External/nuclei
1
0
Fork 0
mirror of https://github.com/projectdiscovery/nuclei.git synced 2025-12-24 06:05:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixing full URL output with unsafe requests (#1445)

Browse Source 
* Fixing full URL output with unsafe requests

* using request url as matched url if empty
This commit is contained in:
Mzack9999 2022-01-10 14:24:33 +01:00 committed by GitHub
parent b77723941d
commit 3748eae5fb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 20 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
v2/pkg/protocols/http/raw/raw.go
View File

@ -116,6 +116,8 @@ func Parse(request, baseURL string, unsafe bool) (*Request, error) {
if strings.HasSuffix(parsedURL.Path, "/") && strings.HasPrefix(rawRequest.Path, "/") {
parsedURL.Path = strings.TrimSuffix(parsedURL.Path, "/")
}
if !unsafe {
if parsedURL.Path != rawRequest.Path {
rawRequest.Path = fmt.Sprintf("%s%s", parsedURL.Path, rawRequest.Path)
}
@ -126,9 +128,10 @@ func Parse(request, baseURL string, unsafe bool) (*Request, error) {
// If raw request doesn't have a Host header and isn't marked unsafe,
// this will generate the Host header from the parsed baseURL
if !unsafe && rawRequest.Headers["Host"] == "" {
if rawRequest.Headers["Host"] == "" {
rawRequest.Headers["Host"] = hostURL
}
}
// Set the request body
b, err := ioutil.ReadAll(reader)

5
v2/pkg/protocols/http/request.go
View File

@ -418,6 +418,11 @@ func (request *Request) executeRequest(reqURL string, generatedRequest *generate
}
}
// use request url as matched url if empty
if formedURL == "" {
formedURL = reqURL
}
if err != nil {
// rawhttp doesn't support draining response bodies.
if resp != nil && resp.Body != nil && generatedRequest.rawRequest == nil {