2021-12-04 18:40:11 +01:00
|
|
|
package main
|
|
|
|
|
|
|
|
|
|
import (
|
|
|
|
|
"net/http"
|
|
|
|
|
"net/http/httptest"
|
|
|
|
|
|
|
|
|
|
"github.com/julienschmidt/httprouter"
|
|
|
|
|
|
|
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/testutils"
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
var headlessTestcases = map[string]testutils.TestCase{
|
|
|
|
|
"headless/headless-basic.yaml": &headlessBasic{},
|
|
|
|
|
"headless/headless-header-action.yaml": &headlessHeaderActions{},
|
|
|
|
|
"headless/headless-extract-values.yaml": &headlessExtractValues{},
|
2022-02-04 11:43:42 +01:00
|
|
|
"headless/headless-payloads.yaml": &headlessPayloads{},
|
2021-12-04 18:40:11 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
type headlessBasic struct{}
|
|
|
|
|
|
|
|
|
|
// Execute executes a test case and returns an error if occurred
|
|
|
|
|
func (h *headlessBasic) Execute(filePath string) error {
|
|
|
|
|
router := httprouter.New()
|
|
|
|
|
router.GET("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) {
|
|
|
|
|
_, _ = w.Write([]byte("<html><body></body></html>"))
|
|
|
|
|
})
|
|
|
|
|
ts := httptest.NewServer(router)
|
|
|
|
|
defer ts.Close()
|
|
|
|
|
|
|
|
|
|
results, err := testutils.RunNucleiTemplateAndGetResults(filePath, ts.URL, debug, "-headless")
|
|
|
|
|
if err != nil {
|
|
|
|
|
return err
|
|
|
|
|
}
|
2021-12-15 16:03:57 +02:00
|
|
|
|
|
|
|
|
return expectResultsCount(results, 1)
|
2021-12-04 18:40:11 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
type headlessHeaderActions struct{}
|
|
|
|
|
|
|
|
|
|
// Execute executes a test case and returns an error if occurred
|
|
|
|
|
func (h *headlessHeaderActions) Execute(filePath string) error {
|
|
|
|
|
router := httprouter.New()
|
|
|
|
|
router.GET("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) {
|
|
|
|
|
testValue := r.Header.Get("test")
|
|
|
|
|
if r.Header.Get("test") != "" {
|
|
|
|
|
_, _ = w.Write([]byte("<html><body>" + testValue + "</body></html>"))
|
|
|
|
|
}
|
|
|
|
|
})
|
|
|
|
|
ts := httptest.NewServer(router)
|
|
|
|
|
defer ts.Close()
|
|
|
|
|
|
|
|
|
|
results, err := testutils.RunNucleiTemplateAndGetResults(filePath, ts.URL, debug, "-headless")
|
|
|
|
|
if err != nil {
|
|
|
|
|
return err
|
|
|
|
|
}
|
2021-12-15 16:03:57 +02:00
|
|
|
|
|
|
|
|
return expectResultsCount(results, 1)
|
2021-12-04 18:40:11 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
type headlessExtractValues struct{}
|
|
|
|
|
|
|
|
|
|
// Execute executes a test case and returns an error if occurred
|
|
|
|
|
func (h *headlessExtractValues) Execute(filePath string) error {
|
|
|
|
|
router := httprouter.New()
|
|
|
|
|
router.GET("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) {
|
|
|
|
|
_, _ = w.Write([]byte("<html><body><a href='/test.html'>test</a></body></html>"))
|
|
|
|
|
})
|
|
|
|
|
ts := httptest.NewServer(router)
|
|
|
|
|
defer ts.Close()
|
|
|
|
|
results, err := testutils.RunNucleiTemplateAndGetResults(filePath, ts.URL, debug, "-headless")
|
|
|
|
|
if err != nil {
|
|
|
|
|
return err
|
|
|
|
|
}
|
2021-12-15 16:03:57 +02:00
|
|
|
|
|
|
|
|
return expectResultsCount(results, 3)
|
2021-12-04 18:40:11 +01:00
|
|
|
}
|
2022-02-04 11:43:42 +01:00
|
|
|
|
|
|
|
|
type headlessPayloads struct{}
|
|
|
|
|
|
|
|
|
|
// Execute executes a test case and returns an error if occurred
|
|
|
|
|
func (h *headlessPayloads) Execute(filePath string) error {
|
|
|
|
|
router := httprouter.New()
|
|
|
|
|
router.GET("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) {
|
|
|
|
|
_, _ = w.Write([]byte("<html><body>test</body></html>"))
|
|
|
|
|
})
|
|
|
|
|
ts := httptest.NewServer(router)
|
|
|
|
|
defer ts.Close()
|
|
|
|
|
results, err := testutils.RunNucleiTemplateAndGetResults(filePath, ts.URL, debug, "-headless")
|
|
|
|
|
if err != nil {
|
|
|
|
|
return err
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// 2 actions per 4 results => 8
|
|
|
|
|
return expectResultsCount(results, 8)
|
|
|
|
|
}
|
