# Code generated by cmd/go-swagger/regen; DO NOT EDIT.
# Generated at 2022-12-19T19:22:49Z. To re-generate, run the following in the repo root:
# go run ./cmd/go-swagger/regen/regen.go

consumes:
  - application/io.goswagger.go-test-bench.v1+json
info:
  description: An API built with go-swagger to generate intentionally vulnerable endpoints
  title: swagger-bench
  version: 1.0.0
produces:
  - application/io.goswagger.go-test-bench.v1+json
schemes:
  - http
swagger: "2.0"

paths:
  /:
    get:
      tags:
        - swagger-server
      operationId: root
      produces:
        - text/html
      responses:
        200:
          description: serves to display the root of the swagger API for the test bench
          schema:
            type: string
        default:
          description: generic error response
          schema:
            $ref: "#/definitions/error"
  /cmdInjection:
    get:
      tags:
        - cmd_injection
      summary: front page of the Command Injection vulnerability
      operationId: CmdInjectionFront
      produces:
        - text/html
      responses:
        200:
          description: served front end for Command Injection page of Swagger API
          schema:
            type: string
        default:
          description: error occured
  /cmdInjection/exec.Command/query/{safety}:
    get:
      tags:
        - cmd_injection
      description: demonstrates Command Injection via query, with vulnerable function exec.Command
      operationId: CmdInjectionGetQueryCommand
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured
  /cmdInjection/exec.CommandContext/query/{safety}:
    get:
      tags:
        - cmd_injection
      description: demonstrates Command Injection via query, with vulnerable function exec.CommandContext
      operationId: CmdInjectionGetQueryCommandContext
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured

  /pathTraversal:
    get:
      tags:
        - path_traversal
      summary: front page of the Path Traversal vulnerability
      operationId: PathTraversalFront
      produces:
        - text/html
      responses:
        200:
          description: served front end for Path Traversal page of Swagger API
          schema:
            type: string
        default:
          description: error occured
  /pathTraversal/os.ReadFile/query/{safety}:
    get:
      tags:
        - path_traversal
      description: demonstrates Path Traversal via query, with vulnerable function os.ReadFile
      operationId: PathTraversalGetQueryReadFile
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured
  /pathTraversal/os.ReadFile/buffered-query/{safety}:
    get:
      tags:
        - path_traversal
      description: demonstrates Path Traversal via buffered-query, with vulnerable function os.ReadFile
      operationId: PathTraversalGetBufferedQueryReadFile
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured
  /pathTraversal/os.Open/query/{safety}:
    get:
      tags:
        - path_traversal
      description: demonstrates Path Traversal via query, with vulnerable function os.Open
      operationId: PathTraversalGetQueryOpen
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured
  /pathTraversal/os.Open/buffered-query/{safety}:
    get:
      tags:
        - path_traversal
      description: demonstrates Path Traversal via buffered-query, with vulnerable function os.Open
      operationId: PathTraversalGetBufferedQueryOpen
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured
  /pathTraversal/os.WriteFile/query/{safety}:
    get:
      tags:
        - path_traversal
      description: demonstrates Path Traversal via query, with vulnerable function os.WriteFile
      operationId: PathTraversalGetQueryWriteFile
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured
  /pathTraversal/os.WriteFile/buffered-query/{safety}:
    get:
      tags:
        - path_traversal
      description: demonstrates Path Traversal via buffered-query, with vulnerable function os.WriteFile
      operationId: PathTraversalGetBufferedQueryWriteFile
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured
  /pathTraversal/os.Create/query/{safety}:
    get:
      tags:
        - path_traversal
      description: demonstrates Path Traversal via query, with vulnerable function os.Create
      operationId: PathTraversalGetQueryCreate
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured
  /pathTraversal/os.Create/buffered-query/{safety}:
    get:
      tags:
        - path_traversal
      description: demonstrates Path Traversal via buffered-query, with vulnerable function os.Create
      operationId: PathTraversalGetBufferedQueryCreate
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured

  /xss:
    get:
      tags:
        - xss
      summary: front page of the Reflected XSS vulnerability
      operationId: XSSFront
      produces:
        - text/html
      responses:
        200:
          description: served front end for Reflected XSS page of Swagger API
          schema:
            type: string
        default:
          description: error occured
  /xss/reflectedXss/query/{safety}:
    get:
      tags:
        - xss
      description: demonstrates Reflected XSS via query, with vulnerable function reflectedXss
      operationId: XSSGetQueryReflectedXSS
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured
  /xss/reflectedXss/buffered-query/{safety}:
    get:
      tags:
        - xss
      description: demonstrates Reflected XSS via buffered-query, with vulnerable function reflectedXss
      operationId: XSSGetBufferedQueryReflectedXSS
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured

  /sqlInjection:
    get:
      tags:
        - sql_injection
      summary: front page of the SQL Injection vulnerability
      operationId: SQLInjectionFront
      produces:
        - text/html
      responses:
        200:
          description: served front end for SQL Injection page of Swagger API
          schema:
            type: string
        default:
          description: error occured
  /sqlInjection/sqlite3.exec/query/{safety}:
    get:
      tags:
        - sql_injection
      description: demonstrates SQL Injection via query, with vulnerable function sqlite3.exec
      operationId: SQLInjectionGetQueryExec
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured

  /ssrf:
    get:
      tags:
        - ssrf
      summary: front page of the Server Side Request Forgery vulnerability
      operationId: SsrfFront
      produces:
        - text/html
      responses:
        200:
          description: served front end for Server Side Request Forgery page of Swagger API
          schema:
            type: string
        default:
          description: error occured
  /ssrf/http/query/{safety}:
    get:
      tags:
        - ssrf
      description: demonstrates Server Side Request Forgery via query, with vulnerable function net/http
      operationId: SsrfGetQueryHTTP
      produces:
        - text/html
        - text/plain
      parameters:
        - $ref: "#/parameters/safetyParam"
        - name: input
          in: query
          description: the user provided input for the query vulnerability
          required: true
          type: string
      responses:
        200:
          description: returns the rendered response as a string
          schema:
            type: string
            description: The response when succesful query happens
        default:
          description: Error occured

definitions:
  item:
    type: object
    required:
      - description
    properties:
      id:
        type: integer
        format: int64
        readOnly: true
      description:
        type: string
        minLength: 1
      completed:
        type: boolean
  error:
    type: object
    required:
      - message
    properties:
      code:
        type: integer
        format: int64
      message:
        type: string

parameters:
  commandParam:
    in: path
    name: command
    description: specify if exec.Command or exec.CommandContext should be invoked
    required: true
    type: string
    enum:
      - exec.Command
      - exec.CommandContext

  safetyParam:
    name: safety
    in: path
    description: safety qualifier
    required: true
    type: string
    enum:
      - safe
      - unsafe
      - noop