mirror of https://github.com/daffainfo/nuclei.git
139 lines
3.5 KiB
Go
139 lines
3.5 KiB
Go
package engine
|
|
|
|
import (
|
|
"fmt"
|
|
"io/ioutil"
|
|
"net/http"
|
|
"os"
|
|
"strings"
|
|
|
|
"github.com/corpix/uarand"
|
|
"github.com/go-rod/rod"
|
|
"github.com/go-rod/rod/lib/launcher"
|
|
"github.com/pkg/errors"
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/types"
|
|
"github.com/projectdiscovery/stringsutil"
|
|
ps "github.com/shirou/gopsutil/v3/process"
|
|
)
|
|
|
|
// Browser is a browser structure for nuclei headless module
|
|
type Browser struct {
|
|
customAgent string
|
|
tempDir string
|
|
previouspids map[int32]struct{} // track already running pids
|
|
engine *rod.Browser
|
|
httpclient *http.Client
|
|
options *types.Options
|
|
}
|
|
|
|
// New creates a new nuclei headless browser module
|
|
func New(options *types.Options) (*Browser, error) {
|
|
dataStore, err := ioutil.TempDir("", "nuclei-*")
|
|
if err != nil {
|
|
return nil, errors.Wrap(err, "could not create temporary directory")
|
|
}
|
|
previouspids := findChromeProcesses()
|
|
chromeLauncher := launcher.New().
|
|
Leakless(false).
|
|
Set("disable-gpu", "true").
|
|
Set("ignore-certificate-errors", "true").
|
|
Set("ignore-certificate-errors", "1").
|
|
Set("disable-crash-reporter", "true").
|
|
Set("disable-notifications", "true").
|
|
Set("hide-scrollbars", "true").
|
|
Set("window-size", fmt.Sprintf("%d,%d", 1080, 1920)).
|
|
Set("no-sandbox", "true").
|
|
Set("mute-audio", "true").
|
|
Set("incognito", "true").
|
|
Delete("use-mock-keychain").
|
|
UserDataDir(dataStore)
|
|
|
|
if options.ShowBrowser {
|
|
chromeLauncher = chromeLauncher.Headless(false)
|
|
} else {
|
|
chromeLauncher = chromeLauncher.Headless(true)
|
|
}
|
|
if options.ProxyURL != "" {
|
|
chromeLauncher = chromeLauncher.Proxy(options.ProxyURL)
|
|
}
|
|
launcherURL, err := chromeLauncher.Launch()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
browser := rod.New().ControlURL(launcherURL)
|
|
if browserErr := browser.Connect(); browserErr != nil {
|
|
return nil, browserErr
|
|
}
|
|
customAgent := ""
|
|
for _, option := range options.CustomHeaders {
|
|
parts := strings.SplitN(option, ":", 2)
|
|
if len(parts) != 2 {
|
|
continue
|
|
}
|
|
if strings.EqualFold(parts[0], "User-Agent") {
|
|
customAgent = parts[1]
|
|
}
|
|
}
|
|
if customAgent == "" {
|
|
customAgent = uarand.GetRandom()
|
|
}
|
|
httpclient := newhttpClient(options)
|
|
engine := &Browser{
|
|
tempDir: dataStore,
|
|
customAgent: customAgent,
|
|
engine: browser,
|
|
httpclient: httpclient,
|
|
options: options,
|
|
}
|
|
engine.previouspids = previouspids
|
|
return engine, nil
|
|
}
|
|
|
|
// Close closes the browser engine
|
|
func (b *Browser) Close() {
|
|
b.engine.Close()
|
|
os.RemoveAll(b.tempDir)
|
|
b.killChromeProcesses()
|
|
}
|
|
|
|
// killChromeProcesses any and all new chrome processes started after
|
|
// headless process launch.
|
|
func (b *Browser) killChromeProcesses() {
|
|
processes, _ := ps.Processes()
|
|
|
|
for _, process := range processes {
|
|
// skip non chrome processes
|
|
if !isChromeProcess(process) {
|
|
continue
|
|
}
|
|
// skip chrome processes that were already running
|
|
if _, ok := b.previouspids[process.Pid]; ok {
|
|
continue
|
|
}
|
|
_ = process.Kill()
|
|
}
|
|
}
|
|
|
|
// findChromeProcesses finds chrome process running on host
|
|
func findChromeProcesses() map[int32]struct{} {
|
|
processes, _ := ps.Processes()
|
|
list := make(map[int32]struct{})
|
|
for _, process := range processes {
|
|
if isChromeProcess(process) {
|
|
list[process.Pid] = struct{}{}
|
|
if ppid, err := process.Ppid(); err == nil {
|
|
list[ppid] = struct{}{}
|
|
}
|
|
}
|
|
}
|
|
return list
|
|
}
|
|
|
|
// isChromeProcess checks if a process is chrome/chromium
|
|
func isChromeProcess(process *ps.Process) bool {
|
|
name, _ := process.Name()
|
|
executable, _ := process.Exe()
|
|
return stringsutil.ContainsAny(name, "chrome", "chromium") || stringsutil.ContainsAny(executable, "chrome", "chromium")
|
|
}
|