fix AutomaticScan默认开启后导致nuclei模版不会扫描的bug 2022-07-12 10:00:1657591231

Author: x51pwn

brute/filefuzz.go

@@ -159,9 +159,14 @@ func FileFuzz(u string, indexStatusCode int, indexContentLength int, indexbody s
 		}
 		ch <- struct{}{}
 		//log.Println(u, " ", payload)
+		endP := u[len(u)-1:] == "/"
 		go func(payload string) {
-			log.Println("fuzz: ", u+payload)
-			if url, req, err := reqPage(u + payload); err == nil {
+			szUrl := u + payload
+			if strings.HasPrefix(payload, "/") && endP {
+				szUrl = u + payload[1:]
+			}
+			log.Println("fuzz: ", szUrl)
+			if url, req, err := reqPage(szUrl); err == nil {
 				// 403 by pass
 				if url.is403 {
 					a11 := ByPass403(&u, &payload)

nuclei_Yaml/nuclei_yaml.go

@@ -2,19 +2,19 @@ package nuclei_Yaml
 
 import (
 	"bytes"
-	"github.com/hktalent/scan4all/pkg"
-	"log"
-	"os"
-	"strings"
-	"time"
-
 	"github.com/hktalent/scan4all/nuclei_Yaml/internal/runner"
+	"github.com/hktalent/scan4all/pkg"
 	"github.com/projectdiscovery/fileutil"
 	"github.com/projectdiscovery/goflags"
 	"github.com/projectdiscovery/gologger"
 	"github.com/projectdiscovery/nuclei/v2/pkg/catalog/config"
 	"github.com/projectdiscovery/nuclei/v2/pkg/protocols/http"
+	templateTypes "github.com/projectdiscovery/nuclei/v2/pkg/templates/types"
 	"github.com/projectdiscovery/nuclei/v2/pkg/types"
+	"log"
+	"os"
+	"strings"
+	"time"
 )
 
 var (
@@ -77,7 +77,8 @@ func readConfig() {
 	options.Resume = ""
 
 	options.NewTemplates = false
-	options.AutomaticScan = true
+	// 关闭 AutomaticScan，否则不对模版进行扫描
+	options.AutomaticScan = false
 	options.Templates = []string{}
 	options.TemplateURLs = []string{}
 	options.Workflows = []string{}
@@ -171,7 +172,9 @@ func readConfig() {
 	//flagSet.VarP(&options.Protocols, "type", "pt", fmt.Sprintf("templates to run based on protocol type. Possible values: %s", templateTypes.GetSupportedProtocolTypes())),
 	//flagSet.VarP(&options.ExcludeProtocols, "exclude-type", "ept", fmt.Sprintf("templates to exclude based on protocol type. Possible values: %s", templateTypes.GetSupportedProtocolTypes())),
 	//)
-	//
+	options.Protocols = templateTypes.GetSupportedProtocolTypes()
+	//options.ExcludeProtocols = templateTypes.GetSupportedProtocolTypes()
+
 	//createGroup(flagSet, "output", "Output",
 	//	flagSet.StringVarP(&options.Output, "output", "o", "", "output file to write found issues/vulnerabilities"),
 	//	flagSet.BoolVarP(&options.StoreResponse, "store-resp", "sresp", false, "store all request/response passed through nuclei to output directory"),