price_manipulation_test
Test server-side price validation by sending manipulated price values like 0, 1, and -1 to identify vulnerabilities in e-commerce systems.
Instructions
Test client-side price manipulation by sending modified price values.
Sends price=0, price=1, price=-1, and negative quantity variants to check if the server validates prices server-side.
Returns: {"results": [{"test_case": str, "payload": str, "status": int, "length": int, "accepted": bool, "snippet": str}]}.
Side effects: May add items to cart or create orders at manipulated prices.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | URL that processes the purchase/cart action | |
| price_param | Yes | Parameter name for the price, e.g. 'price', 'amount', 'total' | |
| cart_endpoint | No | Separate cart/checkout endpoint to verify final price after manipulation | |
| extra_params | No | Additional form parameters, e.g. 'productId=1&quantity=1' | |
| auth_cookie | No | Session cookie for authenticated requests | |
| content_type | No | Request content type: 'form' or 'json' |