mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-18 01:05:27 +00:00
* feat: added initial live DAST server implementation * feat: more logging + misc additions * feat: auth file support enhancements for more complex scenarios + misc * feat: added io.Reader support to input providers for http * feat: added stats db to fuzzing + use sdk for dast server + misc * feat: more additions and enhancements * misc changes to live server * misc * use utils pprof server * feat: added simpler stats tracking system * feat: fixed analyzer timeout issue + missing case fix * misc changes fix * feat: changed the logics a bit + misc changes and additions * feat: re-added slope checks + misc * feat: added baseline measurements for time based checks * chore(server): fix typos Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> * fix(templates): potential DOM XSS Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> * fix(authx): potential NIL deref Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> * feat: misc review changes * removed debug logging * feat: remove existing cookies only * feat: lint fixes * misc * misc text update * request endpoint update * feat: added tracking for status code, waf-detection & grouped errors (#6028) * feat: added tracking for status code, waf-detection & grouped errors * lint error fixes * feat: review changes + moving to package + misc --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> * fix var dump (#5921) * fix var dump * fix dump test * Added filename length restriction for debug mode (-srd flag) (#5931) Co-authored-by: Andrey Matveenko <an.matveenko@vkteam.ru> * more updates * Update pkg/output/stats/waf/waf.go Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> Co-authored-by: Dwi Siswanto <25837540+dwisiswant0@users.noreply.github.com> Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> Co-authored-by: Dogan Can Bakir <65292895+dogancanbakir@users.noreply.github.com> Co-authored-by: 9flowers <51699499+Lercas@users.noreply.github.com> Co-authored-by: Andrey Matveenko <an.matveenko@vkteam.ru> Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
69 lines
1.8 KiB
Go
69 lines
1.8 KiB
Go
package swagger
|
|
|
|
import (
|
|
"io"
|
|
"path"
|
|
|
|
"github.com/getkin/kin-openapi/openapi2"
|
|
"github.com/getkin/kin-openapi/openapi2conv"
|
|
"github.com/getkin/kin-openapi/openapi3"
|
|
"github.com/invopop/yaml"
|
|
"github.com/pkg/errors"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/input/formats"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/input/formats/openapi"
|
|
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/utils/json"
|
|
)
|
|
|
|
// SwaggerFormat is a Swagger Schema File parser
|
|
type SwaggerFormat struct {
|
|
opts formats.InputFormatOptions
|
|
}
|
|
|
|
// New creates a new Swagger format parser
|
|
func New() *SwaggerFormat {
|
|
return &SwaggerFormat{}
|
|
}
|
|
|
|
var _ formats.Format = &SwaggerFormat{}
|
|
|
|
// Name returns the name of the format
|
|
func (j *SwaggerFormat) Name() string {
|
|
return "swagger"
|
|
}
|
|
|
|
func (j *SwaggerFormat) SetOptions(options formats.InputFormatOptions) {
|
|
j.opts = options
|
|
}
|
|
|
|
// Parse parses the input and calls the provided callback
|
|
// function for each RawRequest it discovers.
|
|
func (j *SwaggerFormat) Parse(input io.Reader, resultsCb formats.ParseReqRespCallback, filePath string) error {
|
|
schemav2 := &openapi2.T{}
|
|
ext := path.Ext(filePath)
|
|
var err error
|
|
if ext == ".yaml" || ext == ".yml" {
|
|
var data []byte
|
|
data, err = io.ReadAll(input)
|
|
if err != nil {
|
|
return errors.Wrap(err, "could not read data file")
|
|
}
|
|
err = yaml.Unmarshal(data, schemav2)
|
|
} else {
|
|
err = json.NewDecoder(input).Decode(schemav2)
|
|
}
|
|
if err != nil {
|
|
return errors.Wrap(err, "could not decode openapi 2.0 schema")
|
|
}
|
|
schema, err := openapi2conv.ToV3(schemav2)
|
|
if err != nil {
|
|
return errors.Wrap(err, "could not convert openapi 2.0 schema to 3.0")
|
|
}
|
|
loader := openapi3.NewLoader()
|
|
err = loader.ResolveRefsIn(schema, nil)
|
|
if err != nil {
|
|
return errors.Wrap(err, "could not resolve openapi schema references")
|
|
}
|
|
return openapi.GenerateRequestsFromSchema(schema, j.opts, resultsCb)
|
|
}
|