WEBDIENSTE/cariddi
1
0
Fork 0
mirror of https://github.com/edoardottt/cariddi.git synced 2026-09-22 17:44:58 +02:00
Code Issues Packages Projects Releases Wiki Activity

update

Browse Source
This commit is contained in:
edoardottt
2021-07-03 22:14:51 +02:00
parent 460024bd6d
commit 33d5cc89a6
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crawler/colly.go
+2 -2
View File
@@ -256,7 +256,7 @@ func EndpointsMatch(target string, endpointsFile []string) []scanner.EndpointMat
if len(endpointsFile) == 0 {
for _, parameter := range scanner.GetJuicyParameters() {
for _, param := range parameters {
if param == parameter.Parameter {
if strings.ToLower(param) == parameter.Parameter {
matched = append(matched, parameter)
}
endpoints = append(endpoints, scanner.EndpointMatched{Parameters: matched, Url: target})
@@ -287,7 +287,7 @@ func huntExtensions(target string, severity int) scanner.FileTypeMatched {
target = target[:firstIndex]
}
i := strings.LastIndex(target, ".")
if i >= 0 && target[i:] == "."+ext.Extension {
if i >= 0 && strings.ToLower(target[i:]) == "."+ext.Extension {
extension = scanner.FileTypeMatched{Filetype: ext, Url: copyTarget}
}
}
scanner/endpoints.go
+1 -1
View File
@@ -112,7 +112,7 @@ func GetJuicyParameters() []Parameter {
{"return", []string{"OpenRedir", "SSRF"}},
{"continue", []string{"OpenRedir", "SSRF"}},
{"image_url", []string{"OpenRedir", "SSRF"}},
{"returnTo", []string{"OpenRedir"}},
{"returnto", []string{"OpenRedir"}},
{"return_to", []string{"OpenRedir"}},
{"checkout_url", []string{"OpenRedir", "SSRF"}},
{"return_path", []string{"OpenRedir"}},