package main import ( "io" "net/http" "net/http/httptest" "github.com/julienschmidt/httprouter" "github.com/projectdiscovery/nuclei/v2/pkg/testutils" ) var headlessTestcases = map[string]testutils.TestCase{ "protocols/headless/headless-basic.yaml": &headlessBasic{}, "protocols/headless/headless-header-action.yaml": &headlessHeaderActions{}, "protocols/headless/headless-extract-values.yaml": &headlessExtractValues{}, "protocols/headless/headless-payloads.yaml": &headlessPayloads{}, "protocols/headless/variables.yaml": &headlessVariables{}, "protocols/headless/file-upload.yaml": &headlessFileUpload{}, "protocols/headless/headless-header-status-test.yaml": &headlessHeaderStatus{}, } type headlessBasic struct{} // Execute executes a test case and returns an error if occurred func (h *headlessBasic) Execute(filePath string) error { router := httprouter.New() router.GET("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) { _, _ = w.Write([]byte("")) }) ts := httptest.NewServer(router) defer ts.Close() results, err := testutils.RunNucleiTemplateAndGetResults(filePath, ts.URL, debug, "-headless") if err != nil { return err } return expectResultsCount(results, 1) } type headlessHeaderActions struct{} // Execute executes a test case and returns an error if occurred func (h *headlessHeaderActions) Execute(filePath string) error { router := httprouter.New() router.GET("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) { testValue := r.Header.Get("test") if r.Header.Get("test") != "" { _, _ = w.Write([]byte("" + testValue + "")) } }) ts := httptest.NewServer(router) defer ts.Close() results, err := testutils.RunNucleiTemplateAndGetResults(filePath, ts.URL, debug, "-headless") if err != nil { return err } return expectResultsCount(results, 1) } type headlessExtractValues struct{} // Execute executes a test case and returns an error if occurred func (h *headlessExtractValues) Execute(filePath string) error { router := httprouter.New() router.GET("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) { _, _ = w.Write([]byte("test")) }) ts := httptest.NewServer(router) defer ts.Close() results, err := testutils.RunNucleiTemplateAndGetResults(filePath, ts.URL, debug, "-headless") if err != nil { return err } return expectResultsCount(results, 3) } type headlessPayloads struct{} // Execute executes a test case and returns an error if occurred func (h *headlessPayloads) Execute(filePath string) error { router := httprouter.New() router.GET("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) { _, _ = w.Write([]byte("test")) }) ts := httptest.NewServer(router) defer ts.Close() results, err := testutils.RunNucleiTemplateAndGetResults(filePath, ts.URL, debug, "-headless") if err != nil { return err } return expectResultsCount(results, 4) } type headlessVariables struct{} // Execute executes a test case and returns an error if occurred func (h *headlessVariables) Execute(filePath string) error { router := httprouter.New() router.GET("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) { _, _ = w.Write([]byte("aGVsbG8=")) }) ts := httptest.NewServer(router) defer ts.Close() results, err := testutils.RunNucleiTemplateAndGetResults(filePath, ts.URL, debug, "-headless") if err != nil { return err } return expectResultsCount(results, 1) } type headlessFileUpload struct{} // Execute executes a test case and returns an error if occurred func (h *headlessFileUpload) Execute(filePath string) error { router := httprouter.New() router.GET("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) { _, _ = w.Write([]byte(`
`)) }) router.POST("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) { file, _, err := r.FormFile("file") if err != nil { http.Error(w, err.Error(), http.StatusBadRequest) return } defer file.Close() content, err := io.ReadAll(file) if err != nil { http.Error(w, err.Error(), http.StatusBadRequest) return } _, _ = w.Write(content) }) ts := httptest.NewServer(router) defer ts.Close() results, err := testutils.RunNucleiTemplateAndGetResults(filePath, ts.URL, debug, "-headless") if err != nil { return err } return expectResultsCount(results, 1) } type headlessHeaderStatus struct{} // Execute executes a test case and returns an error if occurred func (h *headlessHeaderStatus) Execute(filePath string) error { results, err := testutils.RunNucleiTemplateAndGetResults(filePath, "https://scanme.sh", debug, "-headless") if err != nil { return err } return expectResultsCount(results, 1) }