mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-18 14:45:27 +00:00
bf08913cd0
* adds template manager * refactor: checkpoint * centrailized config & template download logic * refactor removed unused code * use global template directory * update related bug fixes * bug fix create cfg dir if missing * fix lint error * bug fix skip writing template dir in callback * misc update * remove unused code * use strings.equalfold for comparison --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
75 lines
2.3 KiB
Go
75 lines
2.3 KiB
Go
package http
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/catalog/disk"
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols/common/generators"
|
|
)
|
|
|
|
func TestRequestGeneratorPaths(t *testing.T) {
|
|
req := &Request{
|
|
Path: []string{"{{BaseURL}}/test", "{{BaseURL}}/test.php"},
|
|
}
|
|
generator := req.newGenerator(false)
|
|
var payloads []string
|
|
for {
|
|
raw, _, ok := generator.nextValue()
|
|
if !ok {
|
|
break
|
|
}
|
|
payloads = append(payloads, raw)
|
|
}
|
|
require.Equal(t, req.Path, payloads, "Could not get correct paths")
|
|
}
|
|
|
|
func TestRequestGeneratorClusterBombSingle(t *testing.T) {
|
|
var err error
|
|
|
|
req := &Request{
|
|
Payloads: map[string]interface{}{"username": []string{"admin", "tomcat", "manager"}, "password": []string{"password", "test", "secret"}},
|
|
AttackType: generators.AttackTypeHolder{Value: generators.ClusterBombAttack},
|
|
Raw: []string{`GET /{{username}}:{{password}} HTTP/1.1`},
|
|
}
|
|
catalogInstance := disk.NewCatalog("")
|
|
req.generator, err = generators.New(req.Payloads, req.AttackType.Value, "", false, catalogInstance, "")
|
|
require.Nil(t, err, "could not create generator")
|
|
|
|
generator := req.newGenerator(false)
|
|
var payloads []map[string]interface{}
|
|
for {
|
|
_, data, ok := generator.nextValue()
|
|
if !ok {
|
|
break
|
|
}
|
|
payloads = append(payloads, data)
|
|
}
|
|
require.Equal(t, 9, len(payloads), "Could not get correct number of payloads")
|
|
}
|
|
|
|
func TestRequestGeneratorClusterBombMultipleRaw(t *testing.T) {
|
|
var err error
|
|
|
|
req := &Request{
|
|
Payloads: map[string]interface{}{"username": []string{"admin", "tomcat", "manager"}, "password": []string{"password", "test", "secret"}},
|
|
AttackType: generators.AttackTypeHolder{Value: generators.ClusterBombAttack},
|
|
Raw: []string{`GET /{{username}}:{{password}} HTTP/1.1`, `GET /{{username}}@{{password}} HTTP/1.1`},
|
|
}
|
|
catalogInstance := disk.NewCatalog("")
|
|
req.generator, err = generators.New(req.Payloads, req.AttackType.Value, "", false, catalogInstance, "")
|
|
require.Nil(t, err, "could not create generator")
|
|
|
|
generator := req.newGenerator(false)
|
|
var payloads []map[string]interface{}
|
|
for {
|
|
_, data, ok := generator.nextValue()
|
|
if !ok {
|
|
break
|
|
}
|
|
payloads = append(payloads, data)
|
|
}
|
|
require.Equal(t, 18, len(payloads), "Could not get correct number of payloads")
|
|
}
|