Dwi Siswanto
8f23a8633f
fix(fuzz): preserve cookie payloads when rebuilding requests
...
`Cookie.String` sanitizes values that can be deliberate fuzz payloads.
Stored cookies can also introduce a second value for the cookie under
test.
Build Cookie headers from raw fields and track the keys selected for
fuzzing. Use a filtered jar on an isolated client to retain session
updates without replacing those fields.
Fixes #7813
Fixes #7826
Signed-off-by: Dwi Siswanto <[email protected] >
2026-10-06 01:48:04 +07:00
Dwi Siswanto and Mzack9999
4cabca06f6
chore(deps): strip dependencies ( #7457 )
...
* chore(deps): strip dependencies
Signed-off-by: Dwi Siswanto <[email protected] >
* chore: drop stripped dependencies
Signed-off-by: Dwi Siswanto <[email protected] >
* tests(integration): reduce external service flakiness
Signed-off-by: Dwi Siswanto <[email protected] >
* refactor(types): replace govalidator ASCII check
Signed-off-by: Dwi Siswanto <[email protected] >
* chore(trackers): update go-github import path
Signed-off-by: Dwi Siswanto <[email protected] >
* chore: use our PD wrapper
Signed-off-by: Dwi Siswanto <[email protected] >
* chore: use our PD cache packages
Signed-off-by: Dwi Siswanto <[email protected] >
* chore(utils): use x/net publicsuffix
Signed-off-by: Dwi Siswanto <[email protected] >
* chore(input): decode YAML without invopop/yaml
Signed-off-by: Dwi Siswanto <[email protected] >
* refactor(yaml): route callers through pkg/utils/yaml
Signed-off-by: Dwi Siswanto <[email protected] >
* refactor(json): route callers through pkg/utils/json
Signed-off-by: Dwi Siswanto <[email protected] >
* refactpr(scan): replace Echo handlers with net/http
Signed-off-by: Dwi Siswanto <[email protected] >
* refactor(server): replace Echo with net/http
Signed-off-by: Dwi Siswanto <[email protected] >
* refactor(fuzzplayground): replace Echo server with net/http
Signed-off-by: Dwi Siswanto <[email protected] >
* test: update subdomains testdata
Signed-off-by: Dwi Siswanto <[email protected] >
* chore(yaml): satisfy lints
Signed-off-by: Dwi Siswanto <[email protected] >
* fix codeql
---------
Signed-off-by: Dwi Siswanto <[email protected] >
Co-authored-by: Mzack9999 <[email protected] >
2026-06-21 05:41:12 +07:00
Mzack9999
63124eff2c
per-host http client pool ( #7301 )
...
* attempting per-host http client pool
* close idle conns
* fixing idle conn leak
* lint
* ignore http internal routines
* fixing tests
* lowering flaky http requirement
* fixing open gate issue
* adding perf tests
* pool rework
2026-06-16 20:21:49 +05:30
Nakul Bharti
6cd2749335
fix(utils): santize host when target has host port ( #6759 )
2026-01-19 12:14:14 +07:00
jishudashen
0337b33490
chore: fix inconsistent function name in comment
...
Signed-off-by: jishudashen <[email protected] >
2025-07-21 14:13:22 +08:00
Dwi Siswanto
87ed0b2bb9
build: bump all direct modules ( #6290 )
...
* chore: fix non-constant fmt string in call
Signed-off-by: Dwi Siswanto <[email protected] >
* build: bump all direct modules
Signed-off-by: Dwi Siswanto <[email protected] >
* chore(hosterrorscache): update import path
Signed-off-by: Dwi Siswanto <[email protected] >
* fix(charts): break changes
Signed-off-by: Dwi Siswanto <[email protected] >
* build: pinned `github.com/zmap/zcrypto` to v0.0.0-20240512203510-0fef58d9a9db
Signed-off-by: Dwi Siswanto <[email protected] >
* chore: golangci-lint auto fixes
Signed-off-by: Dwi Siswanto <[email protected] >
* chore: satisfy lints
Signed-off-by: Dwi Siswanto <[email protected] >
* build: migrate `github.com/xanzy/go-gitlab` => `gitlab.com/gitlab-org/api/client-go`
Signed-off-by: Dwi Siswanto <[email protected] >
* feat(json): update build constraints
Signed-off-by: Dwi Siswanto <[email protected] >
* chore: dont panicking on close err
Signed-off-by: Dwi Siswanto <[email protected] >
---------
Signed-off-by: Dwi Siswanto <[email protected] >
2025-07-01 00:40:44 +07:00
threehonor
d1b1c23e4e
chore: fix some function names in comment
...
Signed-off-by: threehonor <[email protected] >
2025-03-26 11:03:43 +08:00
lvyaoting
a6b5b1dd49
chore: fix some function name in comment
...
Signed-off-by: lvyaoting <[email protected] >
2024-12-05 19:34:33 +08:00
Ice3man and Tarun Koyalwar
0b82e8b7aa
feat: added support for context cancellation to engine ( #5096 )
...
* feat: added support for context cancellation to engine
* misc
* feat: added contexts everywhere
* misc
* misc
* use granular http timeouts and increase http timeout to 30s using multiplier
* track response header timeout in mhe
* update responseHeaderTimeout to 5sec
* skip failing windows test
---------
Co-authored-by: Tarun Koyalwar <[email protected] >
2024-04-25 15:37:56 +05:30
Dogan Can Bakir
e480d131f1
add query param ( #4894 )
...
* include params
* add query var
* override params for base url var
2024-04-23 19:17:26 +05:30
Dogan Can Bakir
6abff96435
use maxsize ( #4814 )
2024-02-29 03:21:17 +05:30
Tarun Koyalwar and mzack
5bd9d9ee68
memory leak fixes and optimizations ( #4680 )
...
* feat http response memory optimization + reuse buffers
* update nuclei version
* feat: reuse js vm's and compile to programs
* fix failing http integration test
* remove dead code + add -jsc
* feat reuse js vms in pool with concurrency
* update comments as per review
* bug fix+ update interactsh test to look for dns interaction
* try enabling all interactsh integration tests
---------
Co-authored-by: mzack <[email protected] >
2024-01-31 01:59:49 +05:30
Tarun Koyalwar and sandeep
c7c35ffb94
fix multiple mem leaks + optimizations ( #4630 )
...
* fix mem leak
* bump version tag
* http: add global resp body read limit of 4MB
* skip creating templateCtx in normal templates
* fix mem leak via retryablehttp , fastdialer
* go mod tidy
* remove unused var
* dep update
---------
Co-authored-by: sandeep <[email protected] >
2024-01-18 05:53:42 +05:30
Tarun Koyalwar
6e969cbd3c
add additional json fields: port,ip,scheme,url ( #4417 )
...
* add additional json fields: port,ip,scheme,url
* include host field in case of ip input
2023-11-28 14:26:23 +05:30
Tarun Koyalwar and sandeep
dc44105baf
nuclei v3 : misc updates ( #4247 )
...
* use parsed options while signing
* update project layout to v3
* fix .gitignore
* remove example template
* misc updates
* bump tlsx version
* hide template sig warning with env
* js: retain value while using log
* fix nil pointer derefernce
* misc doc update
---------
Co-authored-by: sandeep <[email protected] >
2023-10-17 17:44:13 +05:30