mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-21 08:55:25 +00:00
* feat: added initial live DAST server implementation * feat: more logging + misc additions * feat: auth file support enhancements for more complex scenarios + misc * feat: added io.Reader support to input providers for http * feat: added stats db to fuzzing + use sdk for dast server + misc * feat: more additions and enhancements * misc changes to live server * misc * use utils pprof server * feat: added simpler stats tracking system * feat: fixed analyzer timeout issue + missing case fix * misc changes fix * feat: changed the logics a bit + misc changes and additions * feat: re-added slope checks + misc * feat: added baseline measurements for time based checks * chore(server): fix typos Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> * fix(templates): potential DOM XSS Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> * fix(authx): potential NIL deref Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> * feat: misc review changes * removed debug logging * feat: remove existing cookies only * feat: lint fixes * misc * misc text update * request endpoint update * feat: added tracking for status code, waf-detection & grouped errors (#6028) * feat: added tracking for status code, waf-detection & grouped errors * lint error fixes * feat: review changes + moving to package + misc --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> * fix var dump (#5921) * fix var dump * fix dump test * Added filename length restriction for debug mode (-srd flag) (#5931) Co-authored-by: Andrey Matveenko <an.matveenko@vkteam.ru> * more updates * Update pkg/output/stats/waf/waf.go Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> Co-authored-by: Dwi Siswanto <25837540+dwisiswant0@users.noreply.github.com> Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> Co-authored-by: Dogan Can Bakir <65292895+dogancanbakir@users.noreply.github.com> Co-authored-by: 9flowers <51699499+Lercas@users.noreply.github.com> Co-authored-by: Andrey Matveenko <an.matveenko@vkteam.ru> Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
88 lines
2.2 KiB
Go
88 lines
2.2 KiB
Go
package charts
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
|
|
"github.com/labstack/echo/v4"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/scan/events"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/utils/json"
|
|
fileutil "github.com/projectdiscovery/utils/file"
|
|
)
|
|
|
|
// ScanEventsCharts is a struct for nuclei event charts
|
|
type ScanEventsCharts struct {
|
|
eventsDir string
|
|
config *events.ScanConfig
|
|
data []events.ScanEvent
|
|
}
|
|
|
|
func (sc *ScanEventsCharts) PrintInfo() {
|
|
fmt.Printf("[+] Scan Info\n")
|
|
fmt.Printf(" - Name: %s\n", sc.config.Name)
|
|
fmt.Printf(" - Target Count: %d\n", sc.config.TargetCount)
|
|
fmt.Printf(" - Template Count: %d\n", sc.config.TemplatesCount)
|
|
fmt.Printf(" - Template Concurrency: %d\n", sc.config.TemplateConcurrency)
|
|
fmt.Printf(" - Payload Concurrency: %d\n", sc.config.PayloadConcurrency)
|
|
fmt.Printf(" - Retries: %v\n", sc.config.Retries)
|
|
fmt.Printf(" - Total Events: %d\n", len(sc.data))
|
|
fmt.Println()
|
|
}
|
|
|
|
// NewScanEventsCharts creates a new nuclei event charts
|
|
func NewScanEventsCharts(eventsDir string) (*ScanEventsCharts, error) {
|
|
sc := &ScanEventsCharts{eventsDir: eventsDir}
|
|
if !fileutil.FolderExists(eventsDir) {
|
|
return nil, fmt.Errorf("events directory does not exist")
|
|
}
|
|
// open two files
|
|
// config.json
|
|
bin, err := os.ReadFile(filepath.Join(eventsDir, events.ConfigFile))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
var config events.ScanConfig
|
|
err = json.Unmarshal(bin, &config)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
sc.config = &config
|
|
|
|
// events.jsonl
|
|
f, err := os.Open(filepath.Join(eventsDir, events.EventsFile))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer f.Close()
|
|
|
|
data := []events.ScanEvent{}
|
|
dec := json.NewDecoder(f)
|
|
for {
|
|
var event events.ScanEvent
|
|
if err := dec.Decode(&event); err != nil {
|
|
break
|
|
}
|
|
data = append(data, event)
|
|
}
|
|
sc.data = data
|
|
|
|
if len(data) == 0 {
|
|
return nil, fmt.Errorf("no events found in the events file")
|
|
}
|
|
|
|
return sc, nil
|
|
}
|
|
|
|
// Start starts the nuclei event charts server
|
|
func (sc *ScanEventsCharts) Start(addr string) {
|
|
e := echo.New()
|
|
e.HideBanner = true
|
|
e.GET("/concurrency", sc.ConcurrencyVsTime)
|
|
e.GET("/fuzz", sc.TotalRequestsOverTime)
|
|
e.GET("/slow", sc.TopSlowTemplates)
|
|
e.GET("/rps", sc.RequestsVSInterval)
|
|
e.GET("/", sc.AllCharts)
|
|
e.Logger.Fatal(e.Start(addr))
|
|
}
|