mirrors/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2025-07-14 05:12:36 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
影舞者 2022-05-26 11:23:19 +08:00
parent 11fb239c61
commit 198abff115
1 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
WebScan/lib/check.go
View File

@ -163,7 +163,7 @@ func executePoc(oReq *http.Request, p *Poc) (bool, error, string) {
} }
DealWithRule := func(rule Rules) (bool, error) { DealWithRule := func(rule Rules) (bool, error) {
rule.Headers = cloneMap(rule.Headers) Headers := cloneMap(rule.Headers)
var ( var (
flag, ok bool flag, ok bool
) )
@ -173,8 +173,11 @@ func executePoc(oReq *http.Request, p *Poc) (bool, error, string) {
continue continue
} }
value := fmt.Sprintf("%v", v1) value := fmt.Sprintf("%v", v1)
for k2, v2 := range rule.Headers { for k2, v2 := range Headers {
rule.Headers[k2] = strings.ReplaceAll(v2, "{{"+k1+"}}", value) if !strings.Contains(v2, "{{"+k1+"}}") {
continue
}
Headers[k2] = strings.ReplaceAll(v2, "{{"+k1+"}}", value)
} }
rule.Path = strings.ReplaceAll(strings.TrimSpace(rule.Path), "{{"+k1+"}}", value) rule.Path = strings.ReplaceAll(strings.TrimSpace(rule.Path), "{{"+k1+"}}", value)
rule.Body = strings.ReplaceAll(strings.TrimSpace(rule.Body), "{{"+k1+"}}", value) rule.Body = strings.ReplaceAll(strings.TrimSpace(rule.Body), "{{"+k1+"}}", value)
@ -191,7 +194,7 @@ func executePoc(oReq *http.Request, p *Poc) (bool, error, string) {
newRequest, _ := http.NewRequest(rule.Method, fmt.Sprintf("%s://%s%s", req.Url.Scheme, req.Url.Host, req.Url.Path), strings.NewReader(rule.Body)) newRequest, _ := http.NewRequest(rule.Method, fmt.Sprintf("%s://%s%s", req.Url.Scheme, req.Url.Host, req.Url.Path), strings.NewReader(rule.Body))
newRequest.Header = oReq.Header.Clone() newRequest.Header = oReq.Header.Clone()
for k, v := range rule.Headers { for k, v := range Headers {
newRequest.Header.Set(k, v) newRequest.Header.Set(k, v)
} }
resp, err := DoRequest(newRequest, rule.FollowRedirects) resp, err := DoRequest(newRequest, rule.FollowRedirects)