nuclei/pkg/scan/charts/charts.go
Ice3man 5f0b7eb19b
feat: added initial live DAST server implementation (#5772)
* feat: added initial live DAST server implementation

* feat: more logging + misc additions

* feat: auth file support enhancements for more complex scenarios + misc

* feat: added io.Reader support to input providers for http

* feat: added stats db to fuzzing + use sdk for dast server + misc

* feat: more additions and enhancements

* misc changes to live server

* misc

* use utils pprof server

* feat: added simpler stats tracking system

* feat: fixed analyzer timeout issue + missing case fix

* misc changes fix

* feat: changed the logics a bit + misc changes and additions

* feat: re-added slope checks + misc

* feat: added baseline measurements for time based checks

* chore(server): fix typos

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

* fix(templates): potential DOM XSS

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

* fix(authx): potential NIL deref

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

* feat: misc review changes

* removed debug logging

* feat: remove existing cookies only

* feat: lint fixes

* misc

* misc text update

* request endpoint update

* feat: added tracking for status code, waf-detection & grouped errors (#6028)

* feat: added tracking for status code, waf-detection & grouped errors

* lint error fixes

* feat: review changes + moving to package + misc

---------

Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>

* fix var dump (#5921)

* fix var dump

* fix dump test

* Added filename length restriction for debug mode (-srd flag) (#5931)

Co-authored-by: Andrey Matveenko <an.matveenko@vkteam.ru>

* more updates

* Update pkg/output/stats/waf/waf.go

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

---------

Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
Co-authored-by: Dwi Siswanto <25837540+dwisiswant0@users.noreply.github.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Dogan Can Bakir <65292895+dogancanbakir@users.noreply.github.com>
Co-authored-by: 9flowers <51699499+Lercas@users.noreply.github.com>
Co-authored-by: Andrey Matveenko <an.matveenko@vkteam.ru>
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io>
2025-02-13 18:46:28 +05:30

88 lines
2.2 KiB
Go

package charts
import (
"fmt"
"os"
"path/filepath"
"github.com/labstack/echo/v4"
"github.com/projectdiscovery/nuclei/v3/pkg/scan/events"
"github.com/projectdiscovery/nuclei/v3/pkg/utils/json"
fileutil "github.com/projectdiscovery/utils/file"
)
// ScanEventsCharts is a struct for nuclei event charts
type ScanEventsCharts struct {
eventsDir string
config *events.ScanConfig
data []events.ScanEvent
}
func (sc *ScanEventsCharts) PrintInfo() {
fmt.Printf("[+] Scan Info\n")
fmt.Printf(" - Name: %s\n", sc.config.Name)
fmt.Printf(" - Target Count: %d\n", sc.config.TargetCount)
fmt.Printf(" - Template Count: %d\n", sc.config.TemplatesCount)
fmt.Printf(" - Template Concurrency: %d\n", sc.config.TemplateConcurrency)
fmt.Printf(" - Payload Concurrency: %d\n", sc.config.PayloadConcurrency)
fmt.Printf(" - Retries: %v\n", sc.config.Retries)
fmt.Printf(" - Total Events: %d\n", len(sc.data))
fmt.Println()
}
// NewScanEventsCharts creates a new nuclei event charts
func NewScanEventsCharts(eventsDir string) (*ScanEventsCharts, error) {
sc := &ScanEventsCharts{eventsDir: eventsDir}
if !fileutil.FolderExists(eventsDir) {
return nil, fmt.Errorf("events directory does not exist")
}
// open two files
// config.json
bin, err := os.ReadFile(filepath.Join(eventsDir, events.ConfigFile))
if err != nil {
return nil, err
}
var config events.ScanConfig
err = json.Unmarshal(bin, &config)
if err != nil {
return nil, err
}
sc.config = &config
// events.jsonl
f, err := os.Open(filepath.Join(eventsDir, events.EventsFile))
if err != nil {
return nil, err
}
defer f.Close()
data := []events.ScanEvent{}
dec := json.NewDecoder(f)
for {
var event events.ScanEvent
if err := dec.Decode(&event); err != nil {
break
}
data = append(data, event)
}
sc.data = data
if len(data) == 0 {
return nil, fmt.Errorf("no events found in the events file")
}
return sc, nil
}
// Start starts the nuclei event charts server
func (sc *ScanEventsCharts) Start(addr string) {
e := echo.New()
e.HideBanner = true
e.GET("/concurrency", sc.ConcurrencyVsTime)
e.GET("/fuzz", sc.TotalRequestsOverTime)
e.GET("/slow", sc.TopSlowTemplates)
e.GET("/rps", sc.RequestsVSInterval)
e.GET("/", sc.AllCharts)
e.Logger.Fatal(e.Start(addr))
}