External/nuclei
1
0
Fork 0
mirror of https://github.com/projectdiscovery/nuclei.git synced 2025-12-18 02:35:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix panic while parsing tlsx response (#3641)

Browse Source
This commit is contained in:
Tarun Koyalwar 2023-05-03 20:47:08 +05:30 committed by GitHub
parent 027880af34
commit 9b3a55d6c0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
v2/pkg/protocols/ssl/ssl.go
View File

@ -255,17 +255,36 @@ func (request *Request) ExecuteWithResults(input *contextargs.Context, dynamicVa
data["template-id"] = requestOptions.TemplateID data["template-id"] = requestOptions.TemplateID
data["template-info"] = requestOptions.TemplateInfo data["template-info"] = requestOptions.TemplateInfo
// if response is not struct compatible, error out
if !structs.IsStruct(response) {
return errorutil.NewWithTag("ssl", "response cannot be parsed into a struct: %v", response)
}
// Convert response to key value pairs and first cert chain item as well // Convert response to key value pairs and first cert chain item as well
responseParsed := structs.New(response) responseParsed := structs.New(response)
for _, f := range responseParsed.Fields() { for _, f := range responseParsed.Fields() {
if !f.IsExported() {
// if field is not exported f.IsZero() , f.Value() will panic
continue
}
tag := utils.CleanStructFieldJSONTag(f.Tag("json")) tag := utils.CleanStructFieldJSONTag(f.Tag("json"))
if tag == "" || f.IsZero() { if tag == "" || f.IsZero() {
continue continue
} }
data[tag] = f.Value() data[tag] = f.Value()
} }
// if certificate response is not struct compatible, error out
if !structs.IsStruct(response.CertificateResponse) {
return errorutil.NewWithTag("ssl", "certificate response cannot be parsed into a struct: %v", response.CertificateResponse)
}
responseParsed = structs.New(response.CertificateResponse) responseParsed = structs.New(response.CertificateResponse)
for _, f := range responseParsed.Fields() { for _, f := range responseParsed.Fields() {
if !f.IsExported() {
// if field is not exported f.IsZero() , f.Value() will panic
continue
}
tag := utils.CleanStructFieldJSONTag(f.Tag("json")) tag := utils.CleanStructFieldJSONTag(f.Tag("json"))
if tag == "" || f.IsZero() { if tag == "" || f.IsZero() {
continue continue