fa56800fcc
Fuzzing layer enhancements + input-types support ( #4477 )
...
* feat: move fuzz package to root directory
* feat: added support for input providers like openapi,postman,etc
* feat: integration of new fuzzing logic in engine
* bugfix: use and instead of or
* fixed lint errors
* go mod tidy
* add new reqresp type + bump utils
* custom http request parser
* use new struct type RequestResponse
* introduce unified input/target provider
* abstract input formats via new inputprovider
* completed input provider refactor
* remove duplicated code
* add sdk method to load targets
* rename component url->path
* add new yaml format + remove duplicated code
* use gopkg.in/yaml.v3 for parsing
* update .gitignore
* refactor/move + docs fuzzing in http protocol
* fuzz: header + query integration test using fuzzplayground
* fix integration test runner in windows
* feat add support for filter in http fuzz
* rewrite header/query integration test with filter
* add replace regex rule
* support kv fuzzing + misc updates
* add path fuzzing example + misc improvements
* fix matchedURL + skip httpx on multi formats
* cookie fuzz integration test
* add json body + params body tests
* feat add multipart/form-data fuzzing support
* add all fuzz body integration test
* misc bug fixes + minor refactor
* add multipart form + body form unit tests
* only run fuzzing templates if -fuzz flag is given
* refactor/move fuzz playground server to pkg
* fix integration test + refactor
* add auth types and strategies
* add file auth provider
* start implementing auth logic in http
* add logic in http protocol
* static auth implemented for http
* default :80,:443 normalization
* feat: dynamic auth init
* feat: dynamic auth using templates
* validate targets count in openapi+swagger
* inputformats: add support to accept variables
* fix workflow integration test
* update lazy cred fetch logic
* fix unit test
* drop postman support
* domain related normalization
* update secrets.yaml file format + misc updates
* add auth prefetch option
* remove old secret files
* add fuzzing+auth related sdk options
* fix/support multiple mode in kv header fuzzing
* rename 'headers' -> 'header' in fuzzing rules
* fix deadlock due to merge conflict resolution
* misc update
* add bool type in parsed value
* add openapi validation+override+ new flags
* misc updates
* remove optional path parameters when unavailable
* fix swagger.yaml file
* misc updates
* update print msg
* multiple openapi validation enchancements + appMode
* add optional params in required_openapi_vars.yaml file
* improve warning/verbose msgs in format
* fix skip-format-validation not working
* use 'params/parameter' instead of 'variable' in openapi
* add retry support for falky tests
* fix nuclei loading ignored templates (#4849 )
* fix tag include logic
* fix unit test
* remove quoting in extractor output
* remove quote in debug code command
* feat: issue tracker URLs in JSON + misc fixes (#4855 )
* feat: issue tracker URLs in JSON + misc fixes
* misc changes
* feat: status update support for issues
* feat: report metadata generation hook support
* feat: added CLI summary of tickets created
* misc changes
* introduce `disable-unsigned-templates` flag (#4820 )
* introduce `disable-unsigned-templates` flag
* minor
* skip instead of exit
* remove duplicate imports
* use stats package + misc enhancements
* force display warning + adjust skipped stats in unsigned count
* include unsigned skipped templates without -dut flag
---------
Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
* Purge cache on global callback set (#4840 )
* purge cache on global callback set
* lint
* purging cache
* purge cache in runner after loading templates
* include internal cache from parsers + add global cache register/purge via config
* remove disable cache purge option
---------
Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
* misc update
* add application/octet-stream support
* openapi: support path specific params
* misc option + readme update
---------
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
Co-authored-by: Tarun Koyalwar <45962551+tarunKoyalwar@users.noreply.github.com>
Co-authored-by: Dogan Can Bakir <65292895+dogancanbakir@users.noreply.github.com>
Co-authored-by: Mzack9999 <mzack9999@protonmail.com>
2024-03-14 03:08:53 +05:30
66b722faaf
bump gozero ( #4877 )
2024-03-13 20:36:19 +05:30
49ef5cbf16
handle 1 more edgecase ( #4868 )
...
* handle 1 more edgecase
* add integration test for this edgecase
* fix multi-http-var-sharing with integration test
* add -payload-concurrency (-pc) flag
* fix missing internal:true login in multiprotocol engine
* fix/handle absolute invalid url parsing
* support -pc & -jc in go sdk
* fix missing variables in code protocol operators
* add payload count parallelhttp check
2024-03-13 20:35:19 +05:30
a66b56fc79
change position of sdk text
2024-03-11 22:39:32 +05:30
e9625d621f
add callback support to StandardWriter ( #4839 )
...
* add callback support to StandardWriter
* minor
* use multiwriter
* minor
2024-03-11 17:07:07 +05:30
fe4d5f05a1
Merge pull request #4862 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/interactsh-1.1.9
2024-03-11 06:26:48 +00:00
4d67a3601d
chore(deps): bump github.com/projectdiscovery/interactsh
...
Bumps [github.com/projectdiscovery/interactsh](https://github.com/projectdiscovery/interactsh ) from 1.1.8 to 1.1.9.
- [Release notes](https://github.com/projectdiscovery/interactsh/releases )
- [Changelog](https://github.com/projectdiscovery/interactsh/blob/main/.goreleaser.yml )
- [Commits](https://github.com/projectdiscovery/interactsh/compare/v1.1.8...v1.1.9 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/interactsh
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-11 06:06:33 +00:00
5347106bce
Merge pull request #4859 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/httpx-1.6.0
2024-03-11 06:04:41 +00:00
69b39d8ce6
chore(deps): bump github.com/projectdiscovery/httpx from 1.5.0 to 1.6.0
...
Bumps [github.com/projectdiscovery/httpx](https://github.com/projectdiscovery/httpx ) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/projectdiscovery/httpx/releases )
- [Changelog](https://github.com/projectdiscovery/httpx/blob/main/.goreleaser.yml )
- [Commits](https://github.com/projectdiscovery/httpx/compare/v1.5.0...v1.6.0 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/httpx
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-11 05:45:02 +00:00
3d3027873c
Merge pull request #4858 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/rawhttp-0.1.40
2024-03-11 05:44:01 +00:00
3a2b5c8c96
chore(deps): bump github.com/projectdiscovery/rawhttp
...
Bumps [github.com/projectdiscovery/rawhttp](https://github.com/projectdiscovery/rawhttp ) from 0.1.39 to 0.1.40.
- [Release notes](https://github.com/projectdiscovery/rawhttp/releases )
- [Commits](https://github.com/projectdiscovery/rawhttp/compare/v0.1.39...v0.1.40 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/rawhttp
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-11 05:23:53 +00:00
ec4fb408c9
Purge cache on global callback set ( #4840 )
...
* purge cache on global callback set
* lint
* purging cache
* purge cache in runner after loading templates
* include internal cache from parsers + add global cache register/purge via config
* remove disable cache purge option
---------
Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
2024-03-11 02:59:55 +05:30
9bd4db3f74
introduce `disable-unsigned-templates` flag ( #4820 )
...
* introduce `disable-unsigned-templates` flag
* minor
* skip instead of exit
* remove duplicate imports
* use stats package + misc enhancements
* force display warning + adjust skipped stats in unsigned count
* include unsigned skipped templates without -dut flag
---------
Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
2024-03-11 02:01:17 +05:30
fd024a3e8d
feat: issue tracker URLs in JSON + misc fixes ( #4855 )
...
* feat: issue tracker URLs in JSON + misc fixes
* misc changes
* feat: status update support for issues
* feat: report metadata generation hook support
* feat: added CLI summary of tickets created
* misc changes
2024-03-10 22:02:42 +05:30
b1b4f0fe76
fix nuclei loading ignored templates ( #4849 )
...
* fix tag include logic
* fix unit test
* remove quoting in extractor output
* remove quote in debug code command
2024-03-09 21:20:54 +05:30
bbac102cf8
remove tmp code files ( #4835 )
2024-03-07 18:27:38 +05:30
cfe28f0040
Auto Generate Syntax Docs + JSONSchema [Tue Mar 5 17:11:08 UTC 2024] 🤖
2024-03-05 17:11:09 +00:00
0a8beb26e9
Make self-contained optional in http request ( #4838 )
2024-03-05 22:40:12 +05:30
02d4151110
Merge pull request #4826 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/httpx-1.5.0
2024-03-04 06:39:41 +00:00
e4702317e4
Merge pull request #4828 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/wappalyzergo-0.0.112
2024-03-04 06:34:18 +00:00
0642531559
Merge pull request #4829 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/goflags-0.1.42
2024-03-04 06:32:44 +00:00
efa4fbcdb7
chore(deps): bump github.com/projectdiscovery/httpx from 1.3.9 to 1.5.0
...
Bumps [github.com/projectdiscovery/httpx](https://github.com/projectdiscovery/httpx ) from 1.3.9 to 1.5.0.
- [Release notes](https://github.com/projectdiscovery/httpx/releases )
- [Changelog](https://github.com/projectdiscovery/httpx/blob/main/.goreleaser.yml )
- [Commits](https://github.com/projectdiscovery/httpx/compare/v1.3.9...v1.5.0 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/httpx
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-04 06:20:56 +00:00
6cfb312f20
Merge pull request #4830 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/retryabledns-1.0.58
2024-03-04 06:19:59 +00:00
b13a9b9ace
chore(deps): bump github.com/projectdiscovery/wappalyzergo
...
Bumps [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo ) from 0.0.111 to 0.0.112.
- [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases )
- [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.0.111...v0.0.112 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/wappalyzergo
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-04 06:13:45 +00:00
b3498c1a2a
chore(deps): bump github.com/projectdiscovery/goflags
...
Bumps [github.com/projectdiscovery/goflags](https://github.com/projectdiscovery/goflags ) from 0.1.40 to 0.1.42.
- [Release notes](https://github.com/projectdiscovery/goflags/releases )
- [Commits](https://github.com/projectdiscovery/goflags/compare/v0.1.40...v0.1.42 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/goflags
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-04 06:12:57 +00:00
505fe4ca5c
Merge pull request #4827 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/useragent-0.0.40
2024-03-04 06:11:58 +00:00
7379f1f3f5
chore(deps): bump github.com/projectdiscovery/retryabledns
...
Bumps [github.com/projectdiscovery/retryabledns](https://github.com/projectdiscovery/retryabledns ) from 1.0.56 to 1.0.58.
- [Release notes](https://github.com/projectdiscovery/retryabledns/releases )
- [Commits](https://github.com/projectdiscovery/retryabledns/compare/v1.0.56...v1.0.58 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/retryabledns
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-04 05:51:29 +00:00
8c2212f5c0
chore(deps): bump github.com/projectdiscovery/useragent
...
Bumps [github.com/projectdiscovery/useragent](https://github.com/projectdiscovery/useragent ) from 0.0.39 to 0.0.40.
- [Release notes](https://github.com/projectdiscovery/useragent/releases )
- [Commits](https://github.com/projectdiscovery/useragent/compare/v0.0.39...v0.0.40 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/useragent
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-03-04 05:51:15 +00:00
3ab0ae6c6f
Implement more granular, issue tracker level filtering ( #4780 )
...
* (feat) include gitea in default config
* (feat) implement tracker level filtering in #4779
2024-03-02 18:25:13 +05:30
e86f382997
validate code template in workflows ( #4822 )
...
* validate code template in workflows
* fix missing executer
2024-03-01 21:30:03 +05:30
4c7a0f424e
Transparent Memoization via func Annotation ( #4742 )
...
* initial implementation with manual code generation
* testing generation
* refactor to package methods + auto memoize
* more memos
* fixing signatures
* refactor
* adding gen util
* adding util
* regenerate memoized files
---------
Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
2024-03-01 18:40:18 +05:30
e7252a4f9e
Auto Generate Syntax Docs + JSONSchema [Fri Mar 1 11:10:06 UTC 2024] 🤖
2024-03-01 11:10:06 +00:00
8a2ff17ad8
allow specifying self-contained at http request level ( #4812 )
...
* allow specifying self-contained at requestlevel
* fix IsSMTP js example
* update smtp + fix examples
* update smtp error message
* add code reference in js protocol
* update js docs
* remove debug stmt
2024-03-01 16:38:56 +05:30
6abff96435
use maxsize ( #4814 )
2024-02-29 03:21:17 +05:30
30bbdd0163
Update README.md ( #4819 )
...
-Removed links to sections that no longer exist
2024-02-29 00:37:34 +05:30
924a0527d2
Merge pull request #4807 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/utils-0.0.80
2024-02-26 07:26:03 +00:00
f027b3a793
chore(deps): bump github.com/projectdiscovery/utils
...
Bumps [github.com/projectdiscovery/utils](https://github.com/projectdiscovery/utils ) from 0.0.79-0.20240216200330-eeee5a2031fc to 0.0.80.
- [Release notes](https://github.com/projectdiscovery/utils/releases )
- [Changelog](https://github.com/projectdiscovery/utils/blob/main/CHANGELOG.md )
- [Commits](https://github.com/projectdiscovery/utils/commits/v0.0.80 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/utils
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-02-26 06:58:04 +00:00
730addd09f
Merge pull request #4806 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/wappalyzergo-0.0.111
2024-02-26 06:55:16 +00:00
395b9d2a5b
chore(deps): bump github.com/projectdiscovery/wappalyzergo
...
Bumps [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo ) from 0.0.109 to 0.0.111.
- [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases )
- [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.0.109...v0.0.111 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/wappalyzergo
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-02-26 06:27:32 +00:00
2922e05b03
Merge pull request #4805 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/useragent-0.0.39
2024-02-26 06:25:35 +00:00
059b0ea215
Merge pull request #4804 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/fastdialer-0.0.60
2024-02-26 06:24:39 +00:00
42b336b383
chore(deps): bump github.com/projectdiscovery/useragent
...
Bumps [github.com/projectdiscovery/useragent](https://github.com/projectdiscovery/useragent ) from 0.0.38 to 0.0.39.
- [Release notes](https://github.com/projectdiscovery/useragent/releases )
- [Commits](https://github.com/projectdiscovery/useragent/compare/v0.0.38...v0.0.39 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/useragent
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-02-26 06:04:33 +00:00
72a73575c2
chore(deps): bump github.com/projectdiscovery/fastdialer
...
Bumps [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer ) from 0.0.58 to 0.0.60.
- [Release notes](https://github.com/projectdiscovery/fastdialer/releases )
- [Commits](https://github.com/projectdiscovery/fastdialer/compare/v0.0.58...v0.0.60 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/fastdialer
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-02-26 06:04:27 +00:00
ce3626bdea
Merge pull request #4803 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/retryablehttp-go-1.0.49
2024-02-26 06:03:14 +00:00
ed4796a71c
chore(deps): bump github.com/projectdiscovery/retryablehttp-go
...
Bumps [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go ) from 1.0.48 to 1.0.49.
- [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases )
- [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.48...v1.0.49 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/retryablehttp-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-02-26 05:43:03 +00:00
dd570bd71d
Testing on owners ( #4801 )
...
* misc update
* chore(deps): bump github.com/gin-gonic/gin from 1.9.0 to 1.9.1 (#4252 )
Bumps [github.com/gin-gonic/gin](https://github.com/gin-gonic/gin ) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/gin-gonic/gin/releases )
- [Changelog](https://github.com/gin-gonic/gin/blob/master/CHANGELOG.md )
- [Commits](https://github.com/gin-gonic/gin/compare/v1.9.0...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/gin-gonic/gin
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(deps): bump github.com/docker/docker (#4316 )
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from 24.0.5+incompatible to 24.0.7+incompatible.
- [Release notes](https://github.com/docker/docker/releases )
- [Commits](https://github.com/docker/docker/compare/v24.0.5...v24.0.7 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* fix README_CN.md typos (#4369 )
* version update
* only testing on owners
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xc1Ym <xuedongyuming2233@gmail.com>
2024-02-25 15:59:39 +05:30
13831e63e0
feat: typo fix ( #4785 )
2024-02-22 04:48:02 +05:30
5539ad7aff
Merge pull request #4770 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/goflags-0.1.40
2024-02-19 05:52:59 +00:00
8cb7cc9f68
Merge pull request #4769 from projectdiscovery/dependabot/go_modules/dev/github.com/projectdiscovery/retryabledns-1.0.56
2024-02-19 05:51:28 +00:00
20f940ff60
chore(deps): bump github.com/projectdiscovery/goflags
...
Bumps [github.com/projectdiscovery/goflags](https://github.com/projectdiscovery/goflags ) from 0.1.39 to 0.1.40.
- [Release notes](https://github.com/projectdiscovery/goflags/releases )
- [Commits](https://github.com/projectdiscovery/goflags/compare/v0.1.39...v0.1.40 )
---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/goflags
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2024-02-19 05:31:26 +00:00
Ice3man
Dogan Can Bakir
Tarun Koyalwar
dependabot[bot]
Mzack9999
GitHub Action
Ramana Reddy
Leon Jacobs
fail-open
三米前有蕉皮
Alexey