diff --git a/crawler/colly.go b/crawler/colly.go index 74337ef..7375689 100644 --- a/crawler/colly.go +++ b/crawler/colly.go @@ -256,7 +256,7 @@ func EndpointsMatch(target string, endpointsFile []string) []scanner.EndpointMat if len(endpointsFile) == 0 { for _, parameter := range scanner.GetJuicyParameters() { for _, param := range parameters { - if param == parameter.Parameter { + if strings.ToLower(param) == parameter.Parameter { matched = append(matched, parameter) } endpoints = append(endpoints, scanner.EndpointMatched{Parameters: matched, Url: target}) @@ -287,7 +287,7 @@ func huntExtensions(target string, severity int) scanner.FileTypeMatched { target = target[:firstIndex] } i := strings.LastIndex(target, ".") - if i >= 0 && target[i:] == "."+ext.Extension { + if i >= 0 && strings.ToLower(target[i:]) == "."+ext.Extension { extension = scanner.FileTypeMatched{Filetype: ext, Url: copyTarget} } } diff --git a/scanner/endpoints.go b/scanner/endpoints.go index b6c0f2c..e2ed12c 100644 --- a/scanner/endpoints.go +++ b/scanner/endpoints.go @@ -112,7 +112,7 @@ func GetJuicyParameters() []Parameter { {"return", []string{"OpenRedir", "SSRF"}}, {"continue", []string{"OpenRedir", "SSRF"}}, {"image_url", []string{"OpenRedir", "SSRF"}}, - {"returnTo", []string{"OpenRedir"}}, + {"returnto", []string{"OpenRedir"}}, {"return_to", []string{"OpenRedir"}}, {"checkout_url", []string{"OpenRedir", "SSRF"}}, {"return_path", []string{"OpenRedir"}},