKCmPyTiaSxcyTi

It would be nice to have some protection for ATOR to prevent looping requests. This have happened to me in two cases, both with Bearer token:

  1. I set up ATOR for new Bearer token update and for some reason I remove it in repeater to see if the endpoint requires the authentication - it starts looping as the regex can't be matched - this can be fixed by proper regex settings but it is not intuitive.
  2. While testing IDOR I got message from server: 401 User "XXX is not associated with "YYY". And ATOR again keeps trying to update the Bearer but gets same response all over again and ends up in a loop.

Solution:
Count max retries for a one request. However I guess there can be some implementing challenges.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions