📜 ⬆️ ⬇️

Friday task for testers

A link is gaining popularity in the network, passing on which the participant is given the opportunity to test the input field. You can pass the test by reference . The site says that you need to find all the checks for the input field.


What to do

Identify all the test required for the scenario bellow. The tests will be evaluated.
')
What not to test: different browsers, extremely big requests, "nasty words". Do not use automation tools. Request per second per ip

Specification

This is a standard user in forum.

Only the First Name field can be tested right now. The field has a max length of 30.


Free translation:

What should be done
Find all the checks for the script described below. Based on the data you entered in the First Name field, the checks will be evaluated. What not to test: different browsers, very large queries, “bad words”. Do not use automation tools. The server will close access if the limit of 30 requests per second from the same IP address is exceeded.

The task
The user must enter the necessary data to access the forum, as a regular user. Only First Name is suitable for testing at the moment. The maximum field length is 30 characters.


From myself I want to add, do not dwell only on the field itself, think broader.

Well, as a tester, I found another bug. After you find all 18 checks, each subsequent attempt to send data for verification will increase the count of users who completed the task by 1. That is, you can do a wrap.

Good luck everyone.

List of all vulnerabilities
Maximum values
Non ascii
Minimum value
Space in the middle
You used html tags
Basic XSS
Basic Sql injection
More than maximum values
Space values ​​at the end
Space values ​​at the begining
Space
You made the user admin
Empty value
Other chars then alphabetic
You looked at the page source
Average value
You looked at the cookie
Missing css

Source: https://habr.com/ru/post/368085/


All Articles