mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-21 06:25:28 +00:00
* feat: added initial live DAST server implementation * feat: more logging + misc additions * feat: auth file support enhancements for more complex scenarios + misc * feat: added io.Reader support to input providers for http * feat: added stats db to fuzzing + use sdk for dast server + misc * feat: more additions and enhancements * misc changes to live server * misc * use utils pprof server * feat: added simpler stats tracking system * feat: fixed analyzer timeout issue + missing case fix * misc changes fix * feat: changed the logics a bit + misc changes and additions * feat: re-added slope checks + misc * feat: added baseline measurements for time based checks * chore(server): fix typos Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> * fix(templates): potential DOM XSS Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> * fix(authx): potential NIL deref Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> * feat: misc review changes * removed debug logging * feat: remove existing cookies only * feat: lint fixes * misc * misc text update * request endpoint update * feat: added tracking for status code, waf-detection & grouped errors (#6028) * feat: added tracking for status code, waf-detection & grouped errors * lint error fixes * feat: review changes + moving to package + misc --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> * fix var dump (#5921) * fix var dump * fix dump test * Added filename length restriction for debug mode (-srd flag) (#5931) Co-authored-by: Andrey Matveenko <an.matveenko@vkteam.ru> * more updates * Update pkg/output/stats/waf/waf.go Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> Co-authored-by: Dwi Siswanto <25837540+dwisiswant0@users.noreply.github.com> Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> Co-authored-by: Dogan Can Bakir <65292895+dogancanbakir@users.noreply.github.com> Co-authored-by: 9flowers <51699499+Lercas@users.noreply.github.com> Co-authored-by: Andrey Matveenko <an.matveenko@vkteam.ru> Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
69 lines
1.6 KiB
Go
69 lines
1.6 KiB
Go
package openapi
|
|
|
|
import (
|
|
"os"
|
|
"strings"
|
|
"testing"
|
|
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/input/types"
|
|
"github.com/stretchr/testify/require"
|
|
)
|
|
|
|
const baseURL = "http://hackthebox:5000"
|
|
|
|
var methodToURLs = map[string][]string{
|
|
"GET": {
|
|
"{{baseUrl}}/createdb",
|
|
"{{baseUrl}}/",
|
|
"{{baseUrl}}/users/v1/John.Doe",
|
|
"{{baseUrl}}/users/v1",
|
|
"{{baseUrl}}/users/v1/_debug",
|
|
"{{baseUrl}}/books/v1",
|
|
"{{baseUrl}}/books/v1/bookTitle77",
|
|
},
|
|
"POST": {
|
|
"{{baseUrl}}/users/v1/register",
|
|
"{{baseUrl}}/users/v1/login",
|
|
"{{baseUrl}}/books/v1",
|
|
},
|
|
"PUT": {
|
|
"{{baseUrl}}/users/v1/name1/email",
|
|
"{{baseUrl}}/users/v1/name1/password",
|
|
},
|
|
"DELETE": {
|
|
"{{baseUrl}}/users/v1/name1",
|
|
},
|
|
}
|
|
|
|
func TestOpenAPIParser(t *testing.T) {
|
|
format := New()
|
|
|
|
proxifyInputFile := "../testdata/openapi.yaml"
|
|
|
|
gotMethodsToURLs := make(map[string][]string)
|
|
|
|
file, err := os.Open(proxifyInputFile)
|
|
require.Nilf(t, err, "error opening proxify input file: %v", err)
|
|
defer file.Close()
|
|
|
|
err = format.Parse(file, func(rr *types.RequestResponse) bool {
|
|
gotMethodsToURLs[rr.Request.Method] = append(gotMethodsToURLs[rr.Request.Method],
|
|
strings.Replace(rr.URL.String(), baseURL, "{{baseUrl}}", 1))
|
|
return false
|
|
}, proxifyInputFile)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
if len(gotMethodsToURLs) != len(methodToURLs) {
|
|
t.Fatalf("invalid number of methods: %d", len(gotMethodsToURLs))
|
|
}
|
|
|
|
for method, urls := range gotMethodsToURLs {
|
|
if len(urls) != len(methodToURLs[method]) {
|
|
t.Fatalf("invalid number of urls for method %s: %d", method, len(urls))
|
|
}
|
|
require.ElementsMatch(t, urls, methodToURLs[method], "invalid urls for method %s", method)
|
|
}
|
|
}
|