Attacking & Fuzzing of Polkadot Node

				
					#!/usr/bin/env python

import asyncio
from websocket import create_connection
import json
import string
import random
import time

# This is the method were the actual RPC call is made
def call_method(websocket, method: str, i: str):
    websocket.send(json.dumps({
        "id": 1,
        "jsonrpc": "2.0",
        "method": method,
        "params": [i],
        }))

# Here we have all the available methods that we got from the node
methods = ["system_accountNextIndex","system_addReservedPeer","system_chain","system_chainType","system_health","system_localListenAddresses","system_localPeerId","system_name","system_networkState","system_nodeRoles","system_peers","system_properties","system_removeReservedPeer","system_syncState","system_version","author_hasKey","author_hasSessionKeys","author_insertKey","author_pendingExtrinsics","author_removeExtrinsic","author_rotateKeys","author_submitAndWatchExtrinsic","author_submitExtrinsic","chain_getBlock","chain_getBlockHash","chain_getFinalizedHead","chain_getFinalizedHeadByRound","chain_getHeader","chain_subscribeFinalizedHeads","chain_subscribeNewHead","chain_subscribeNewHeads","state_call","state_getKeysPaged","state_getMetadata","state_getPairs","state_getReadProof","state_getRuntimeVersion","state_getStorage","state_getStorageHash","state_getStorageSize","state_queryStorage","state_queryStorageAt","state_subscribeRuntimeVersion","state_subscribeStorage","rpc_methods","grandpa_proveFinality","grandpa_roundState","offchain_localStorageGet","offchain_localStorageSet","childstate_getKeys","childstate_getStorage","childstate_getStorageHash","childstate_getStorageSize","syncstate_genSyncSpec","payment_queryInfo"]

# Connection to the node
socket = create_connection("ws://localhost:8546")
while True:
		# Random parameter generation
    i = ''.join(random.choice(string.digits) for i in range(random.randint(10, 50)))
    # We try all the methods
    for method in methods:
        print(method)
        print(i)
        # We are adding 0x in front of the string because that what the parameter is suppose to look like
        call_method(socket, method, "0x" + i)
socket.close()