mirror of https://github.com/projectdiscovery/nuclei.git synced 2025-12-24 21:45:25 +00:00

History

* feat: global matchers

Signed-off-by: Dwi Siswanto <git@dw1.io>
Co-authored-by: Ice3man543 <ice3man543@users.noreply.github.com>

* feat(globalmatchers): make `Callback` as type

Signed-off-by: Dwi Siswanto <git@dw1.io>

* feat: update `passive` term to `(matchers-)static`

Signed-off-by: Dwi Siswanto <git@dw1.io>

* feat(globalmatchers): add `origin-template-*` event

also use `Set` method instead of `maps.Clone`

Signed-off-by: Dwi Siswanto <git@dw1.io>

* feat: update `matchers-static` term to `global-matchers`

Signed-off-by: Dwi Siswanto <git@dw1.io>

* feat(globalmatchers): clone event before `operator.Execute`

Signed-off-by: Dwi Siswanto <git@dw1.io>

* fix(tmplexec): don't store `matched` on `global-matchers` templ

This will end up generating 2 events from the same
`scan.ScanContext` if one of the templates has
`global-matchers` enabled. This way, non-
`global-matchers` templates can enter the
`writeFailureCallback` func to log failure output.

Signed-off-by: Dwi Siswanto <git@dw1.io>

* feat(globalmatchers): initializes `requests` on `New`

Signed-off-by: Dwi Siswanto <git@dw1.io>

* feat(globalmatchers): add `hasStorage` method

Signed-off-by: Dwi Siswanto <git@dw1.io>

* refactor(templates): rename global matchers checks method

Signed-off-by: Dwi Siswanto <git@dw1.io>

* fix(loader): handle nil `templates.Template` pointer

Signed-off-by: Dwi Siswanto <git@dw1.io>

---------

Signed-off-by: Dwi Siswanto <git@dw1.io>
Co-authored-by: Ice3man543 <ice3man543@users.noreply.github.com>

2024-10-14 19:25:46 +05:30

flow

feat: conditionally panic-recover (#5553 )

2024-08-28 17:57:45 +05:30

generic

consider protocolType in max host error (#5668 )

2024-09-28 18:50:35 +05:30

multiproto

Apply input transformation to multi-protocol templates (#5426 )

2024-08-01 20:43:47 +05:30

doc.go

nuclei v3 : misc updates (#4247 )

2023-10-17 17:44:13 +05:30

exec.go

feat: global matchers (#5701 )

2024-10-14 19:25:46 +05:30

interface.go

scan error formatting (#5628 )

2024-09-14 00:06:08 +05:30

README.md

nuclei v3 : misc updates (#4247 )

2023-10-17 17:44:13 +05:30

README.md

tmplexec

tmplexec also known as template executer executes template it is different from protocols package which only contains logic within the scope of one protocol. tmplexec is resposible for executing Template with defined logic. with introduction of multi protocol and flow templates (deprecated package protocols/common/executer) did not seem appropriate/helpful anymore as it is outside of protocol scope and deals with execution of template which can contain 1 requests , or multiple requests of same protocol or multiple requests of different protocols. tmplexec is responsible for executing template and handling all logic related to it.

Engine/Backends

Currently there are 3 engines for template execution

Generic => executes request[s] of same/one protocol
MultiProtocol => executes requests of multiple protocols with shared logic between protocol requests see multiprotocol
Flow => executes requests of one or multiple protocol requests as specified by template in javascript (aka flow) flow