Mzack9999
1fe6025b96
bump goja ( #7467 )
2026-06-20 22:13:23 +05:30
Mzack9999
63124eff2c
per-host http client pool ( #7301 )
...
* attempting per-host http client pool
* close idle conns
* fixing idle conn leak
* lint
* ignore http internal routines
* fixing tests
* lowering flaky http requirement
* fixing open gate issue
* adding perf tests
* pool rework
2026-06-16 20:21:49 +05:30
Richard Brown
51205f8470
fix(clustering): updated cluster failure handling ( #6843 )
...
* fix(clustering): updated cluster failure handling and mock output
* fix(interactsh): updated callbacks for interactsh
* fix(callbacks): reverted callbacks an just fixed clustered output
2026-03-05 01:55:38 +05:30
f26996cb89
Remove singletons from Nuclei engine (continuation of #6210 ) ( #6296 )
...
* introducing execution id
* wip
* .
* adding separate execution context id
* lint
* vet
* fixing pg dialers
* test ignore
* fixing loader FD limit
* test
* fd fix
* wip: remove CloseProcesses() from dev merge
* wip: fix merge issue
* protocolstate: stop memguarding on last dialer delete
* avoid data race in dialers.RawHTTPClient
* use shared logger and avoid race conditions
* use shared logger and avoid race conditions
* go mod
* patch executionId into compiled template cache
* clean up comment in Parse
* go mod update
* bump echarts
* address merge issues
* fix use of gologger
* switch cmd/nuclei to options.Logger
* address merge issues with go.mod
* go vet: address copy of lock with new Copy function
* fixing tests
* disable speed control
* fix nil ExecuterOptions
* removing deprecated code
* fixing result print
* default logger
* cli default logger
* filter warning from results
* fix performance test
* hardcoding path
* disable upload
* refactor(runner): uses `Warning` instead of `Print` for `pdcpUploadErrMsg`
Signed-off-by: Dwi Siswanto <[email protected] >
* Revert "disable upload"
This reverts commit 114fbe6663 .
* Revert "hardcoding path"
This reverts commit cf12ca800e .
---------
Signed-off-by: Dwi Siswanto <[email protected] >
Co-authored-by: Mzack9999 <[email protected] >
Co-authored-by: Dwi Siswanto <[email protected] >
Co-authored-by: Dwi Siswanto <[email protected] >
2025-07-10 01:17:26 +05:30
Tarun Koyalwar
2b729e4037
fix context leak in flow ( #6282 )
...
* fix context leak in flow
* handle sizedwaitpool when not reused
2025-06-30 16:43:00 +07:00
Nakul Bharti
fa7329f16e
fix: race condition of the lastmatcherevent ( #6080 )
2025-03-03 16:10:12 +05:30
Dwi Siswanto and Ice3man543
cc5c5509dc
feat: global matchers ( #5701 )
...
* feat: global matchers
Signed-off-by: Dwi Siswanto <[email protected] >
Co-authored-by: Ice3man543 <[email protected] >
* feat(globalmatchers): make `Callback` as type
Signed-off-by: Dwi Siswanto <[email protected] >
* feat: update `passive` term to `(matchers-)static`
Signed-off-by: Dwi Siswanto <[email protected] >
* feat(globalmatchers): add `origin-template-*` event
also use `Set` method instead of `maps.Clone`
Signed-off-by: Dwi Siswanto <[email protected] >
* feat: update `matchers-static` term to `global-matchers`
Signed-off-by: Dwi Siswanto <[email protected] >
* feat(globalmatchers): clone event before `operator.Execute`
Signed-off-by: Dwi Siswanto <[email protected] >
* fix(tmplexec): don't store `matched` on `global-matchers` templ
This will end up generating 2 events from the same
`scan.ScanContext` if one of the templates has
`global-matchers` enabled. This way, non-
`global-matchers` templates can enter the
`writeFailureCallback` func to log failure output.
Signed-off-by: Dwi Siswanto <[email protected] >
* feat(globalmatchers): initializes `requests` on `New`
Signed-off-by: Dwi Siswanto <[email protected] >
* feat(globalmatchers): add `hasStorage` method
Signed-off-by: Dwi Siswanto <[email protected] >
* refactor(templates): rename global matchers checks method
Signed-off-by: Dwi Siswanto <[email protected] >
* fix(loader): handle nil `templates.Template` pointer
Signed-off-by: Dwi Siswanto <[email protected] >
---------
Signed-off-by: Dwi Siswanto <[email protected] >
Co-authored-by: Ice3man543 <[email protected] >
2024-10-14 19:25:46 +05:30
Tarun Koyalwar
1f945d6d50
consider protocolType in max host error ( #5668 )
...
* consider protocolType in max host error
* add mutex when updating internal-event
2024-09-28 18:50:35 +05:30
Tarun Koyalwar
87e99be4f6
scan error formatting ( #5628 )
2024-09-14 00:06:08 +05:30
Dogan Can Bakir
6b71af448a
Fixed issue with -ms option to scan non accessible host ( #5576 )
...
* fail if OnResult callback is not called
* generate error message from error logs
* try..parse..
* fix lint
* add error message to last matcher event
* fix network protocol error logging
* log returned log from ExecuteWithResults
* add back specific logging
* clean up the msg
* minor
* init integration test for -ms
* add tests for http,network,js,ws protocols
* fix lint
* fix network test
* return err for dns protocol
* add integration test for dns protocol
2024-08-28 16:27:43 +05:30
Tarun Koyalwar and Dwi Siswanto
1c76398aea
lint error fixes ( #5531 )
...
* lint error fixes
* chore: satisfy non-constant format str in call lint (govet)
Signed-off-by: Dwi Siswanto <[email protected] >
---------
Signed-off-by: Dwi Siswanto <[email protected] >
Co-authored-by: Dwi Siswanto <[email protected] >
2024-08-16 20:31:23 +05:30
Ramana Reddy and Tarun Koyalwar
66da73c1b1
Fix panic err using flow templates with workflow ( #5064 )
...
* Fix panic err using flow templates with workflows
* Misc update
* skip test if pdcp keys are not present
---------
Co-authored-by: Tarun Koyalwar <[email protected] >
2024-04-18 17:43:46 +05:30
Tarun Koyalwar
ea2e13a4aa
nuclei 'stats' build : scan events + chart utils ( #5032 )
...
* prototype new scan events
* scan-event: improvements + conditional build
* add scan charts server: make scan-charts
* scan-charts: bug fix
2024-04-16 16:57:32 +05:30
Tarun Koyalwar
3907e20bde
fix multiple panics & missing matcher-status in flow templates ( #4978 )
...
* validate and fix empty internal-event
* fix on error with interactsh req
* disable clustering in flow & multiproto
* fix empty/missing matcher-status result
* fix cluster unit test
* fix no results found unit test
2024-04-03 17:19:06 +05:30
Tarun Koyalwar
255032f4f2
pre-condition in code , fuzz and other misc updates ( #4966 )
...
* fuzz: rename 'filters' -> 'pre-condition'
* code proto: pre-condition + integration test
* feat: dsl document generator
* update dsl page header
* fix lint error
* add js defined helper funcs in docs
* remove panic recovery unless its for third party(go-rod,goja)
* handle dynamic values flattening edgecase in flow+multiprotocol
* fix order of kv in form-data (failing test)
* fix template loading counters
* Revert "handle dynamic values flattening edgecase in flow+multiprotocol"
This reverts commit 58fdd4faf7 .
* fix flow iteration using 'iterate'
2024-04-01 19:18:21 +05:30
Tarun Koyalwar
49ef5cbf16
handle 1 more edgecase ( #4868 )
...
* handle 1 more edgecase
* add integration test for this edgecase
* fix multi-http-var-sharing with integration test
* add -payload-concurrency (-pc) flag
* fix missing internal:true login in multiprotocol engine
* fix/handle absolute invalid url parsing
* support -pc & -jc in go sdk
* fix missing variables in code protocol operators
* add payload count parallelhttp check
2024-03-13 20:35:19 +05:30
Ice3man
fd024a3e8d
feat: issue tracker URLs in JSON + misc fixes ( #4855 )
...
* feat: issue tracker URLs in JSON + misc fixes
* misc changes
* feat: status update support for issues
* feat: report metadata generation hook support
* feat: added CLI summary of tickets created
* misc changes
2024-03-10 22:02:42 +05:30
Tarun Koyalwar
29e8e4e5a3
fix concurrent map writes in tmplexec package ( #4718 )
...
* fix concurrent map writes
* catch any possible panics
2024-02-02 21:36:48 +05:30
Tarun Koyalwar
cc732875cd
javascript: pooling and reuse with export functions + misc updates ( #4709 )
...
* js hotfix: wrap javascript source in anon functions
* mysql module improvements
* misc mysql bugs
* js vm pooling: soft deprecation + incentivised pooling
* misc updates
* disable interactsh failed test
* disable interactsh.yaml integration test on win & mac
2024-02-02 02:22:04 +05:30
Tarun Koyalwar and mzack
5bd9d9ee68
memory leak fixes and optimizations ( #4680 )
...
* feat http response memory optimization + reuse buffers
* update nuclei version
* feat: reuse js vm's and compile to programs
* fix failing http integration test
* remove dead code + add -jsc
* feat reuse js vms in pool with concurrency
* update comments as per review
* bug fix+ update interactsh test to look for dns interaction
* try enabling all interactsh integration tests
---------
Co-authored-by: mzack <[email protected] >
2024-01-31 01:59:49 +05:30
Tarun Koyalwar
68b9dd52ad
error handling + support offlinehttp in flow templates ( #4653 )
2024-01-17 23:16:57 +05:30
Tarun Koyalwar
02a9b86dd7
fix missing results in flow template + feature: internal matchers using internal: true ( #4582 )
...
* log warnings + use scanContext in flow
* refactor flow to use scanContext + log all events
* feat: internal matcher
* fix integration test
* bug fix extractor: merge dynamic values, fix missing extractors in file
* flow: fix 'No Results Found' if last statement output is false
* fix unit test
2024-01-08 05:12:11 +05:30
Dogan Can Bakir
ce5df9cc02
introduce scan context ( #4373 )
...
* introduce scan context
* minor
* add joined errors to resultevents
* change `executor` funcs' signature
* fix tests
* join errors in `LogError` func
* change func signature
* add guard
2023-11-28 00:24:45 +05:30
Tarun Koyalwar and sandeep
dc44105baf
nuclei v3 : misc updates ( #4247 )
...
* use parsed options while signing
* update project layout to v3
* fix .gitignore
* remove example template
* misc updates
* bump tlsx version
* hide template sig warning with env
* js: retain value while using log
* fix nil pointer derefernce
* misc doc update
---------
Co-authored-by: sandeep <[email protected] >
2023-10-17 17:44:13 +05:30