mirror of https://github.com/daffainfo/nuclei.git
116 lines
3.3 KiB
Go
116 lines
3.3 KiB
Go
package installer
|
|
|
|
import (
|
|
"encoding/json"
|
|
"io"
|
|
"net/url"
|
|
"os"
|
|
"runtime"
|
|
"sync"
|
|
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/catalog/config"
|
|
"github.com/projectdiscovery/retryablehttp-go"
|
|
updateutils "github.com/projectdiscovery/utils/update"
|
|
)
|
|
|
|
const (
|
|
pdtmNucleiVersionEndpoint = "https://api.pdtm.sh/api/v1/tools/nuclei"
|
|
pdtmNucleiIgnoreFileEndpoint = "https://api.pdtm.sh/api/v1/tools/nuclei/ignore"
|
|
)
|
|
|
|
// defaultHttpClient is http client that is only meant to be used for version check
|
|
// if proxy env variables are set those are reflected in this client
|
|
var retryableHttpClient = retryablehttp.NewClient(retryablehttp.Options{HttpClient: updateutils.DefaultHttpClient, RetryMax: 2})
|
|
|
|
// PdtmAPIResponse is the response from pdtm API for nuclei endpoint
|
|
type PdtmAPIResponse struct {
|
|
IgnoreHash string `json:"ignore-hash"`
|
|
Tools []struct {
|
|
Name string `json:"name"`
|
|
Version string `json:"version"`
|
|
} `json:"tools"`
|
|
}
|
|
|
|
// NucleiVersionCheck checks for the latest version of nuclei and nuclei templates
|
|
// and returns an error if it fails to check on success it returns nil and changes are
|
|
// made to the default config in config.DefaultConfig
|
|
func NucleiVersionCheck() error {
|
|
return doVersionCheck(false)
|
|
}
|
|
|
|
// this will be updated by features of 1.21 release (which directly provides sync.Once(func()))
|
|
type sdkUpdateCheck struct {
|
|
sync.Once
|
|
}
|
|
|
|
var sdkUpdateCheckInstance = &sdkUpdateCheck{}
|
|
|
|
// NucleiSDKVersionCheck checks for latest version of nuclei which running in sdk mode
|
|
// this only happens once per process regardless of how many times this function is called
|
|
func NucleiSDKVersionCheck() {
|
|
sdkUpdateCheckInstance.Do(func() {
|
|
_ = doVersionCheck(true)
|
|
})
|
|
}
|
|
|
|
// getpdtmParams returns encoded query parameters sent to update check endpoint
|
|
func getpdtmParams(isSDK bool) string {
|
|
params := &url.Values{}
|
|
params.Add("os", runtime.GOOS)
|
|
params.Add("arch", runtime.GOARCH)
|
|
params.Add("go_version", runtime.Version())
|
|
params.Add("v", config.Version)
|
|
if isSDK {
|
|
params.Add("sdk", "true")
|
|
}
|
|
params.Add("utm_source", getUtmSource())
|
|
return params.Encode()
|
|
}
|
|
|
|
// UpdateIgnoreFile updates default ignore file by downloading latest ignore file
|
|
func UpdateIgnoreFile() error {
|
|
resp, err := retryableHttpClient.Get(pdtmNucleiIgnoreFileEndpoint + "?" + getpdtmParams(false))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
bin, err := io.ReadAll(resp.Body)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if err := os.WriteFile(config.DefaultConfig.GetIgnoreFilePath(), bin, 0644); err != nil {
|
|
return err
|
|
}
|
|
return config.DefaultConfig.UpdateNucleiIgnoreHash()
|
|
}
|
|
|
|
func doVersionCheck(isSDK bool) error {
|
|
resp, err := retryableHttpClient.Get(pdtmNucleiVersionEndpoint + "?" + getpdtmParams(isSDK))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer resp.Body.Close()
|
|
bin, err := io.ReadAll(resp.Body)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
var pdtmResp PdtmAPIResponse
|
|
if err := json.Unmarshal(bin, &pdtmResp); err != nil {
|
|
return err
|
|
}
|
|
var nucleiversion, templateversion string
|
|
for _, tool := range pdtmResp.Tools {
|
|
switch tool.Name {
|
|
case "nuclei":
|
|
if tool.Version != "" {
|
|
nucleiversion = "v" + tool.Version
|
|
}
|
|
|
|
case "nuclei-templates":
|
|
if tool.Version != "" {
|
|
templateversion = "v" + tool.Version
|
|
}
|
|
}
|
|
}
|
|
return config.DefaultConfig.WriteVersionCheckData(pdtmResp.IgnoreHash, nucleiversion, templateversion)
|
|
}
|