Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

enhance fuzzing functionality of nuclei #4163

Closed
wants to merge 94 commits into from
Closed

Conversation

Ice3man543
Copy link
Member

@Ice3man543 Ice3man543 commented Sep 18, 2023

Proposed changes

Work in progress

Test run result: - https://gist.github.com/Ice3man543/f95d15bfb7d527ba92791cd91b0b7366

Checklist

  • Pull request is created against the dev branch
  • All checks passed (lint, unit/integration/regression tests etc.) with my changes
  • I have added tests that prove my fix is effective or that my feature works
  • I have added necessary documentation (if appropriate)

@ehsandeep ehsandeep changed the title [wip] enhance fuzzing functionality of nuclei enhance fuzzing functionality of nuclei Oct 2, 2023
@ehsandeep ehsandeep changed the base branch from feat-js-protocol to dev October 16, 2023 09:44
@ehsandeep ehsandeep linked an issue Oct 16, 2023 that may be closed by this pull request
@tarunKoyalwar
Copy link
Member

tarunKoyalwar commented Oct 21, 2023

Known Issues / Planned Changes

  • (common/fuzz) Rewrite querypartRule & headersPartRule tests with new methods/logic
  • (core/inputs/formats) Replace http.ReadRequest with manual/custom parser as it is strict http request parser and does not support unsafe raw requests
  • (core/inputs/formats) use OrderedParam to maintain Order of Headers while parsing (currently we use map[string][]string)
  • (core/inputs/formats) fix failing input format test of openapi, json and raw request
  • move package (pkg/protocols/common/fuzz) -> (pkg/fuzz) [ to avoid deep nested directories and easier access to fuzz module)

@Ice3man543
Copy link
Member Author

Superseded by #4477

@Ice3man543 Ice3man543 closed this Dec 9, 2023
@ehsandeep ehsandeep deleted the fuzz-enhancements branch March 2, 2024 21:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Status: In Progress This issue is being worked on, and has someone assigned.
Projects
None yet
4 participants