mirror of
https://github.com/projectdiscovery/nuclei
synced 2026-06-08 16:50:47 +00:00
Dwi Siswanto
50996a7481
Prev. project keyed cache lookups from dumped HTTP
request bytes alone. For eq requests, this allowed
"http" and "https" targets to collide and reuse
cached responses across schemes.
Derive a scoped cache key by prefixing normalized
scheme://host before `projectfile.{Get,Set}`
keying input in the HTTP protocol path.
Close #6866
Signed-off-by: Dwi Siswanto <git@dw1.io>
47 lines
1.6 KiB
Go
47 lines
1.6 KiB
Go
package http
|
|
|
|
import (
|
|
"bytes"
|
|
"io"
|
|
"strings"
|
|
|
|
"github.com/projectdiscovery/nuclei/v3/pkg/protocols/common/generators"
|
|
"github.com/projectdiscovery/rawhttp"
|
|
"github.com/projectdiscovery/utils/errkit"
|
|
)
|
|
|
|
// dump creates a dump of the http request in form of a byte slice
|
|
func dump(req *generatedRequest, reqURL string) ([]byte, error) {
|
|
if req.request != nil {
|
|
// Use a clone to avoid a race condition with the http transport
|
|
bin, err := req.request.Clone(req.request.Context()).Dump()
|
|
if err != nil {
|
|
return nil, errkit.Wrapf(err, "could not dump request: %v", req.request.String())
|
|
}
|
|
return bin, nil
|
|
}
|
|
rawHttpOptions := &rawhttp.Options{CustomHeaders: req.rawRequest.UnsafeHeaders, CustomRawBytes: req.rawRequest.UnsafeRawBytes}
|
|
bin, err := rawhttp.DumpRequestRaw(req.rawRequest.Method, reqURL, req.rawRequest.Path, generators.ExpandMapValues(req.rawRequest.Headers), io.NopCloser(strings.NewReader(req.rawRequest.Data)), rawHttpOptions)
|
|
if err != nil {
|
|
return nil, errkit.Wrapf(err, "could not dump request: %v", reqURL)
|
|
}
|
|
return bin, nil
|
|
}
|
|
|
|
func getHTTPProjectCacheScope(requestDump []byte, scheme, host string) []byte {
|
|
scheme = strings.ToLower(strings.TrimSpace(scheme))
|
|
host = strings.ToLower(strings.TrimSpace(host))
|
|
if scheme == "" || host == "" {
|
|
return requestDump
|
|
}
|
|
|
|
var scoped bytes.Buffer
|
|
scoped.Grow(len(scheme) + len(host) + len(requestDump) + 4)
|
|
_, _ = scoped.WriteString(scheme)
|
|
_, _ = scoped.WriteString("://")
|
|
_, _ = scoped.WriteString(host)
|
|
_, _ = scoped.WriteString("\n")
|
|
_, _ = scoped.Write(requestDump)
|
|
return scoped.Bytes()
|
|
}
|