Commit Graph

4935 Commits (f159e8fa665c5cf0793718b9e8a4bcda8d8b7256)

Author SHA1 Message Date
Tarun Koyalwar f159e8fa66
fix dynamic extractor + payloads edgecase by sending req sequentially (#5016)
* explicitly handle edgecase #4993 instead of hot fix

* fix typo
2024-04-08 22:21:26 +05:30
Ice3man a844e6f7ab
feat: fixed bug due to parallel auto setting in http (#4992)
* feat: fixed bug due to parallel auto setting in http

* increased threshold

---------

Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2024-04-08 16:04:57 +05:30
Tarun Koyalwar b86fcb5546
fix index out of range error (#4998) 2024-04-08 14:11:32 +05:30
dependabot[bot] 392fb61e94
Merge pull request #5013 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/fastdialer-0.0.66 2024-04-08 07:16:46 +00:00
dependabot[bot] f1215d84e7
Merge pull request #5010 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/utils-0.0.88 2024-04-08 07:13:53 +00:00
dependabot[bot] 2b7967c5ec
chore(deps): bump github.com/projectdiscovery/fastdialer
Bumps [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer) from 0.0.64 to 0.0.66.
- [Release notes](https://github.com/projectdiscovery/fastdialer/releases)
- [Commits](https://github.com/projectdiscovery/fastdialer/compare/v0.0.64...v0.0.66)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/fastdialer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 06:46:57 +00:00
dependabot[bot] 9730de0f76
chore(deps): bump github.com/projectdiscovery/utils
Bumps [github.com/projectdiscovery/utils](https://github.com/projectdiscovery/utils) from 0.0.87 to 0.0.88.
- [Release notes](https://github.com/projectdiscovery/utils/releases)
- [Changelog](https://github.com/projectdiscovery/utils/blob/main/CHANGELOG.md)
- [Commits](https://github.com/projectdiscovery/utils/compare/v0.0.87...v0.0.88)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/utils
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 06:46:36 +00:00
dependabot[bot] 3f04534337
Merge pull request #5009 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/dsl-0.0.51 2024-04-08 06:45:31 +00:00
dependabot[bot] e8e11d8f94
Merge pull request #5012 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/retryablehttp-go-1.0.55 2024-04-08 06:43:03 +00:00
dependabot[bot] 64a783223b
chore(deps): bump github.com/projectdiscovery/retryablehttp-go
Bumps [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) from 1.0.54 to 1.0.55.
- [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases)
- [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.54...v1.0.55)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/retryablehttp-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 06:21:10 +00:00
dependabot[bot] 95fc24a1c8
chore(deps): bump github.com/projectdiscovery/dsl from 0.0.50 to 0.0.51
Bumps [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) from 0.0.50 to 0.0.51.
- [Release notes](https://github.com/projectdiscovery/dsl/releases)
- [Commits](https://github.com/projectdiscovery/dsl/compare/v0.0.50...v0.0.51)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/dsl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 06:21:01 +00:00
dependabot[bot] 02957e913b
Merge pull request #5011 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/rawhttp-0.1.44 2024-04-08 06:19:38 +00:00
dependabot[bot] a4f6667eb4
chore(deps): bump github.com/projectdiscovery/rawhttp
Bumps [github.com/projectdiscovery/rawhttp](https://github.com/projectdiscovery/rawhttp) from 0.1.41 to 0.1.44.
- [Release notes](https://github.com/projectdiscovery/rawhttp/releases)
- [Commits](https://github.com/projectdiscovery/rawhttp/compare/v0.1.41...v0.1.44)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/rawhttp
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-08 05:56:54 +00:00
GitHub Action d742e55c3f Auto Generate Syntax Docs + JSONSchema [Sun Apr 7 22:03:32 UTC 2024] 🤖 2024-04-07 22:03:32 +00:00
Muhammad Daffa ffbe5deebb
feat: added asreproastable (#4990)
* feat: added asreproastable

* ldap: remove FilterAccountEnabled from AsRepRoastable

* run 'make jsupdate'

---------

Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
2024-04-08 03:31:30 +05:30
Ramana Reddy 8c27ca2591
fix(schema): generation of missing JSON schema definitions (#4995)
* fix(schema): generation of missing JSON schema definitions

* make headers and data to accept multi-type inputs

* misc update
2024-04-08 03:29:42 +05:30
Sandeep Singh 82e25f6631
Merge pull request #5004 from hanghuge/dev
chore: fix function name in comment
2024-04-07 23:36:23 +05:30
hanghuge 7b2a708edd chore: fix function name in comment
Signed-off-by: hanghuge <cmoman@outlook.com>
2024-04-07 00:03:24 +08:00
Dogan Can Bakir e99420603f
fix raw req single slash issue (#4955)
* fix raw req single slash issue

* fix raw unsafe req single slash issue

* commit to last commit

* minor
2024-04-03 19:39:35 +05:30
sandeep b687c11f6b misc option update 2024-04-03 18:51:34 +05:30
sandeep 6b5e0baf2a Merge branch 'dev' of https://github.com/projectdiscovery/nuclei into dev 2024-04-03 17:25:33 +05:30
sandeep 03b2fb52c1 syntax update in test 2024-04-03 17:25:12 +05:30
David Fisher 143f179e7b
Remove prefix v from Sarif exporters (#4976)
because: In config.Version there is already
a `v`` prefix, such as `v3.2.2``.

Prior to this commit the versions were being
tagged as `vv3.2.2`

this commit: Removes the 'v' prefix from the
Sarif exporter in the ToolDetails for both
FullName and SemanticVersion.
2024-04-03 17:19:27 +05:30
Tarun Koyalwar 3907e20bde
fix multiple panics & missing matcher-status in flow templates (#4978)
* validate and fix empty internal-event

* fix on error with interactsh req

* disable clustering in flow & multiproto

* fix empty/missing matcher-status result

* fix cluster unit test

* fix no results found unit test
2024-04-03 17:19:06 +05:30
dependabot[bot] abc8ac8ee1
Merge pull request #4982 from projectdiscovery/dependabot/go_modules/github.com/quic-go/quic-go-0.42.0 2024-04-02 14:42:32 +00:00
dependabot[bot] 86b84968b5
chore(deps): bump github.com/quic-go/quic-go from 0.40.1 to 0.42.0
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.40.1 to 0.42.0.
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Changelog](https://github.com/quic-go/quic-go/blob/master/Changelog.md)
- [Commits](https://github.com/quic-go/quic-go/compare/v0.40.1...v0.42.0)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-02 14:20:30 +00:00
Tarun Koyalwar 9951626f1f
bump utils (#4975)
* bump utils

* fix windows build + dev version update

* use utils from main

* use v0.0.87 of utils
2024-04-02 16:32:52 +05:30
Dogan Can Bakir dccfc10b10
fix nocolor output (#4954)
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
2024-04-02 01:41:10 +05:30
dependabot[bot] 5443c1c76b
Merge pull request #4972 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/wappalyzergo-0.0.116 2024-04-01 14:14:01 +00:00
dependabot[bot] b4b71d9ad6
chore(deps): bump github.com/projectdiscovery/wappalyzergo
Bumps [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) from 0.0.112 to 0.0.116.
- [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases)
- [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.0.112...v0.0.116)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/wappalyzergo
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 13:51:55 +00:00
GitHub Action 39ee0b7c39 Auto Generate Syntax Docs + JSONSchema [Mon Apr 1 13:49:30 UTC 2024] 🤖 2024-04-01 13:49:30 +00:00
Tarun Koyalwar 255032f4f2
pre-condition in code , fuzz and other misc updates (#4966)
* fuzz: rename 'filters' -> 'pre-condition'

* code proto: pre-condition + integration test

* feat: dsl document generator

* update dsl page header

* fix lint error

* add js defined helper funcs in docs

* remove panic recovery unless its for third party(go-rod,goja)

* handle dynamic values flattening edgecase in flow+multiprotocol

* fix order of kv in form-data (failing test)

* fix template loading counters

* Revert "handle dynamic values flattening edgecase in flow+multiprotocol"

This reverts commit 58fdd4faf7df5d654b46a9585011f614d5c98aa4.

* fix flow iteration using 'iterate'
2024-04-01 19:18:21 +05:30
Tarun Koyalwar 1d8b10be2a
fix empty template-id in scan logs (#4969) 2024-04-01 12:25:17 +05:30
dependabot[bot] ddf9477c80
Merge pull request #4973 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/goflags-0.1.46 2024-04-01 06:14:01 +00:00
dependabot[bot] 8a25cb4c59
Merge pull request #4970 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/retryablehttp-go-1.0.54 2024-04-01 05:53:28 +00:00
dependabot[bot] d5cfee7375
chore(deps): bump github.com/projectdiscovery/goflags
Bumps [github.com/projectdiscovery/goflags](https://github.com/projectdiscovery/goflags) from 0.1.42 to 0.1.46.
- [Release notes](https://github.com/projectdiscovery/goflags/releases)
- [Commits](https://github.com/projectdiscovery/goflags/compare/v0.1.42...v0.1.46)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/goflags
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 05:47:50 +00:00
dependabot[bot] 07ce7ef34e
Merge pull request #4974 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/dsl-0.0.50 2024-04-01 05:44:54 +00:00
dependabot[bot] c8783e608b
Merge pull request #4971 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/ratelimit-0.0.35 2024-04-01 05:44:05 +00:00
dependabot[bot] cf67d4dca6
chore(deps): bump github.com/projectdiscovery/dsl from 0.0.48 to 0.0.50
Bumps [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) from 0.0.48 to 0.0.50.
- [Release notes](https://github.com/projectdiscovery/dsl/releases)
- [Commits](https://github.com/projectdiscovery/dsl/compare/v0.0.48...v0.0.50)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/dsl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 05:24:10 +00:00
dependabot[bot] 90ae6fc2fa
chore(deps): bump github.com/projectdiscovery/ratelimit
Bumps [github.com/projectdiscovery/ratelimit](https://github.com/projectdiscovery/ratelimit) from 0.0.27 to 0.0.35.
- [Release notes](https://github.com/projectdiscovery/ratelimit/releases)
- [Commits](https://github.com/projectdiscovery/ratelimit/compare/v0.0.27...v0.0.35)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/ratelimit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 05:22:51 +00:00
dependabot[bot] 4c86b3bf87
chore(deps): bump github.com/projectdiscovery/retryablehttp-go
Bumps [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) from 1.0.52 to 1.0.54.
- [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases)
- [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.52...v1.0.54)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/retryablehttp-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-04-01 05:22:42 +00:00
Tarun Koyalwar 25e7799c09
req_url_pattern for vuln_hash calculation + unit test (#4964) 2024-03-30 23:50:31 +05:30
GitHub Action 5ce912e316 Auto Generate Syntax Docs + JSONSchema [Fri Mar 29 08:03:07 UTC 2024] 🤖 2024-03-29 08:03:07 +00:00
llussy cfbd56c311
fix go version and format. (#4958) 2024-03-29 13:32:07 +05:30
Tarun Koyalwar e88889b263
add `-dast` flag and multiple bug fixes for dast templates (#4941)
* add default get method

* remove residual payload logic from old implementation

* fuzz: clone current state of component

* fuzz: bug fix stacking of payloads in multiple mode

* improve stdout template loading stats

* stdout: force display warnings if no templates are loaded

* update flags in README.md

* quote non-ascii chars in extractor output

* aws request signature can only be used in signed & verified tmpls

* deprecate request signature

* remove logic related to deprecated fuzzing input

* update test to use ordered params

* fix interactsh-url lazy eval: #4946

* output: skip unnecessary updates when unescaping

* updates as per requested changes
2024-03-29 13:31:30 +05:30
GitHub Action 78300e3250 Auto Generate Syntax Docs + JSONSchema [Wed Mar 27 18:35:05 UTC 2024] 🤖 2024-03-27 18:35:05 +00:00
Tarun Koyalwar c123a4b449
Merge pull request #4943 from kchason/3690-replace-jsonschema
Update JSONSchema Libraries
2024-03-28 00:03:01 +05:30
Tarun Koyalwar 17d67f6608 minor updates 2024-03-27 23:52:08 +05:30
kchason 0feb94a717
Remove YAML designated formatters 2024-03-25 16:15:28 -04:00
kchason fb3c3d828d
Initial switch of libraries 2024-03-25 15:52:20 -04:00