How to get information about all account nos from Aria using only one API call

Question

Aria is a third party billing system. There is an API provided for accessing information stored at Aria by providing some credentials. For a particular credential, there are no. of accounts associated. In almost all of the API functions that Aria has provided require account no. as one of the parameters. So, my problem is that I have to get the information about all the accounts for a particular credential in one API call without specifying any account no. We can assume that no. of accounts are less than 400. Thanks.

Answer 1

Use a string escaping technique, such as:

?accountno=name'%20OR%20'a'='a

References

• Fuzzing

• Ajax and Other "Rich" Interface Technologies

• Web Services

• Testing for Stack Overflow