Commit Graph

591 Commits (b1424313e97f49d97852b09ba801d729176a4248)

Author SHA1 Message Date
Mzack9999 534fc92165 fix lint 2020-10-23 12:15:51 +02:00
Mzack9999 a55c7a2ca8 fix lint 2020-10-23 12:14:24 +02:00
Mzack9999 25e6c4a8e8 fix lint 2020-10-23 12:10:49 +02:00
Mzack9999 1b8174072b merging master 2020-10-23 12:07:48 +02:00
Mzack9999 cb5ceed1f4 fixing 2020-10-23 11:38:45 +02:00
Mzack9999 058b1a6300 fixing linting 2020-10-23 11:04:39 +02:00
Mzack9999 81217decbe fixing linting 2020-10-23 11:02:49 +02:00
Mzack9999 9793a7f87c corrected spelling 2020-10-23 10:59:47 +02:00
Mzack9999 fbc570775b fixing syntax 2020-10-23 10:55:52 +02:00
Mzack9999 08b048853f resolving conflicts 2020-10-23 10:49:47 +02:00
Mzack9999 f550699a05 Merge branch 'master' into feature-burp-collaborator 2020-10-23 10:45:47 +02:00
Mzack9999 2d3abcb5e2 fixing linting 2020-10-23 10:43:49 +02:00
Mzack9999 2a8aaeaa2e fixing linting 2020-10-23 10:41:49 +02:00
Mzack9999 0ae73711fc merging master 2020-10-23 10:38:21 +02:00
Mzack9999 7ff170221e merging master 2020-10-23 10:16:17 +02:00
Mzack9999 53e4b45479 adding burp collaborator support 2020-10-23 10:13:34 +02:00
Ice3man543 4e48a5f147 Added type to specify type of request 2020-10-22 16:16:33 +05:30
Ice3man543 f5435e6c9a Added trace log feature to write execution log 2020-10-22 16:12:16 +05:30
Mzack9999 b20742a1c8 adding matcher per single request 2020-10-21 22:30:53 +02:00
Mzack9999 77cd24b670 simplified race condition templating 2020-10-21 08:16:15 +02:00
Mzack9999 0088b5cbf0 Merge branch 'master' into feature-race-conditions 2020-10-20 19:22:52 +02:00
Mzack9999 173b55af92 merging master 2020-10-20 19:21:11 +02:00
Ice3man543 4ec229ef7f Added -no-meta flag to ignore meta 2020-10-20 01:57:38 +05:30
Ice3man543 a393a72aa9 Ignore blank meta field 2020-10-19 16:23:25 +05:30
Ice3man543 6fb0e8dc76 Removed comment 2020-10-19 11:42:12 +05:30
Ice3man543 1d04c06808 Added dynamic field in info key support 2020-10-19 11:37:58 +05:30
Mzack9999 a136b118ef Synced Race Condition Attack 2020-10-19 02:57:30 +02:00
Mzack9999 5e2ab104df merging master 2020-10-18 18:18:32 +02:00
Mzack9999 5623fd4b36 poc working implementation 2020-10-18 03:09:24 +02:00
Mzack9999 d5cd01d43b wip 2020-10-17 02:10:47 +02:00
Mzack9999 00ce870239 split replace and replace_regex 2020-10-16 22:27:25 +02:00
Mzack9999 d391c1e01c Merge branch 'master' of github.com:bolli95/nuclei into bolli95-master 2020-10-16 22:26:04 +02:00
Mzack9999 9549a0c8c4 merging-to-master 2020-10-16 22:07:00 +02:00
Mzack9999 0664ae6340 upgrading go modules 2020-10-16 21:33:37 +02:00
Mzack9999 78fe1e2a40 corrected function name 2020-10-16 14:59:16 +02:00
Mzack9999 55d4f12703 hash as a string 2020-10-16 14:18:50 +02:00
Mzack9999 2b24f2a64c making murmur3 python compatible 2020-10-16 13:27:02 +02:00
Mzack9999 08526cf5e6 disabled validation for unsafe requests 2020-10-16 10:43:16 +02:00
Mzack9999 85aafa6763 fixed missing redirect handling with raw requests 2020-10-16 09:49:14 +02:00
Mzack9999 1fba3b0637 wip 2020-10-16 01:51:57 +02:00
Mzack9999 5305965401 adding mmh3 hashing support 2020-10-15 12:39:59 +02:00
Mzack9999 178a3ad11f corrected wrong syntax 2020-10-15 00:34:45 +02:00
Mzack9999 00bfb9a361 error handling 2020-10-15 00:07:53 +02:00
Max Boll 9d1d2bfe16 dsl replacement function extended with regex support 2020-10-14 14:45:05 +02:00
Mzack9999 e38f164f0d adding shared resolver cache among various http clients 2020-10-14 00:42:13 +02:00
Mzack9999 1f2959708b
Merge branch 'master' into read-ignoref-from-cwd 2020-10-13 02:13:04 +02:00
Mzack9999 34656d177b fixed small logic bug in positional finite state machine 2020-10-12 19:09:52 +02:00
Mzack9999 84c9373b71 implemented request count estimation 2020-10-12 08:14:07 +02:00
Mzack9999 500d7bb997 solving logical bug with input without port 2020-10-11 22:44:15 +02:00
Mzack9999 695c2a2768 adding payloads values to json output 2020-10-11 21:18:10 +02:00
Mzack9999 39fc9736d0 removed formatting dirctive as string builder is used - Closes #220 2020-10-11 20:59:37 +02:00
Mzack9999 ed855c9224 adding random generators - close #234 2020-10-11 20:26:27 +02:00
Mzack9999 236f3b2dfb using § marker - Closes #347 2020-10-11 19:37:34 +02:00
Víctor Zamanillo ec725ed925 Better Result initialization with matches and extractions 2020-10-11 12:27:01 +02:00
Víctor Zamanillo c349aaf50a Fixed invalid memory address or nil pointer dereference of result 2020-10-11 12:23:20 +02:00
Víctor Zamanillo e6fc8cec99 Fixed noctx 2020-10-11 12:15:12 +02:00
Víctor Zamanillo b3b786a615 Fixed bodyclose 2020-10-11 12:14:57 +02:00
Víctor Zamanillo 21d0b08aaf Fixed shadow declaration of err 2020-10-11 11:53:59 +02:00
Víctor Zamanillo 5c00615c0d Fixed copylocks: return copies lock value: Result 2020-10-11 11:46:43 +02:00
Víctor Zamanillo b9cc87a361 Fixed maligned 2020-10-11 11:45:48 +02:00
Mzack9999 83aef7e468 added missing pipeline flag 2020-10-11 01:41:45 +02:00
Mzack9999 583b065ea4 small logic change 2020-10-10 20:59:19 +02:00
Mzack9999 371b58d20b reducing locking 2020-10-10 17:53:17 +02:00
Mzack9999 e91fd95e97
Merge branch 'master' into feature-turbo-intruder 2020-10-09 23:13:41 +02:00
Mzack9999 ac710e002d rate-limit rework 2020-10-09 23:11:07 +02:00
Mzack9999 c7301e4a6a adding connection pool within same template 2020-10-09 21:52:16 +02:00
Mzack9999 7ab1933e17 minor refactor 2020-10-09 02:23:38 +02:00
Mzack9999 eb73df76a1 working poc 2020-10-08 16:34:47 +02:00
Víctor Zamanillo 677706940a Fixed ignored input path
Only the template port  takes preference over the input URL, not paths.
2020-10-07 16:17:46 +02:00
bauthard 7da51a8dd5
Merge pull request #344 from projectdiscovery/feature-stop-at-first-match
adding stop at first http match cli option
2020-10-07 17:28:03 +05:30
Mzack9999 1fccfc103c solving conflict 2020-10-06 22:12:34 +02:00
Mzack9999 1ac7ae1c76 merge from master 2020-10-06 22:09:53 +02:00
Mzack9999 e12003c471 adding stop at first http match cli option 2020-10-06 21:38:44 +02:00
Mzack9999 ec497696ee connection header logic fix 2020-10-06 20:39:42 +02:00
Mzack9999 86ebb277bf adding flag to disable host header and content length 2020-10-05 22:19:48 +02:00
Mzack9999 6f52252608 nil pointer fix 2020-10-05 20:45:45 +02:00
Mzack9999 0229fa8f23 fixing new line character causing smuggling to fail 2020-10-05 02:21:20 +02:00
Mzack9999 d2cf8f1501
Merge branch 'master' into feature-raw-requests 2020-10-03 20:51:18 +02:00
Mzack9999 1ad383338c converts duration to seconds 2020-10-01 18:16:24 +02:00
Mzack9999 0ecc798e2f begin of work on turbo intruder/pipelining 2020-10-01 01:08:43 +02:00
Mzack9999 7dcbc23693 adding missing type conversion 2020-09-30 20:36:57 +02:00
Mzack9999 fd1d24922e adding response time to DSL 2020-09-30 01:05:55 +02:00
Mzack9999 0cfe496a4f wip 2020-09-29 00:24:38 +02:00
Mzack9999 e19ded6b26 wip - partial implementation of full raw http 2020-09-28 02:17:35 +02:00
Mzack9999 f940dfd903 wip rawhttp 2020-09-27 02:25:40 +02:00
Mzack9999 d73ea47ce3 wip 2020-09-23 23:44:13 +02:00
Mzack9999 c18a7ff7a4
Merge branch 'master' into dont-quit-on-error 2020-09-23 23:39:43 +02:00
Mzack9999 fb816b9973 small change to logic 2020-09-23 23:38:12 +02:00
Mzack9999 ef49270027 small code refactoring 2020-09-23 23:27:48 +02:00
Mzack9999 528793a9b7 Merge branch 'master' of github.com:organiccrap/nuclei into organiccrap-master 2020-09-23 23:25:18 +02:00
Mzack9999 12c9ca7b12 fixing go mod 2020-09-23 22:38:59 +02:00
Víctor Zamanillo 60005290b1 Initial adoption of golangci-lint for CI 2020-08-25 23:33:20 +02:00
Víctor Zamanillo bff551eca3 Colorizer initialization when using a custom workflow 2020-08-24 11:21:49 +02:00
Ice3man543 d997539e87 Don't quit http requests on an error 2020-08-23 23:30:16 +05:30
Ice3man543 4e74cfd752 Added negative matchers support 2020-08-23 22:55:11 +05:30
rykkard 2b16e12c0f Fix issue where 'all' scope requires matches in both html parts 2020-08-18 20:51:05 -05:00
Florian Pfitzer 7a1aa770e9 add json-requests for DNS 2020-08-06 06:12:57 +02:00
Florian Pfitzer 51412f679b fix no result found problem with and condition 2020-08-04 15:09:30 +02:00
Manuel Bua 63cfd354b9 Use global pipes for capturing, experimental unified rendering 2020-08-01 21:44:14 +02:00
Manuel Bua 7088c9532e Merge branch 'master' into experimental-progressbar-live-results 2020-07-31 23:37:45 +02:00
Manuel Bua 02238c491b Use manual progressbar rendering to allow syncing with other output
Refactor into an interface to return a no-op impl, avoid the need to
conditionally invoke any of the methods.
2020-07-31 23:36:56 +02:00
Manuel Bua 058c4ffbbf Experimental live results output with active progressbar
See 333809f3d6 for an early implementation of this.
2020-07-31 17:35:05 +02:00
Mzack9999 f4486ef89a fixing relative path issue 2020-07-31 17:13:51 +02:00
Manuel Bua 2ebc0cf83e Merge branch 'master' into fix-175-results-highlight 2020-07-29 21:57:44 +02:00
Mzack9999 5cc3d9fe14 corrected payload issue 2020-07-29 21:20:39 +02:00
Mzack9999 d5d745e9b0 adding missing check to pointer 2020-07-29 19:50:54 +02:00
Manuel Bua 7d22f6cfb4 Merge branch 'master' into fix-175-results-highlight 2020-07-29 01:24:14 +02:00
Manuel Bua f8e52ced4e Add initial coloring support in output results 2020-07-29 00:43:05 +02:00
Mzack9999 43a96b958a making progress bar respect silent flag 2020-07-28 20:39:07 +02:00
Manuel Bua 9d2539f856 Makes stdio capturing global
This dramatically lower chances of reaching max open files limit as it
works with two os.Pipe only, but it may be sub-optimal in some cases
such as with the `-debug` switch because there are no guarded writes
anymore when using `fmt.Fprintf` directly, such as when dumping request
or responses.
2020-07-27 21:35:24 +02:00
Manuel Bua 24c53628ea Capture additional DNS logging 2020-07-27 21:15:38 +02:00
Manuel Bua 3916983bdb Merge branch 'master' into enumeration-progressbar 2020-07-27 00:25:36 +02:00
Manuel Bua 06cffee6aa Add support for workflows 2020-07-27 00:00:34 +02:00
Mzack9999 f45e01eda6 multi-matcher correction 2020-07-26 22:07:03 +02:00
Mzack9999 8c437fbd40 adding workflow's same directory path search for template variables 2020-07-26 20:14:05 +02:00
Manuel Bua 4d8131c8d8 Add support for DNS requests 2020-07-26 16:36:01 +02:00
Manuel Bua 32e20b13e6 Use single progressbar, tweak styling 2020-07-26 15:31:31 +02:00
Manuel Bua c967997a5a Merge branch 'bugfix-engine-rework' into enumeration-progressbar-next 2020-07-25 22:47:32 +02:00
Mzack9999 731241c90e fsm in-memory deduplication 2020-07-25 22:25:21 +02:00
Manuel Bua 24341bf34c Merge branch 'bugfix-engine-rework' into enumeration-progressbar-next 2020-07-25 22:18:28 +02:00
Mzack9999 3a8ee75b93 wip - output 2020-07-25 21:44:43 +02:00
Mzack9999 4cc9ad9100 wip - output 2020-07-25 21:15:28 +02:00
Manuel Bua d1c8527f1f Merge branch 'bugfix-engine-rework' into enumeration-progressbar-next 2020-07-25 21:05:47 +02:00
Mzack9999 c05cf9f8c6 adding missing result bool 2020-07-25 20:45:38 +02:00
Manuel Bua bb24061628 Merge branch 'bugfix-engine-rework' into enumeration-progressbar-next 2020-07-25 20:33:01 +02:00
Mzack9999 5fa309cb82 2nd race bugfix 2020-07-25 20:11:46 +02:00
Manuel Bua 3bfdd0c381 Increment progress instead of altering totals, wrap more std streams 2020-07-25 00:46:18 +02:00
Manuel Bua 8aecbeb821 Experimental support for new parallelism 2020-07-24 22:30:15 +02:00
Manuel Bua c7d234fe5a Merge branch 'bugfix-engine-rework' into enumeration-progressbar-next 2020-07-24 20:29:04 +02:00
Mzack9999 ab2f96c9e9 more experimental parallelism 2020-07-24 18:12:16 +02:00
Mzack9999 ffdaffd9a7 wip - code refactor 2020-07-24 13:37:01 +02:00
Mzack9999 9f1ac66032 wip - new engine parallelism fix 2020-07-23 23:28:34 +02:00
Manuel Bua 362fee27a4 Initial update to latest updates 2020-07-23 20:19:19 +02:00
Manuel Bua 04875a55dd Merge branch 'master' into enumeration-progressbar-next
# Conflicts:
#	v2/internal/runner/runner.go
#	v2/pkg/executor/executer_http.go
2020-07-22 22:28:26 +02:00
Florian Pfitzer b3fb45d381 json-request option for request/response output in JSON matches 2020-07-22 11:17:58 +02:00
Mzack9999 eee452a8cd progress tracker fix 2020-07-21 20:51:58 +02:00
Mzack9999 b4aabf4b34 fixed return point 2020-07-20 21:23:04 +02:00
Mzack9999 5f0edcd8aa experimental new syntax 2020-07-20 01:37:07 +02:00
Mzack9999 53363ec5fc fixed port rerouting in raw requests 2020-07-20 00:41:31 +02:00
Mzack9999 2299a0163a some code refactor 2020-07-19 19:25:05 +02:00
Mzack9999 fc355c79ca improved dynamic bindings 2020-07-19 03:14:19 +02:00
Mzack9999 57a496203f code refactor 2020-07-18 21:42:23 +02:00
Mzack9999 4b95842723 b 2020-07-17 16:57:53 +02:00
Mzack9999 c195bdb2f8 allow non canonical header name 2020-07-17 16:04:13 +02:00
Mzack9999 c346087926 limited support for same template extraction+reuse 2020-07-17 15:07:34 +02:00
Mzack9999 66713434f8 added in-workflow cookie reuse 2020-07-16 16:32:42 +02:00
Mzack9999 a256a56993 adding in-template cookie reuse 2020-07-16 16:16:26 +02:00
Mzack9999 a4ac439790 typo 2020-07-16 14:27:52 +02:00
Mzack9999 a75ea4644b adding external headers support within workflow 2020-07-16 14:22:59 +02:00
Mzack9999 a23031a2e6 using native go for cookies 2020-07-16 12:58:56 +02:00
Mzack9999 037aa356a6 small correction 2020-07-16 12:47:38 +02:00
Mzack9999 ef8146cfd5 typo global correction 2020-07-16 10:57:28 +02:00
Mzack9999 075509f91f finalized + corrected typo 2020-07-16 10:32:00 +02:00
Mzack9999 98dad65652 prototyping 2020-07-15 00:47:01 +02:00
Mzack9999 34224c537b
Merge pull request #140 from ankh2054/master
Add description to Template files
2020-07-14 23:18:38 +02:00
Mzack9999 457cfe91ba
Merge pull request #142 from projectdiscovery/feature-workflow-improvement
improved workflow logic
2020-07-14 23:16:15 +02:00
Mzack9999 eb03174a94 workflow now returns last matched payloads value 2020-07-14 03:54:57 +02:00
Mzack9999 f10ebeb070 removed useless assignment 2020-07-14 03:28:18 +02:00
Mzack9999 120637b31f adding array return type 2020-07-14 03:26:21 +02:00
Mzack9999 6fa236e205 expanded variable type support 2020-07-13 03:30:07 +02:00
Manuel Bua 987e9ccf38 Merge branch 'master' into enumeration-progressbar 2020-07-12 19:55:36 +02:00
Manuel Bua d0174c047c Respect color output user flag, remove unused Progress WaitGroup 2020-07-12 18:09:29 +02:00
Ice3man d72b57e857
Merge pull request #129 from dwisiswant0/improves-raw-requests
Improvements HTTP RAW Requests
2020-07-12 06:39:43 -07:00
Manuel Bua 97901f36b4 Refactor code, add meaningful comments 2020-07-11 22:57:44 +02:00
Mzack9999 2dee3507c0 adding script external variables support 2020-07-11 03:20:27 +02:00
Mzack9999 44e726515c Closes #144 2020-07-10 22:29:49 +02:00
Manuel Bua 2fe3d354c3 Group url/host-bound log messages to avoid segmentation in the output.
This is the simple and memory-friendly way. The alternative would be to
build a map[host]strings.Builder to allow for seamless per-host output
construction and output, but memory usage would probably be higher even
with a pool of builders.
2020-07-10 22:14:39 +02:00
Mzack9999 b4bf6cf4ac improved workflow logic 2020-07-10 09:04:38 +02:00
Manuel Bua 0ff138a477 Do not use mpb.Progress for logging
This will cause sync issues with very fast output and will defeat the
purpose of logging.

Instead, buffer both stdout/stderr and show their output at the end.
2020-07-09 20:57:24 +02:00
Charles Holtzkampf f2f0a1726b
Update workflows.go 2020-07-08 20:01:21 +01:00
Charles Holtzkampf 73068f5fb2
Update output_http.go 2020-07-08 19:56:18 +01:00
Charles Holtzkampf 9476b72b2e
Update output_dns.go 2020-07-08 19:55:38 +01:00
Charles Holtzkampf 2ab7b0b8f8
Update http_utils.go 2020-07-08 19:54:36 +01:00
Charles Holtzkampf 5b60336883
Add description field to template.yaml.
To describe the nature of the test being performed by template.
2020-07-08 19:21:08 +01:00
Manuel Bua df501136a6 Abort single request 2020-07-07 23:11:33 +02:00
Manuel Bua 32db612f62 Merge branch 'master' into enumeration-progressbar 2020-07-07 22:51:40 +02:00
Manuel Bua 9e1b39549f Minor refactoring, track count of aborted requests for better progress 2020-07-07 22:39:43 +02:00
Ice3man543 8f38faa579 Fixed an issue with requests 2020-07-07 17:48:25 +05:30
Mzack9999 606c46ba29
Merge pull request #132 from projectdiscovery/dsl-fix
DSL Fix
2020-07-06 20:51:45 +02:00
Mzack9999 e25ee652c0 Merge branch 'fix-default-matchers-condition' of github.com:manuelbua/nuclei into manuelbua-fix-default-matchers-condition 2020-07-06 20:48:31 +02:00
Mzack9999 d60a59d2c6 removed problematic early optimization 2020-07-06 20:11:19 +02:00
Manuel Bua 6f894b718a Abort on error, bar will be properly recreated 2020-07-06 00:13:13 +02:00
Manuel Bua d7b440a4ac Disambiguate error message 2020-07-05 23:52:47 +02:00
Manuel Bua d03fbd1932 Encapsulate behavior and clean up 2020-07-05 23:38:58 +02:00
Manuel Bua 20758a14a5 Use shortcut method 2020-07-05 22:48:05 +02:00
Manuel Bua 3a4d7ba3e1 No need to abort the only running bar anymore 2020-07-05 22:47:07 +02:00
Manuel Bua e59ac01c65 Experimental single progress bar 2020-07-05 17:22:21 +02:00
Manuel Bua 9afd9bc4c2 Refactoring to compute workload in advance 2020-07-05 17:17:04 +02:00
Manuel Bua 6d68b09863 Initial progress bar implementation 2020-07-04 23:00:11 +02:00
dw1 fc434f13e0 🪲 Bug fixes #128 2020-07-04 14:34:41 +07:00
Ice3man543 458dbc1b38 v2 update 2020-07-01 16:17:24 +05:30