1ec64a3f95
chore(deps): bump pdsec modules; switch to projectdiscovery/govaluate and aurora v4
...
Bumps clistats, fastdialer, retryablehttp-go, dsl, networkpolicy,
ratelimit, sarif, utils, wappalyzergo, cdncheck. dsl v0.8.18 moves to
the projectdiscovery/govaluate fork, and utils v0.11.0 pulls aurora v4,
so the corresponding imports and type references are migrated.
Refs #7380 .
2026-05-18 17:14:29 +03:00
63e5492ce3
ci: integrate typos spell checker into CI workflow
...
Add the crate-ci/typos GitHub Action to automatically catch spelling
errors in future PRs. This includes:
- New `.github/workflows/typos.yaml` workflow that runs on pushes to
dev, pull requests, and manual dispatch
- `_typos.toml` configuration to suppress false positives from
non-English READMEs, test fixtures, certificate data, CLI flag
short names, and intentional identifiers
- Fix genuine typos found by the tool:
- `PostReuestsHandlerRequest` -> `PostRequestsHandlerRequest`
- `fiter` -> `filter`
- `thant` -> `that`
- `seperate` -> `separate`
- `ExludedDastTmplStats` -> `ExcludedDastTmplStats`
- `splitted` -> `split` (local variables)
- `formated` -> `formatted` (local variables)
- Rename `worflow_loader.go` -> `workflow_loader.go`
Fixes #6532
2026-03-08 22:11:26 -04:00
75525ed431
fix(loader): replace panic with error handling in template loader
...
Replace panic with proper error return when dialers are missing,
allowing callers to handle the situation gracefully.
Changes:
- Modify LoadTemplatesWithTags to return ([]*templates.Template, error)
- Modify LoadTemplates to return ([]*templates.Template, error)
- Modify Load to return error
- Replace panic("dialers with executionId...") with fmt.Errorf
- Replace panic("could not create wait group") with fmt.Errorf
- Update all callers to handle the new error return
Callers updated:
- internal/runner/lazy.go
- internal/runner/runner.go
- internal/server/nuclei_sdk.go
- lib/multi.go
- lib/sdk.go
- cmd/integration-test/library.go
- pkg/protocols/common/automaticscan/util.go
- pkg/catalog/loader/loader_bench_test.go
Fixes #6674
2026-02-06 17:10:21 +07:00
f26996cb89
Remove singletons from Nuclei engine (continuation of #6210 ) ( #6296 )
...
* introducing execution id
* wip
* .
* adding separate execution context id
* lint
* vet
* fixing pg dialers
* test ignore
* fixing loader FD limit
* test
* fd fix
* wip: remove CloseProcesses() from dev merge
* wip: fix merge issue
* protocolstate: stop memguarding on last dialer delete
* avoid data race in dialers.RawHTTPClient
* use shared logger and avoid race conditions
* use shared logger and avoid race conditions
* go mod
* patch executionId into compiled template cache
* clean up comment in Parse
* go mod update
* bump echarts
* address merge issues
* fix use of gologger
* switch cmd/nuclei to options.Logger
* address merge issues with go.mod
* go vet: address copy of lock with new Copy function
* fixing tests
* disable speed control
* fix nil ExecuterOptions
* removing deprecated code
* fixing result print
* default logger
* cli default logger
* filter warning from results
* fix performance test
* hardcoding path
* disable upload
* refactor(runner): uses `Warning` instead of `Print` for `pdcpUploadErrMsg`
Signed-off-by: Dwi Siswanto <git@dw1.io >
* Revert "disable upload"
This reverts commit 114fbe6663cf12ca800egit@dw1.io >
Co-authored-by: Mzack9999 <mzack9999@protonmail.com >
Co-authored-by: Dwi Siswanto <git@dw1.io >
Co-authored-by: Dwi Siswanto <25837540+dwisiswant0@users.noreply.github.com >
2025-07-10 01:17:26 +05:30
87ed0b2bb9
build: bump all direct modules ( #6290 )
...
* chore: fix non-constant fmt string in call
Signed-off-by: Dwi Siswanto <git@dw1.io >
* build: bump all direct modules
Signed-off-by: Dwi Siswanto <git@dw1.io >
* chore(hosterrorscache): update import path
Signed-off-by: Dwi Siswanto <git@dw1.io >
* fix(charts): break changes
Signed-off-by: Dwi Siswanto <git@dw1.io >
* build: pinned `github.com/zmap/zcrypto` to v0.0.0-20240512203510-0fef58d9a9db
Signed-off-by: Dwi Siswanto <git@dw1.io >
* chore: golangci-lint auto fixes
Signed-off-by: Dwi Siswanto <git@dw1.io >
* chore: satisfy lints
Signed-off-by: Dwi Siswanto <git@dw1.io >
* build: migrate `github.com/xanzy/go-gitlab` => `gitlab.com/gitlab-org/api/client-go`
Signed-off-by: Dwi Siswanto <git@dw1.io >
* feat(json): update build constraints
Signed-off-by: Dwi Siswanto <git@dw1.io >
* chore: dont panicking on close err
Signed-off-by: Dwi Siswanto <git@dw1.io >
---------
Signed-off-by: Dwi Siswanto <git@dw1.io >
2025-07-01 00:40:44 +07:00
5f0b7eb19b
feat: added initial live DAST server implementation ( #5772 )
...
* feat: added initial live DAST server implementation
* feat: more logging + misc additions
* feat: auth file support enhancements for more complex scenarios + misc
* feat: added io.Reader support to input providers for http
* feat: added stats db to fuzzing + use sdk for dast server + misc
* feat: more additions and enhancements
* misc changes to live server
* misc
* use utils pprof server
* feat: added simpler stats tracking system
* feat: fixed analyzer timeout issue + missing case fix
* misc changes fix
* feat: changed the logics a bit + misc changes and additions
* feat: re-added slope checks + misc
* feat: added baseline measurements for time based checks
* chore(server): fix typos
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* fix(templates): potential DOM XSS
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* fix(authx): potential NIL deref
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* feat: misc review changes
* removed debug logging
* feat: remove existing cookies only
* feat: lint fixes
* misc
* misc text update
* request endpoint update
* feat: added tracking for status code, waf-detection & grouped errors (#6028 )
* feat: added tracking for status code, waf-detection & grouped errors
* lint error fixes
* feat: review changes + moving to package + misc
---------
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com >
* fix var dump (#5921 )
* fix var dump
* fix dump test
* Added filename length restriction for debug mode (-srd flag) (#5931 )
Co-authored-by: Andrey Matveenko <an.matveenko@vkteam.ru >
* more updates
* Update pkg/output/stats/waf/waf.go
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
---------
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com >
Co-authored-by: Dwi Siswanto <25837540+dwisiswant0@users.noreply.github.com >
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: Dogan Can Bakir <65292895+dogancanbakir@users.noreply.github.com >
Co-authored-by: 9flowers <51699499+Lercas@users.noreply.github.com >
Co-authored-by: Andrey Matveenko <an.matveenko@vkteam.ru >
Co-authored-by: Sandeep Singh <sandeep@projectdiscovery.io >
2025-02-13 18:46:28 +05:30
Doğan Can Bakır