mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-18 08:25:24 +00:00
* Adding support for code templates * adding support for python, powershell and echo (test) * removing debug code * introducing command + trivial trust store mechanism * updating tests * adding basic tests * removing deprecated oracle * mod tidy * adding signature proto with debug prints * removing debug code * fixing test * fixing param order * improving test conditional build * disable file+offlinehttp+code with cloud * adding env vars * removing debug code * reorganizing test folders * adding code template test prototype with dummy priv/pub keys * bump go to 1.20 * fixing go version * fixing lint errors * adding fatal on pub-key test failure * switching to ecdsa asn1 * removing unused signature * fixing signature * adding more tests * extending core with engine args + powershell win test * adding unsigned code test * skip template signing in particular test case * improving test coverage * refactoring key names + adding already signed algo * removing debug code * fixing syntax * fixing lint issues * removing test template * fixing dns tests path * output fmt * adding interact * fixing lint issues * adding -sign cli helper * fixing nil pointer + parse inline keys * making rsa default * adding code prot. ref * moving file to correct loc * moving test * Issue 3339 headless fuzz (#3790) * Basic headless fuzzing * Remove debug statements * Add integration tests * Update template * Fix recognize payload value in matcher * Update tempalte * use req.SetURL() --------- Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io> * Auto Generate Syntax Docs + JSONSchema [Fri Jun 9 00:23:32 UTC 2023] 🤖 * Add headless header and status matchers (#3794) * add headless header and status matchers * rename headers as header * add integration test for header+status * fix typo * add retry to py-interactsh integration test --------- Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io> Co-authored-by: Shubham Rasal <shubham@projectdiscovery.io> Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io> Co-authored-by: GitHub Action <action@github.com> Co-authored-by: Dogan Can Bakir <65292895+dogancanbakir@users.noreply.github.com> Co-authored-by: Tarun Koyalwar <45962551+tarunKoyalwar@users.noreply.github.com>
108 lines
2.7 KiB
Go
108 lines
2.7 KiB
Go
package main
|
|
|
|
import (
|
|
"net"
|
|
"strings"
|
|
|
|
"github.com/gobwas/ws/wsutil"
|
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/testutils"
|
|
)
|
|
|
|
var websocketTestCases = map[string]testutils.TestCase{
|
|
"protocols/websocket/basic.yaml": &websocketBasic{},
|
|
"protocols/websocket/cswsh.yaml": &websocketCswsh{},
|
|
"protocols/websocket/no-cswsh.yaml": &websocketNoCswsh{},
|
|
"protocols/websocket/path.yaml": &websocketWithPath{},
|
|
}
|
|
|
|
type websocketBasic struct{}
|
|
|
|
// Execute executes a test case and returns an error if occurred
|
|
func (h *websocketBasic) Execute(filePath string) error {
|
|
connHandler := func(conn net.Conn) {
|
|
for {
|
|
msg, op, _ := wsutil.ReadClientData(conn)
|
|
if string(msg) != "hello" {
|
|
return
|
|
}
|
|
_ = wsutil.WriteServerMessage(conn, op, []byte("world"))
|
|
}
|
|
}
|
|
originValidate := func(origin string) bool {
|
|
return true
|
|
}
|
|
ts := testutils.NewWebsocketServer("", connHandler, originValidate)
|
|
defer ts.Close()
|
|
|
|
results, err := testutils.RunNucleiTemplateAndGetResults(filePath, strings.ReplaceAll(ts.URL, "http", "ws"), debug)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return expectResultsCount(results, 1)
|
|
}
|
|
|
|
type websocketCswsh struct{}
|
|
|
|
// Execute executes a test case and returns an error if occurred
|
|
func (h *websocketCswsh) Execute(filePath string) error {
|
|
connHandler := func(conn net.Conn) {
|
|
|
|
}
|
|
originValidate := func(origin string) bool {
|
|
return true
|
|
}
|
|
ts := testutils.NewWebsocketServer("", connHandler, originValidate)
|
|
defer ts.Close()
|
|
|
|
results, err := testutils.RunNucleiTemplateAndGetResults(filePath, strings.ReplaceAll(ts.URL, "http", "ws"), debug)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return expectResultsCount(results, 1)
|
|
}
|
|
|
|
type websocketNoCswsh struct{}
|
|
|
|
// Execute executes a test case and returns an error if occurred
|
|
func (h *websocketNoCswsh) Execute(filePath string) error {
|
|
connHandler := func(conn net.Conn) {
|
|
|
|
}
|
|
originValidate := func(origin string) bool {
|
|
return origin == "https://google.com"
|
|
}
|
|
ts := testutils.NewWebsocketServer("", connHandler, originValidate)
|
|
defer ts.Close()
|
|
|
|
results, err := testutils.RunNucleiTemplateAndGetResults(filePath, strings.ReplaceAll(ts.URL, "http", "ws"), debug)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return expectResultsCount(results, 0)
|
|
}
|
|
|
|
type websocketWithPath struct{}
|
|
|
|
// Execute executes a test case and returns an error if occurred
|
|
func (h *websocketWithPath) Execute(filePath string) error {
|
|
connHandler := func(conn net.Conn) {
|
|
|
|
}
|
|
originValidate := func(origin string) bool {
|
|
return origin == "https://google.com"
|
|
}
|
|
ts := testutils.NewWebsocketServer("/test", connHandler, originValidate)
|
|
defer ts.Close()
|
|
|
|
results, err := testutils.RunNucleiTemplateAndGetResults(filePath, strings.ReplaceAll(ts.URL, "http", "ws"), debug)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return expectResultsCount(results, 0)
|
|
}
|