2021-02-21 16:31:34 +05:30
|
|
|
package headless
|
|
|
|
|
|
|
|
|
|
import (
|
|
|
|
|
"net/url"
|
|
|
|
|
"strings"
|
2021-03-01 14:20:56 +05:30
|
|
|
"time"
|
2021-02-21 16:31:34 +05:30
|
|
|
|
|
|
|
|
"github.com/pkg/errors"
|
2021-09-29 19:43:46 +03:00
|
|
|
|
2021-02-21 16:31:34 +05:30
|
|
|
"github.com/projectdiscovery/gologger"
|
|
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/output"
|
|
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols"
|
2021-10-01 16:52:38 +03:00
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols/common/helpers/eventcreator"
|
2021-10-01 14:24:45 +03:00
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols/common/helpers/responsehighlighter"
|
2021-11-03 19:53:45 +05:30
|
|
|
templateTypes "github.com/projectdiscovery/nuclei/v2/pkg/templates/types"
|
2021-02-21 16:31:34 +05:30
|
|
|
)
|
|
|
|
|
|
|
|
|
|
var _ protocols.Request = &Request{}
|
|
|
|
|
|
2021-11-03 19:53:45 +05:30
|
|
|
// Type returns the type of the protocol request
|
|
|
|
|
func (request *Request) Type() templateTypes.ProtocolType {
|
|
|
|
|
return templateTypes.HeadlessProtocol
|
|
|
|
|
}
|
|
|
|
|
|
2021-02-21 16:31:34 +05:30
|
|
|
// ExecuteWithResults executes the protocol requests and returns results instead of writing them.
|
2021-10-30 13:17:47 +03:00
|
|
|
func (request *Request) ExecuteWithResults(inputURL string, metadata, previous output.InternalEvent /*TODO review unused parameter*/, callback protocols.OutputEventCallback) error {
|
2021-10-01 14:30:04 +03:00
|
|
|
instance, err := request.options.Browser.NewInstance()
|
2021-02-21 16:31:34 +05:30
|
|
|
if err != nil {
|
2021-11-05 03:01:41 +05:30
|
|
|
request.options.Output.Request(request.options.TemplatePath, inputURL, request.Type().String(), err)
|
2021-10-01 14:30:04 +03:00
|
|
|
request.options.Progress.IncrementFailedRequestsBy(1)
|
2021-02-21 16:31:34 +05:30
|
|
|
return errors.Wrap(err, "could get html element")
|
|
|
|
|
}
|
|
|
|
|
defer instance.Close()
|
|
|
|
|
|
2021-10-30 13:17:47 +03:00
|
|
|
parsedURL, err := url.Parse(inputURL)
|
2021-02-21 16:31:34 +05:30
|
|
|
if err != nil {
|
2021-11-05 03:01:41 +05:30
|
|
|
request.options.Output.Request(request.options.TemplatePath, inputURL, request.Type().String(), err)
|
2021-10-01 14:30:04 +03:00
|
|
|
request.options.Progress.IncrementFailedRequestsBy(1)
|
2021-02-21 16:31:34 +05:30
|
|
|
return errors.Wrap(err, "could get html element")
|
|
|
|
|
}
|
2021-10-30 13:17:47 +03:00
|
|
|
out, page, err := instance.Run(parsedURL, request.Steps, time.Duration(request.options.Options.PageTimeout)*time.Second)
|
2021-02-21 16:31:34 +05:30
|
|
|
if err != nil {
|
2021-11-05 03:01:41 +05:30
|
|
|
request.options.Output.Request(request.options.TemplatePath, inputURL, request.Type().String(), err)
|
2021-10-01 14:30:04 +03:00
|
|
|
request.options.Progress.IncrementFailedRequestsBy(1)
|
2021-02-21 16:31:34 +05:30
|
|
|
return errors.Wrap(err, "could get html element")
|
|
|
|
|
}
|
|
|
|
|
defer page.Close()
|
|
|
|
|
|
2021-11-05 03:01:41 +05:30
|
|
|
request.options.Output.Request(request.options.TemplatePath, inputURL, request.Type().String(), nil)
|
2021-10-01 14:30:04 +03:00
|
|
|
request.options.Progress.IncrementRequests()
|
2021-10-30 13:17:47 +03:00
|
|
|
gologger.Verbose().Msgf("Sent Headless request to %s", inputURL)
|
2021-02-21 16:31:34 +05:30
|
|
|
|
|
|
|
|
reqBuilder := &strings.Builder{}
|
2021-10-01 14:30:04 +03:00
|
|
|
if request.options.Options.Debug || request.options.Options.DebugRequests {
|
2021-10-30 13:17:47 +03:00
|
|
|
gologger.Info().Msgf("[%s] Dumped Headless request for %s", request.options.TemplateID, inputURL)
|
2021-02-21 16:31:34 +05:30
|
|
|
|
2021-10-01 14:30:04 +03:00
|
|
|
for _, act := range request.Steps {
|
2021-02-21 16:31:34 +05:30
|
|
|
reqBuilder.WriteString(act.String())
|
|
|
|
|
reqBuilder.WriteString("\n")
|
|
|
|
|
}
|
2021-10-30 13:17:47 +03:00
|
|
|
gologger.Print().Msgf(reqBuilder.String())
|
2021-02-21 16:31:34 +05:30
|
|
|
}
|
|
|
|
|
|
2021-10-01 14:24:45 +03:00
|
|
|
var responseBody string
|
2021-02-21 16:31:34 +05:30
|
|
|
html, err := page.Page().Element("html")
|
|
|
|
|
if err == nil {
|
2021-10-01 14:24:45 +03:00
|
|
|
responseBody, _ = html.HTML()
|
2021-02-21 16:31:34 +05:30
|
|
|
}
|
2021-12-29 09:48:46 +01:00
|
|
|
outputEvent := request.responseToDSLMap(responseBody, reqBuilder.String(), inputURL, inputURL, page.DumpHistory())
|
2021-02-21 16:31:34 +05:30
|
|
|
for k, v := range out {
|
|
|
|
|
outputEvent[k] = v
|
|
|
|
|
}
|
|
|
|
|
|
2021-10-12 20:06:55 +03:00
|
|
|
event := eventcreator.CreateEvent(request, outputEvent, request.options.Options.Debug || request.options.Options.DebugResponse)
|
2021-10-01 14:24:45 +03:00
|
|
|
|
2021-11-01 20:45:54 +02:00
|
|
|
dumpResponse(event, request.options, responseBody, inputURL)
|
2021-09-29 19:43:46 +03:00
|
|
|
|
|
|
|
|
callback(event)
|
|
|
|
|
return nil
|
|
|
|
|
}
|
2021-10-30 13:17:47 +03:00
|
|
|
|
2021-11-01 20:45:54 +02:00
|
|
|
func dumpResponse(event *output.InternalWrappedEvent, requestOptions *protocols.ExecuterOptions, responseBody string, input string) {
|
|
|
|
|
cliOptions := requestOptions.Options
|
|
|
|
|
if cliOptions.Debug || cliOptions.DebugResponse {
|
|
|
|
|
highlightedResponse := responsehighlighter.Highlight(event.OperatorsResult, responseBody, cliOptions.NoColor, false)
|
|
|
|
|
gologger.Debug().Msgf("[%s] Dumped Headless response for %s\n\n%s", requestOptions.TemplateID, input, highlightedResponse)
|
2021-10-30 13:17:47 +03:00
|
|
|
}
|
|
|
|
|
}
|