mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2026-11-10 04:01:31 -10:00
TassioSales
4ce6dea3e9
Fixes #7875 When options.ProxyInternal was enabled, only HTTP_PROXY was set in the environment. Because Go standard library http.ProxyFromEnvironment inspects HTTPS_PROXY for https URLs, internal HTTPS requests (such as template updates via GitHub API / releases, pdtm, etc.) failed to route through the specified proxy in restricted or proxy-required environments. This sets HTTP_PROXY, HTTPS_PROXY, ALL_PROXY (and lowercase counterparts) when ProxyInternal is enabled, and adds unit test coverage. Also fixes operator precedence for ProxyInternal checks in runner.go and sdk_private.go.
106 lines
2.4 KiB
Go
106 lines
2.4 KiB
Go
package runner
|
|
|
|
import (
|
|
"bufio"
|
|
"fmt"
|
|
"net/url"
|
|
"os"
|
|
"strings"
|
|
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/types"
|
|
"github.com/projectdiscovery/utils/errkit"
|
|
fileutil "github.com/projectdiscovery/utils/file"
|
|
proxyutils "github.com/projectdiscovery/utils/proxy"
|
|
)
|
|
|
|
const (
|
|
HTTP_PROXY_ENV = "HTTP_PROXY"
|
|
HTTPS_PROXY_ENV = "HTTPS_PROXY"
|
|
)
|
|
|
|
var proxyEnvVars = []string{
|
|
"HTTP_PROXY",
|
|
"HTTPS_PROXY",
|
|
"http_proxy",
|
|
"https_proxy",
|
|
"ALL_PROXY",
|
|
"all_proxy",
|
|
}
|
|
|
|
func setProxyEnv(proxyURL string) {
|
|
for _, env := range proxyEnvVars {
|
|
_ = os.Setenv(env, proxyURL)
|
|
}
|
|
}
|
|
|
|
// loadProxyServers load list of proxy servers from file or comma separated
|
|
func loadProxyServers(options *types.Options) error {
|
|
if len(options.Proxy) == 0 {
|
|
return nil
|
|
}
|
|
proxyList := []string{}
|
|
for _, p := range options.Proxy {
|
|
if fileutil.FileExists(p) {
|
|
file, err := os.Open(p)
|
|
if err != nil {
|
|
return fmt.Errorf("could not open proxy file: %w", err)
|
|
}
|
|
defer func() {
|
|
_ = file.Close()
|
|
}()
|
|
scanner := bufio.NewScanner(file)
|
|
for scanner.Scan() {
|
|
proxy := scanner.Text()
|
|
if strings.TrimSpace(proxy) == "" {
|
|
continue
|
|
}
|
|
proxyList = append(proxyList, proxy)
|
|
}
|
|
} else {
|
|
proxyList = append(proxyList, p)
|
|
}
|
|
}
|
|
aliveProxy, err := proxyutils.GetAnyAliveProxy(options.Timeout, proxyList...)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
proxyURL, err := url.Parse(aliveProxy)
|
|
if err != nil {
|
|
return errkit.Wrapf(err, "failed to parse proxy got %v", err)
|
|
}
|
|
if options.ProxyInternal {
|
|
setProxyEnv(proxyURL.String())
|
|
}
|
|
switch proxyURL.Scheme {
|
|
case proxyutils.HTTP, proxyutils.HTTPS:
|
|
if options.Logger != nil {
|
|
options.Logger.Verbose().Msgf("Using %s as proxy server", proxyURL.String())
|
|
}
|
|
options.AliveHttpProxy = proxyURL.String()
|
|
case proxyutils.SOCKS5:
|
|
options.AliveSocksProxy = proxyURL.String()
|
|
if options.Logger != nil {
|
|
options.Logger.Verbose().Msgf("Using %s as socket proxy server", proxyURL.String())
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// validateReplayProxy rejects a -replay-proxy value the replay client cannot dial
|
|
func validateReplayProxy(raw string) error {
|
|
if raw == "" {
|
|
return nil
|
|
}
|
|
proxyURL, err := url.Parse(raw)
|
|
if err != nil {
|
|
return errkit.Wrapf(err, "invalid replay proxy %q", raw)
|
|
}
|
|
switch proxyURL.Scheme {
|
|
case proxyutils.HTTP, proxyutils.HTTPS, proxyutils.SOCKS5:
|
|
if proxyURL.Host != "" {
|
|
return nil
|
|
}
|
|
}
|
|
return fmt.Errorf("invalid replay proxy %q: want an http, https or socks5 URL", raw)
|
|
}
|