mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-20 09:15:24 +00:00
f7fe99f806
* add flow logic * progress * working POC * fix string slice normalization issue in variables * update * fix nil panic * remove poll() * load file with sandbox and more * fix failing integration tests * JS: log: print in vardump format * fix missing id in protocols * fix proto prefix in template context * flow: add unit tests * conditional flow support using flow * fix proto callbacks + more unit tests * adds integration test * conditional flow: check if req has any matchers * fix lint error * deprecate iterate-all+ missing multi-proto implementation * fix ip input in raw request * JS: feat dedupe object+ more builtin funcs * feat: hide protocol result using hide * feat: async execution * complete async execution support * fix condition-flow without any matchers * refactor: template executer package (tmplexec) * flow executor working * fix data race in templateCtx * templateCtx redesign * fix failing unit test * add multiprotocol support to deprecated syntax * fix race condition in utils & tlsx * add documentation in flow package * remove regions.txt file * fix minor issue with self contained templates * fix typos of copilot * dep + misc update * fix reqID: use req.Type instead of template.Type --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
93 lines
2.8 KiB
Go
93 lines
2.8 KiB
Go
package generators
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/require"
|
|
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/catalog/disk"
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/types"
|
|
)
|
|
|
|
func TestBatteringRamGenerator(t *testing.T) {
|
|
usernames := []string{"admin", "password"}
|
|
|
|
catalogInstance := disk.NewCatalog("")
|
|
generator, err := New(map[string]interface{}{"username": usernames}, BatteringRamAttack, "", catalogInstance, "", getOptions(false))
|
|
require.Nil(t, err, "could not create generator")
|
|
|
|
iterator := generator.NewIterator()
|
|
count := 0
|
|
for {
|
|
_, ok := iterator.Value()
|
|
if !ok {
|
|
break
|
|
}
|
|
count++
|
|
}
|
|
require.Equal(t, len(usernames), count, "could not get correct batteringram counts")
|
|
}
|
|
|
|
func TestPitchforkGenerator(t *testing.T) {
|
|
usernames := []string{"admin", "token"}
|
|
passwords := []string{"password1", "password2", "password3"}
|
|
|
|
catalogInstance := disk.NewCatalog("")
|
|
generator, err := New(map[string]interface{}{"username": usernames, "password": passwords}, PitchForkAttack, "", catalogInstance, "", getOptions(false))
|
|
require.Nil(t, err, "could not create generator")
|
|
|
|
iterator := generator.NewIterator()
|
|
count := 0
|
|
for {
|
|
value, ok := iterator.Value()
|
|
if !ok {
|
|
break
|
|
}
|
|
count++
|
|
require.Contains(t, usernames, value["username"], "Could not get correct pitchfork username")
|
|
require.Contains(t, passwords, value["password"], "Could not get correct pitchfork password")
|
|
}
|
|
require.Equal(t, len(usernames), count, "could not get correct pitchfork counts")
|
|
}
|
|
|
|
func TestClusterbombGenerator(t *testing.T) {
|
|
usernames := []string{"admin"}
|
|
passwords := []string{"admin", "password", "token"}
|
|
|
|
catalogInstance := disk.NewCatalog("")
|
|
generator, err := New(map[string]interface{}{"username": usernames, "password": passwords}, ClusterBombAttack, "", catalogInstance, "", getOptions(false))
|
|
require.Nil(t, err, "could not create generator")
|
|
|
|
iterator := generator.NewIterator()
|
|
count := 0
|
|
for {
|
|
value, ok := iterator.Value()
|
|
if !ok {
|
|
break
|
|
}
|
|
count++
|
|
require.Contains(t, usernames, value["username"], "Could not get correct clusterbomb username")
|
|
require.Contains(t, passwords, value["password"], "Could not get correct clusterbomb password")
|
|
}
|
|
require.Equal(t, 3, count, "could not get correct clusterbomb counts")
|
|
|
|
iterator.Reset()
|
|
count = 0
|
|
for {
|
|
value, ok := iterator.Value()
|
|
if !ok {
|
|
break
|
|
}
|
|
count++
|
|
require.Contains(t, usernames, value["username"], "Could not get correct clusterbomb username")
|
|
require.Contains(t, passwords, value["password"], "Could not get correct clusterbomb password")
|
|
}
|
|
require.Equal(t, 3, count, "could not get correct clusterbomb counts")
|
|
}
|
|
|
|
func getOptions(allowLocalFileAccess bool) *types.Options {
|
|
opts := types.DefaultOptions()
|
|
opts.AllowLocalFileAccess = allowLocalFileAccess
|
|
return opts
|
|
}
|