mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-17 18:05:27 +00:00
122 lines
3.7 KiB
Go
122 lines
3.7 KiB
Go
package http
|
|
|
|
import (
|
|
"strings"
|
|
|
|
"github.com/pkg/errors"
|
|
"github.com/projectdiscovery/gologger"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/input/formats"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/input/formats/burp"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/input/formats/json"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/input/formats/openapi"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/input/formats/swagger"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/input/formats/yaml"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/input/types"
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/protocols/common/contextargs"
|
|
)
|
|
|
|
// HttpMultiFormatOptions contains options for the http input provider
|
|
type HttpMultiFormatOptions struct {
|
|
// Options for the http input provider
|
|
Options formats.InputFormatOptions
|
|
// InputFile is the file containing the input
|
|
InputFile string
|
|
// InputMode is the mode of input
|
|
InputMode string
|
|
}
|
|
|
|
// HttpInputProvider implements an input provider for nuclei that loads
|
|
// inputs from multiple formats like burp, openapi, postman,proxify, etc.
|
|
type HttpInputProvider struct {
|
|
format formats.Format
|
|
inputFile string
|
|
count int64
|
|
}
|
|
|
|
// NewHttpInputProvider creates a new input provider for nuclei from a file
|
|
func NewHttpInputProvider(opts *HttpMultiFormatOptions) (*HttpInputProvider, error) {
|
|
var format formats.Format
|
|
for _, provider := range providersList {
|
|
if provider.Name() == opts.InputMode {
|
|
format = provider
|
|
}
|
|
}
|
|
if format == nil {
|
|
return nil, errors.Errorf("invalid input mode %s", opts.InputMode)
|
|
}
|
|
format.SetOptions(opts.Options)
|
|
// Do a first pass over the input to identify any errors
|
|
// and get the count of the input file as well
|
|
count := int64(0)
|
|
parseErr := format.Parse(opts.InputFile, func(request *types.RequestResponse) bool {
|
|
count++
|
|
return false
|
|
})
|
|
if parseErr != nil {
|
|
return nil, errors.Wrap(parseErr, "could not parse input file")
|
|
}
|
|
return &HttpInputProvider{format: format, inputFile: opts.InputFile, count: count}, nil
|
|
}
|
|
|
|
// Count returns the number of items for input provider
|
|
func (i *HttpInputProvider) Count() int64 {
|
|
return i.count
|
|
}
|
|
|
|
// Iterate over all inputs in order
|
|
func (i *HttpInputProvider) Iterate(callback func(value *contextargs.MetaInput) bool) {
|
|
err := i.format.Parse(i.inputFile, func(request *types.RequestResponse) bool {
|
|
metaInput := contextargs.NewMetaInput()
|
|
metaInput.ReqResp = request
|
|
metaInput.Input = request.URL.String()
|
|
return callback(metaInput)
|
|
})
|
|
if err != nil {
|
|
gologger.Warning().Msgf("Could not parse input file while iterating: %s\n", err)
|
|
}
|
|
}
|
|
|
|
// Set adds item to input provider
|
|
// No-op for this provider
|
|
func (i *HttpInputProvider) Set(value string) {}
|
|
|
|
// SetWithProbe adds item to input provider with http probing
|
|
// No-op for this provider
|
|
func (i *HttpInputProvider) SetWithProbe(value string, probe types.InputLivenessProbe) error {
|
|
return nil
|
|
}
|
|
|
|
// SetWithExclusions adds item to input provider if it doesn't match any of the exclusions
|
|
// No-op for this provider
|
|
func (i *HttpInputProvider) SetWithExclusions(value string) error {
|
|
return nil
|
|
}
|
|
|
|
// InputType returns the type of input provider
|
|
func (i *HttpInputProvider) InputType() string {
|
|
return "MultiFormatInputProvider"
|
|
}
|
|
|
|
// Close closes the input provider and cleans up any resources
|
|
// No-op for this provider
|
|
func (i *HttpInputProvider) Close() {}
|
|
|
|
// Supported Providers
|
|
var providersList = []formats.Format{
|
|
burp.New(),
|
|
json.New(),
|
|
yaml.New(),
|
|
openapi.New(),
|
|
swagger.New(),
|
|
}
|
|
|
|
// SupportedFormats returns the list of supported formats in comma-separated
|
|
// manner
|
|
func SupportedFormats() string {
|
|
var formats []string
|
|
for _, provider := range providersList {
|
|
formats = append(formats, provider.Name())
|
|
}
|
|
return strings.Join(formats, ", ")
|
|
}
|