From 44a3376a42f0de4b3c19bc0bd86adb4bfc20d5e2 Mon Sep 17 00:00:00 2001 From: hktalent <18223385+hktalent@users.noreply.github.com> Date: Wed, 5 Oct 2022 16:08:16 +0800 Subject: [PATCH] fix someMapMutex.Unlock() vendor/github.com/projectdiscovery/nuclei/v2/pkg/protocols/http/request.go 2022-10-05 --- .gitmodules | 4 +- HomebrewFormula/scan4all.rb | 2 +- README.md | 4 +- README_CN.md | 2 +- brute/dicts/filedic.txt | 28 ++++----- config/config.json | 2 +- config/databases/db_dictionary | 2 +- config/databases/db_server_msgs | 6 +- config/databases/db_tests | 30 ++++----- config/wordlists/headers | 60 +++++++++--------- config/wordlists/parameters | 2 +- ...ellyfin_Audio_File_read_CVE_2021_21402.txt | 4 +- .../JingHe_OA_download.asp_File_read.txt | 2 +- ...pXO_download_File_read_CNVD_2021_15822.txt | 4 +- ... OA Arbitrary User Login Vulnerability.txt | 2 +- ...TopSec_TopACM_Remote_Command_Execution.txt | 4 +- ...hp_arbitrary_file_upload_vulnerability.txt | 4 +- lib/goby/goby_pocs/showDocGo.txt | 4 +- lib/util/sv2es.go | 63 +++++++------------ static/NicePwn.md | 4 +- .../nuclei/v2/pkg/protocols/http/request.go | 4 +- 21 files changed, 110 insertions(+), 127 deletions(-) diff --git a/.gitmodules b/.gitmodules index 9aef7a590..622d50000 100644 --- a/.gitmodules +++ b/.gitmodules @@ -1,6 +1,6 @@ [submodule "nuclei-templates"] path = nuclei-templates - url = git@github.com:hktalent/nuclei-templates.git + szUrl = git@github.com:hktalent/nuclei-templates.git [submodule "config/nuclei-templates"] path = config/nuclei-templates - url = http://github.com/hktalent/nuclei-templates + szUrl = http://github.com/hktalent/nuclei-templates diff --git a/HomebrewFormula/scan4all.rb b/HomebrewFormula/scan4all.rb index 01a3e0d7c..a992dfd15 100644 --- a/HomebrewFormula/scan4all.rb +++ b/HomebrewFormula/scan4all.rb @@ -1,7 +1,7 @@ class Rage < Formula desc "Official repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( ͡° ͜ʖ ͡°)..." homepage "https://scan4all.51pwn.com" - url "https://github.com/hktalent/scan4all/releases/download/2.8.1/scan4all_2.8.1_macOS_amd64.zip" + szUrl "https://github.com/hktalent/scan4all/releases/download/2.8.1/scan4all_2.8.1_macOS_amd64.zip" sha256 "2af8d9f67bae7c03ef20d064b2f23e7bef4c95f0cf7e1da33cbd42fcceabeb39" version "2.8.1" diff --git a/README.md b/README.md index 12c209933..24d157178 100644 --- a/README.md +++ b/README.md @@ -1,4 +1,4 @@ -[![Tweet](https://img.shields.io/twitter/url/http/Hktalent3135773.svg?style=social)](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [![Follow on Twitter](https://img.shields.io/twitter/follow/Hktalent3135773.svg?style=social&label=Follow)](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [![GitHub Followers](https://img.shields.io/github/followers/hktalent.svg?style=social&label=Follow)](https://github.com/hktalent/) +[![Tweet](https://img.shields.io/twitter/szUrl/http/Hktalent3135773.svg?style=social)](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [![Follow on Twitter](https://img.shields.io/twitter/follow/Hktalent3135773.svg?style=social&label=Follow)](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [![GitHub Followers](https://img.shields.io/github/followers/hktalent.svg?style=social&label=Follow)](https://github.com/hktalent/)

README_中文 • Compile/Install/Run • @@ -149,7 +149,7 @@ where 92.168.0.111 is the target to query Using Help ```bash go build -# Precise scan url list UrlPrecise=true +# Precise scan szUrl list UrlPrecise=true UrlPrecise=true ./scan4all -l xx.txt # Disable adaptation to nmap and use naabu port to scan its internally defined http-related Ports priorityNmap=false ./scan4all -tp http -list allOut.txt -v diff --git a/README_CN.md b/README_CN.md index 4e28c7faf..dd0f3f2f5 100644 --- a/README_CN.md +++ b/README_CN.md @@ -1,4 +1,4 @@ -[![Tweet](https://img.shields.io/twitter/url/http/Hktalent3135773.svg?style=social)](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [![Follow on Twitter](https://img.shields.io/twitter/follow/Hktalent3135773.svg?style=social&label=Follow)](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [![GitHub Followers](https://img.shields.io/github/followers/hktalent.svg?style=social&label=Follow)](https://github.com/hktalent/) +[![Tweet](https://img.shields.io/twitter/szUrl/http/Hktalent3135773.svg?style=social)](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [![Follow on Twitter](https://img.shields.io/twitter/follow/Hktalent3135773.svg?style=social&label=Follow)](https://twitter.com/intent/follow?screen_name=Hktalent3135773) [![GitHub Followers](https://img.shields.io/github/followers/hktalent.svg?style=social&label=Follow)](https://github.com/hktalent/)

README_EN • 编译/安装/运行 • diff --git a/brute/dicts/filedic.txt b/brute/dicts/filedic.txt index 4bab15d42..eaa25c377 100644 --- a/brute/dicts/filedic.txt +++ b/brute/dicts/filedic.txt @@ -2134,7 +2134,7 @@ $metadata /api/payment?id= /api/prod/services /api/proxy -/api/proxy?url= +/api/proxy?szUrl= /api/saved_objects/_find?type=index-pattern&per_page=100 /api/search /api/sessions @@ -7658,7 +7658,7 @@ api/payment?id= api/product/toprank api/profile api/proxy -api/proxy?url= +api/proxy?szUrl= api/put api/quiet api/reload @@ -15448,9 +15448,9 @@ gotdotnet gotemp.php gotest.sh goto -gotoURL.asp?url=google.com&id=43569 +gotoURL.asp?szUrl=google.com&id=43569 goto_step.sh -gotourl.asp?url=google.com&id=43569 +gotourl.asp?szUrl=google.com&id=43569 gpg.sh gphotos gpl.txt @@ -22706,10 +22706,10 @@ plugins/editors/fckeditor plugins/fckeditor plugins/filemanager/filemanager/js plugins/servlet/gadgets/makeRequest -plugins/servlet/gadgets/makeRequest?url=https://google.com +plugins/servlet/gadgets/makeRequest?szUrl=https://google.com plugins/servlet/gadgets/makerequest -plugins/servlet/gadgets/makerequest?url=https -plugins/servlet/gadgets/makerequest?url=https://google.com +plugins/servlet/gadgets/makerequest?szUrl=https +plugins/servlet/gadgets/makerequest?szUrl=https://google.com plugins/servlet/oauth/users/icon plugins/sfSWFUploadPlugin/web/sfSWFUploadPlugin/swf/swfupload.swf plugins/sfSWFUploadPlugin/web/sfSWFUploadPlugin/swf/swfupload_f9.swf @@ -27943,9 +27943,9 @@ ur-admin/ urban uresk uri -url -url.jsp -url.php +szUrl +szUrl.jsp +szUrl.php url_1.sql url_2.sql urlList. @@ -29929,7 +29929,7 @@ wp-content/plugins/elementor-pro/assets/css/frontend.min.css wp-content/plugins/google-sitemap-generator/sitemap-core.php wp-content/plugins/hello.php wp-content/plugins/jekyll-exporter/vendor/phpunit/phpunit/src/util/php/eval-stdin.php -wp-content/plugins/jrss-widget/proxy.php?url= +wp-content/plugins/jrss-widget/proxy.php?szUrl= wp-content/plugins/master-slider/public/assets/css/masterslider.main.css?ver=2.9.8 wp-content/plugins/master-slider/public/assets/js/jquery.easing.min.js?ver=2.9.8 wp-content/plugins/master-slider/public/assets/js/masterslider.min.js?ver=2.9.8 @@ -30040,9 +30040,9 @@ wp-includes/rss-functions.php wp-includes/wlwmanifest.xml wp-json wp-json/ -wp-json/oembed/1.0/embed?url=http:/172.105.71.142 -wp-json/oembed/1.0/embed?url=http:/lovi.studio -wp-json/oembed/1.0/embed?url=http:/onestopsla.com +wp-json/oembed/1.0/embed?szUrl=http:/172.105.71.142 +wp-json/oembed/1.0/embed?szUrl=http:/lovi.studio +wp-json/oembed/1.0/embed?szUrl=http:/onestopsla.com wp-json/wp/v2/users wp-json/wp/v2/users/ wp-license.php diff --git a/config/config.json b/config/config.json index b733dc30b..473cdb8c0 100644 --- a/config/config.json +++ b/config/config.json @@ -73,7 +73,7 @@ "naabu": {"TopPorts": "1000","ScanAllIPS": true,"Threads": 50,"EnableProgressBar": false}, "priorityNmap": true, "noScan": false, - "enableMultNuclei": true, + "enableMultNuclei": false, "enableNuclei": true, "nuclei": { "Severities": [5,4,3], diff --git a/config/databases/db_dictionary b/config/databases/db_dictionary index 6c3d9fe75..0d27bb566 100644 --- a/config/databases/db_dictionary +++ b/config/databases/db_dictionary @@ -1683,7 +1683,7 @@ upfiles upload uploader uploads -url +szUrl urls us usa diff --git a/config/databases/db_server_msgs b/config/databases/db_server_msgs index c7e330967..c52dd9745 100644 --- a/config/databases/db_server_msgs +++ b/config/databases/db_server_msgs @@ -118,7 +118,7 @@ "800098","jakarta-tomcat-4.0.1","0","Server will reveal path" "800099","JavaWebServer","0","Probably Sun Microsystem's servlet interface. May have default code which is exploitable. Try admin/admin for id/password." "800100","JetAdmin","0","HP Printer" -"800101","Jeus WebContainer\/([0-3]\.[0-2]\..*)","0","JEUS below 3.2.2 is vulnerable to XSS if a nonexistent url is requested, i.e. [victim site]/[javascript].jsp" +"800101","Jeus WebContainer\/([0-3]\.[0-2]\..*)","0","JEUS below 3.2.2 is vulnerable to XSS if a nonexistent szUrl is requested, i.e. [victim site]/[javascript].jsp" "800102","Jigsaw\/([0-1].*|2\.([0-1].*|2\.0))","0","Jigsaw 2.1.0 or below may be vulnerable to XSS if a nonexistent host name is requested, i.e. nosuchhost.domain.com/","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","","GET","&op=browse","GET","","GET","","GET","