Ramana Reddy
33dbb51505
fix unresolved interactsh-url variable with fuzzing ( #5289 )
...
* fix unresolved interactsh variable with fuzzing
* fix variables override with fuzzing
2024-07-26 00:01:05 +05:30
Ramana Reddy
3e1cd27943
Fix stop-at-first-match in headless mode fuzzing ( #5330 )
2024-07-15 16:57:12 +05:30
Mzack9999
bc229a46ca
Merge pull request #5331 from projectdiscovery/use_containsall
...
use `stringsutil.ContainsAll`
2024-07-15 13:21:03 +02:00
Dogan Can Bakir
f080d614c3
introduce timeouts config in types.Options ( #5228 )
...
* introduce timeout variants
* update instances and add codeexectimeout
* fix test
* default to 10s
* minor
* make timeouts pluggable and rename
* remove residual code
---------
Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
2024-07-15 15:57:15 +05:30
mzack9999
3c2af0e47c
fixing many data races
2024-07-12 17:23:44 +02:00
mzack
ead444b88b
Merge branch 'dev' into use_containsall
2024-07-12 13:05:14 +02:00
Tarun Koyalwar
c9a9bd3bfc
include cname in http output if available ( #5389 )
2024-07-10 20:43:22 +05:30
Kristinn Vikar Jónsson
381ebba6a2
Clustering performance improvements ( #5319 )
...
* Clustering performance improvements
* IsClusterable filters out beforehand, update test to mirror that
* inverse IsClusterable
This makes much more sense
* HashMap based clustering
* furthur improvements to clustering
---------
Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
2024-06-27 13:14:43 +05:30
Doğan Can Bakır
c7006a9168
use stringsutil.ContainsAll
2024-06-25 12:26:18 +03:00
Mzack9999
52975373ff
Merge branch 'dev' into feat-4808-planner
2024-06-13 17:19:43 +02:00
mzack
61f391ee8a
.
2024-06-12 00:34:45 +02:00
Mzack9999
9f1414e3e8
.
2024-06-11 13:38:28 +02:00
Mzack9999
26c84e3747
Merge branch 'dev' into bugfix-1241-wtf
2024-06-11 12:34:41 +02:00
Mzack9999
e13c7cc967
testing fastdialer native
2024-06-11 12:21:43 +02:00
Ice3man
9f3f7fce06
Fuzzing additions & enhancements ( #5139 )
...
* feat: added fuzzing output enhancements
* changes as requested
* misc
* feat: added dfp flag to display fuzz points + misc additions
* feat: added support for fuzzing nested path segments
* feat: added parts to fuzzing requests
* feat: added tracking for parameter occurence frequency in fuzzing
* added cli flag for fuzz frequency
* fixed broken tests
* fixed path based sqli integration test
* feat: added configurable fuzzing aggression level for payloads
* fixed failing test
2024-06-11 04:43:46 +05:30
mzack
fd2311d034
fixing slow elab
2024-06-10 03:23:00 +02:00
Tarun Koyalwar
8720e4f863
fix panic: ref #5217 ( #5230 )
2024-06-02 17:11:56 +05:30
mzack
46e2a54bfe
Merge branch 'dev' into feat-4808-planner
2024-05-25 02:45:54 +02:00
Tarun Koyalwar
23bd0336fb
multiple bug fixes + performance improvements ( #5148 )
...
* prototype errkit
* complete errkit implementation
* add cause to all timeouts
* fix request timeout annotation @timeout
* increase responseHeaderTimeout to 8 for stability
* rawhttp error related improvements
* feat: add port status caching
* add port status caching to http
* migrate to new utils/errkit
* remote dialinterface + error cause
* debug dir support using .gitignore debug-*
* make nuclei easy to debug
* debug dir update .gitignore
* temp change (to revert)
* Revert "temp change (to revert)"
This reverts commit d3131f777713b9f80e2275142e80f36340a76d36.
* use available context instead of new one
* bump fastdialer
* fix hosterrorscache + misc improvements
* add 'address' field in error log
* fix js vague errors + pgwrap driver
* fix max host error + misc updates
* update tests as per changes
* fix request annotation context
* remove closed dialer reference
* fix sdk panic issue
* bump retryablehttp-go,utils,fastdialer
---------
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
2024-05-25 00:29:04 +05:30
Mzack9999
4fc16e36e1
Merge branch 'dev' into feat-4808-planner
2024-05-23 09:08:53 +02:00
Mzack9999
9cc335a34c
first interface ipv4 address ( #5186 )
2024-05-20 02:42:21 +05:30
Ice3man
4170e1cbb8
more goroutine leak fixes to nuclei ( #5188 )
...
* more goroutine leak fixes to nuclei
* run only dns templates for test
* updated httpx to dev
* dep update
---------
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2024-05-20 00:48:40 +05:30
Mzack9999
47ca8fe842
fix non gc-able dialer
...
closes #5165
2024-05-15 21:25:40 +02:00
Mzack9999
9adfc531c7
uniforming sizes with utils
2024-05-15 15:34:59 +02:00
Ramana Reddy
0f983d8204
Add support for multiple uncover queries ( #5132 )
...
* Add support for multiple uncover queries
* Fix issue with multiple engines
2024-05-10 22:16:01 +05:30
Ice3man
9784ca860a
feat: added fuzzing output enhancements ( #5126 )
...
* feat: added fuzzing output enhancements
* changes as requested
* misc
2024-05-03 18:46:28 +05:30
Tarun Koyalwar
3e54ca54b0
feat: fix utils and add goroutine leak unit tests ( #5112 )
...
* feat: fixed leak
* add go leak unit test in sdk
* added goleak unit tests
* bugfix: add random user agents to fuzzing requests
* misc
* misc
* fix lint + use utils pr + misc
* fix ratelimit memleak in sdk
* close protocolstate shared resources in nuclei sdk/lib
* add missing close references
* ignore read/write loop of intransit connections
* close unnecessary idle conns
* add ignore method
* using fixed utils
* dep update
---------
Co-authored-by: Ice3man <nizamulrana@gmail.com>
Co-authored-by: mzack <marco.rivoli.nvh@gmail.com>
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2024-05-01 00:28:11 +05:30
Dogan Can Bakir
c8cda14e41
remove default val in CLI and increase MaxBodyRead to 10mb ( #5100 )
...
Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
2024-04-25 16:28:37 +05:30
Ice3man
0b82e8b7aa
feat: added support for context cancellation to engine ( #5096 )
...
* feat: added support for context cancellation to engine
* misc
* feat: added contexts everywhere
* misc
* misc
* use granular http timeouts and increase http timeout to 30s using multiplier
* track response header timeout in mhe
* update responseHeaderTimeout to 5sec
* skip failing windows test
---------
Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
2024-04-25 15:37:56 +05:30
Tarun Koyalwar
3dfcec0a36
missing mhe check in http payloads ( #5099 )
...
* go mod tidy
* fix spm missing hosterrorcheck + improvements
---------
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2024-04-24 19:34:13 +05:30
Dogan Can Bakir
cfe6f5da58
fix tests ( #5092 )
2024-04-24 18:49:39 +05:30
Dogan Can Bakir
8676cb6daf
add response read timeout flag ( #4944 )
...
* add response read timeout flag
* fix test
* bump utils
* fix network tests
* fix incorrect unit of response-read-timeout unit
---------
Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
2024-04-24 13:05:05 +05:30
Dogan Can Bakir
e480d131f1
add query param ( #4894 )
...
* include params
* add query var
* override params for base url var
2024-04-23 19:17:26 +05:30
Dogan Can Bakir
465894df15
disable thread count warning upon validate ( #5078 )
2024-04-23 16:04:52 +05:30
Ramana Reddy
61e9be530f
Fix: skip-variables-check option in self-contained templates ( #5053 )
...
* fix: skip-variables-check option in self-contained templates
* Update build workflow envs
2024-04-23 16:04:32 +05:30
Levente Kováts
bec7cb273a
add context vars in code and multi ( #5051 )
...
make the extracted variables available in subsequence templates when executing in a workflow
fix projectdiscovery/nuclei#4797
2024-04-16 16:57:07 +05:30
Mzack9999
d576db3893
Merge pull request #5035 from projectdiscovery/bugfix-4947-internal-resolvers
...
Fixing internal resolver override
2024-04-15 17:02:09 +01:00
mzack
38e185c410
simpler logic
2024-04-12 00:32:06 +02:00
mzack
7b71886309
Fixing internal resolver override
2024-04-11 19:10:31 +02:00
mzack
2ed33e4723
adding dns srv type
2024-04-11 18:57:50 +02:00
mzack
7e363984b2
Merge branch 'dev' into feat-3072-init-adaptive-speed
2024-04-09 15:19:51 +02:00
Tarun Koyalwar
375d1ddcde
fix missing port in javascript result ( #5023 )
...
* add ip support in js output
* js: if dialed ip is missing resolve and get first ip
* ssl: fix incorrect port in output
2024-04-09 02:09:44 +05:30
Tarun Koyalwar
f159e8fa66
fix dynamic extractor + payloads edgecase by sending req sequentially ( #5016 )
...
* explicitly handle edgecase #4993 instead of hot fix
* fix typo
2024-04-08 22:21:26 +05:30
Ice3man
a844e6f7ab
feat: fixed bug due to parallel auto setting in http ( #4992 )
...
* feat: fixed bug due to parallel auto setting in http
* increased threshold
---------
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2024-04-08 16:04:57 +05:30
Ramana Reddy
8c27ca2591
fix(schema): generation of missing JSON schema definitions ( #4995 )
...
* fix(schema): generation of missing JSON schema definitions
* make headers and data to accept multi-type inputs
* misc update
2024-04-08 03:29:42 +05:30
mzack
af7450737a
making payload concurrency dynamic via direct int change
2024-04-03 23:06:08 +02:00
Mzack9999
a140a4194e
boh - placing resize in wrapped method
2024-04-03 19:40:09 +02:00
Mzack9999
a8d1393e96
init- using resizable components
2024-04-03 17:50:57 +02:00
Dogan Can Bakir
e99420603f
fix raw req single slash issue ( #4955 )
...
* fix raw req single slash issue
* fix raw unsafe req single slash issue
* commit to last commit
* minor
2024-04-03 19:39:35 +05:30
Tarun Koyalwar
3907e20bde
fix multiple panics & missing matcher-status in flow templates ( #4978 )
...
* validate and fix empty internal-event
* fix on error with interactsh req
* disable clustering in flow & multiproto
* fix empty/missing matcher-status result
* fix cluster unit test
* fix no results found unit test
2024-04-03 17:19:06 +05:30
