2021-02-21 16:31:34 +05:30
|
|
|
package headless
|
|
|
|
|
|
|
|
|
|
import (
|
|
|
|
|
"time"
|
|
|
|
|
|
2021-07-19 21:04:08 +03:00
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/model"
|
2021-10-01 16:52:38 +03:00
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/operators"
|
2021-02-21 16:31:34 +05:30
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/operators/extractors"
|
|
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/operators/matchers"
|
|
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/output"
|
2021-10-06 21:53:03 +03:00
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols"
|
2021-02-21 16:31:34 +05:30
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/types"
|
|
|
|
|
)
|
|
|
|
|
|
|
|
|
|
// Match matches a generic data response again a given matcher
|
2021-10-01 14:30:04 +03:00
|
|
|
func (request *Request) Match(data map[string]interface{}, matcher *matchers.Matcher) (bool, []string) {
|
2021-02-21 16:31:34 +05:30
|
|
|
partString := matcher.Part
|
|
|
|
|
switch partString {
|
|
|
|
|
case "body", "resp", "":
|
|
|
|
|
partString = "data"
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
item, ok := data[partString]
|
|
|
|
|
if !ok {
|
2021-09-29 19:43:46 +03:00
|
|
|
return false, []string{}
|
2021-02-21 16:31:34 +05:30
|
|
|
}
|
|
|
|
|
itemStr := types.ToString(item)
|
|
|
|
|
|
|
|
|
|
switch matcher.GetType() {
|
|
|
|
|
case matchers.SizeMatcher:
|
2021-09-29 19:43:46 +03:00
|
|
|
return matcher.Result(matcher.MatchSize(len(itemStr))), []string{}
|
2021-02-21 16:31:34 +05:30
|
|
|
case matchers.WordsMatcher:
|
2021-09-29 19:43:46 +03:00
|
|
|
return matcher.ResultWithMatchedSnippet(matcher.MatchWords(itemStr, nil))
|
2021-02-21 16:31:34 +05:30
|
|
|
case matchers.RegexMatcher:
|
2021-09-29 19:43:46 +03:00
|
|
|
return matcher.ResultWithMatchedSnippet(matcher.MatchRegex(itemStr))
|
2021-02-21 16:31:34 +05:30
|
|
|
case matchers.BinaryMatcher:
|
2021-09-29 19:43:46 +03:00
|
|
|
return matcher.ResultWithMatchedSnippet(matcher.MatchBinary(itemStr))
|
2021-02-21 16:31:34 +05:30
|
|
|
case matchers.DSLMatcher:
|
2021-09-29 19:43:46 +03:00
|
|
|
return matcher.Result(matcher.MatchDSL(data)), []string{}
|
2021-02-21 16:31:34 +05:30
|
|
|
}
|
2021-09-29 19:43:46 +03:00
|
|
|
return false, []string{}
|
2021-02-21 16:31:34 +05:30
|
|
|
}
|
|
|
|
|
|
2021-09-07 17:31:46 +03:00
|
|
|
// Extract performs extracting operation for an extractor on model and returns true or false.
|
2021-10-01 14:30:04 +03:00
|
|
|
func (request *Request) Extract(data map[string]interface{}, extractor *extractors.Extractor) map[string]struct{} {
|
2021-02-21 16:31:34 +05:30
|
|
|
partString := extractor.Part
|
|
|
|
|
switch partString {
|
|
|
|
|
case "body", "resp", "":
|
|
|
|
|
partString = "data"
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
item, ok := data[partString]
|
|
|
|
|
if !ok {
|
|
|
|
|
return nil
|
|
|
|
|
}
|
|
|
|
|
itemStr := types.ToString(item)
|
|
|
|
|
|
|
|
|
|
switch extractor.GetType() {
|
|
|
|
|
case extractors.RegexExtractor:
|
|
|
|
|
return extractor.ExtractRegex(itemStr)
|
|
|
|
|
case extractors.KValExtractor:
|
|
|
|
|
return extractor.ExtractKval(data)
|
|
|
|
|
}
|
|
|
|
|
return nil
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// responseToDSLMap converts a DNS response to a map for use in DSL matching
|
2021-10-01 14:30:04 +03:00
|
|
|
func (request *Request) responseToDSLMap(resp, req, host, matched string) output.InternalEvent {
|
2021-02-21 16:31:34 +05:30
|
|
|
data := make(output.InternalEvent, 5)
|
|
|
|
|
|
|
|
|
|
// Some data regarding the request metadata
|
|
|
|
|
data["host"] = host
|
|
|
|
|
data["matched"] = matched
|
|
|
|
|
data["req"] = req
|
|
|
|
|
data["data"] = resp
|
2021-10-01 14:30:04 +03:00
|
|
|
data["template-id"] = request.options.TemplateID
|
|
|
|
|
data["template-info"] = request.options.TemplateInfo
|
|
|
|
|
data["template-path"] = request.options.TemplatePath
|
2021-02-21 16:31:34 +05:30
|
|
|
return data
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
// MakeResultEvent creates a result event from internal wrapped event
|
2021-10-01 14:30:04 +03:00
|
|
|
func (request *Request) MakeResultEvent(wrapped *output.InternalWrappedEvent) []*output.ResultEvent {
|
2021-10-06 21:53:03 +03:00
|
|
|
return protocols.MakeDefaultResultEvent(request, wrapped)
|
2021-02-21 16:31:34 +05:30
|
|
|
}
|
|
|
|
|
|
2021-10-01 16:52:38 +03:00
|
|
|
func (request *Request) GetCompiledOperators() []*operators.Operators {
|
|
|
|
|
return []*operators.Operators{request.CompiledOperators}
|
|
|
|
|
}
|
|
|
|
|
|
2021-10-06 21:53:03 +03:00
|
|
|
func (request *Request) MakeResultEventItem(wrapped *output.InternalWrappedEvent) *output.ResultEvent {
|
2021-02-21 16:31:34 +05:30
|
|
|
data := &output.ResultEvent{
|
|
|
|
|
TemplateID: types.ToString(wrapped.InternalEvent["template-id"]),
|
2021-06-05 18:01:08 +05:30
|
|
|
TemplatePath: types.ToString(wrapped.InternalEvent["template-path"]),
|
2021-07-12 17:20:01 +03:00
|
|
|
Info: wrapped.InternalEvent["template-info"].(model.Info),
|
2021-02-21 16:31:34 +05:30
|
|
|
Type: "headless",
|
|
|
|
|
Host: types.ToString(wrapped.InternalEvent["host"]),
|
|
|
|
|
Matched: types.ToString(wrapped.InternalEvent["matched"]),
|
|
|
|
|
ExtractedResults: wrapped.OperatorsResult.OutputExtracts,
|
|
|
|
|
Timestamp: time.Now(),
|
|
|
|
|
IP: types.ToString(wrapped.InternalEvent["ip"]),
|
2021-09-09 18:53:55 +05:30
|
|
|
Request: types.ToString(wrapped.InternalEvent["request"]),
|
|
|
|
|
Response: types.ToString(wrapped.InternalEvent["data"]),
|
2021-02-21 16:31:34 +05:30
|
|
|
}
|
|
|
|
|
return data
|
|
|
|
|
}
|