Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

v3.2.3 #4983

Merged
merged 47 commits into from
Apr 3, 2024
Merged

v3.2.3 #4983

merged 47 commits into from
Apr 3, 2024

Conversation

ehsandeep
Copy link
Member

@ehsandeep ehsandeep commented Apr 2, 2024 •
edited
Loading

Proposed changes

Fixes for fuzzing engine / templates

Checklist

  • Pull request is created against the dev branch
  • All checks passed (lint, unit/integration/regression tests etc.) with my changes
  • I have added tests that prove my fix is effective or that my feature works
  • I have added necessary documentation (if appropriate)

dependabot bot and others added 30 commits March 18, 2024 05:03
@dependabot
chore(deps): bump github.com/projectdiscovery/retryablehttp-go
a9d5f24 
Bumps [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) from 1.0.51 to 1.0.52.
- [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases)
- [Commits](projectdiscovery/retryablehttp-go@v1.0.51...v1.0.52)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/retryablehttp-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
chore(deps): bump github.com/projectdiscovery/fastdialer
269dd4c 
Bumps [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer) from 0.0.62 to 0.0.63.
- [Release notes](https://github.com/projectdiscovery/fastdialer/releases)
- [Commits](projectdiscovery/fastdialer@v0.0.62...v0.0.63)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/fastdialer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
chore(deps): bump github.com/projectdiscovery/utils
31568a0 
Bumps [github.com/projectdiscovery/utils](https://github.com/projectdiscovery/utils) from 0.0.84-0.20240313184656-e3ec80f4dd42 to 0.0.84.
- [Release notes](https://github.com/projectdiscovery/utils/releases)
- [Changelog](https://github.com/projectdiscovery/utils/blob/main/CHANGELOG.md)
- [Commits](https://github.com/projectdiscovery/utils/commits/v0.0.84)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/utils
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
Merge pull request #4909 from projectdiscovery/dependabot/go_modules/…
1975a1f 
…dev/github.com/projectdiscovery/retryablehttp-go-1.0.52
@dependabot
Merge pull request #4911 from projectdiscovery/dependabot/go_modules/…
ec99927 
…dev/github.com/projectdiscovery/fastdialer-0.0.63
@dependabot
chore(deps): bump github.com/projectdiscovery/dsl from 0.0.46 to 0.0.48
e8f1cc3 
Bumps [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) from 0.0.46 to 0.0.48.
- [Release notes](https://github.com/projectdiscovery/dsl/releases)
- [Commits](projectdiscovery/dsl@v0.0.46...v0.0.48)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/dsl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
chore(deps): bump github.com/projectdiscovery/rawhttp
62bdee9 
Bumps [github.com/projectdiscovery/rawhttp](https://github.com/projectdiscovery/rawhttp) from 0.1.40 to 0.1.41.
- [Release notes](https://github.com/projectdiscovery/rawhttp/releases)
- [Commits](projectdiscovery/rawhttp@v0.1.40...v0.1.41)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/rawhttp
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
Merge pull request #4912 from projectdiscovery/dependabot/go_modules/…
c631b82 
…dev/github.com/projectdiscovery/utils-0.0.84
@dependabot
Merge pull request #4910 from projectdiscovery/dependabot/go_modules/…
7c5e847 
…dev/github.com/projectdiscovery/rawhttp-0.1.41
@dependabot
Merge pull request #4913 from projectdiscovery/dependabot/go_modules/…
6d3fac7 
…dev/github.com/projectdiscovery/dsl-0.0.48
@dependabot
chore(deps): bump github.com/docker/docker
7b72c7c 
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.7+incompatible to 24.0.9+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v24.0.7...v24.0.9)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
Merge pull request #4924 from projectdiscovery/dependabot/go_modules/…
bc26817 
…github.com/docker/docker-24.0.9incompatible
@tarunKoyalwar
Multiple bug fixes in query param fuzzing (#4925)
c1bd4f8 
* fuzz: check and handle typed slice

* do not query encode params + fuzz/allow duplicates params

* sometimes order matters ~query params

* component: fix broken iterator

* result upload add meta params
@dependabot
chore(deps): bump github.com/projectdiscovery/fastdialer
663b6df 
Bumps [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer) from 0.0.63 to 0.0.64.
- [Release notes](https://github.com/projectdiscovery/fastdialer/releases)
- [Commits](projectdiscovery/fastdialer@v0.0.63...v0.0.64)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/fastdialer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
Merge pull request #4940 from projectdiscovery/dependabot/go_modules/…
728e00c 
…dev/github.com/projectdiscovery/fastdialer-0.0.64
@kchason
Initial switch of libraries
fb3c3d8
@kchason
Remove YAML designated formatters
0feb94a
@tarunKoyalwar
minor updates
17d67f6
@tarunKoyalwar
Merge pull request #4943 from kchason/3690-replace-jsonschema
c123a4b 
Update JSONSchema Libraries
@actions-user
Auto Generate Syntax Docs + JSONSchema [Wed Mar 27 18:35:05 UTC 2024]…
78300e3 
… :robot:
@tarunKoyalwar
add -dast flag and multiple bug fixes for dast templates (#4941)
e88889b 
* add default get method

* remove residual payload logic from old implementation

* fuzz: clone current state of component

* fuzz: bug fix stacking of payloads in multiple mode

* improve stdout template loading stats

* stdout: force display warnings if no templates are loaded

* update flags in README.md

* quote non-ascii chars in extractor output

* aws request signature can only be used in signed & verified tmpls

* deprecate request signature

* remove logic related to deprecated fuzzing input

* update test to use ordered params

* fix interactsh-url lazy eval: #4946

* output: skip unnecessary updates when unescaping

* updates as per requested changes
@llussy
fix go version and format. (#4958)
cfbd56c
@actions-user
Auto Generate Syntax Docs + JSONSchema [Fri Mar 29 08:03:07 UTC 2024]…
5ce912e 
… :robot:
@tarunKoyalwar
req_url_pattern for vuln_hash calculation + unit test (#4964)
25e7799
@dependabot
chore(deps): bump github.com/projectdiscovery/retryablehttp-go
4c86b3b 
Bumps [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) from 1.0.52 to 1.0.54.
- [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases)
- [Commits](projectdiscovery/retryablehttp-go@v1.0.52...v1.0.54)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/retryablehttp-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
chore(deps): bump github.com/projectdiscovery/ratelimit
90ae6fc 
Bumps [github.com/projectdiscovery/ratelimit](https://github.com/projectdiscovery/ratelimit) from 0.0.27 to 0.0.35.
- [Release notes](https://github.com/projectdiscovery/ratelimit/releases)
- [Commits](projectdiscovery/ratelimit@v0.0.27...v0.0.35)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/ratelimit
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
chore(deps): bump github.com/projectdiscovery/dsl from 0.0.48 to 0.0.50
cf67d4d 
Bumps [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) from 0.0.48 to 0.0.50.
- [Release notes](https://github.com/projectdiscovery/dsl/releases)
- [Commits](projectdiscovery/dsl@v0.0.48...v0.0.50)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/dsl
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
Merge pull request #4971 from projectdiscovery/dependabot/go_modules/…
c8783e6 
…dev/github.com/projectdiscovery/ratelimit-0.0.35
@dependabot
Merge pull request #4974 from projectdiscovery/dependabot/go_modules/…
07ce7ef 
…dev/github.com/projectdiscovery/dsl-0.0.50
@dependabot
chore(deps): bump github.com/projectdiscovery/goflags
d5cfee7 
Bumps [github.com/projectdiscovery/goflags](https://github.com/projectdiscovery/goflags) from 0.1.42 to 0.1.46.
- [Release notes](https://github.com/projectdiscovery/goflags/releases)
- [Commits](projectdiscovery/goflags@v0.1.42...v0.1.46)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/goflags
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
dependabot bot and others added 17 commits April 1, 2024 05:53
@dependabot
Merge pull request #4970 from projectdiscovery/dependabot/go_modules/…
8a25cb4 
…dev/github.com/projectdiscovery/retryablehttp-go-1.0.54
@dependabot
Merge pull request #4973 from projectdiscovery/dependabot/go_modules/…
ddf9477 
…dev/github.com/projectdiscovery/goflags-0.1.46
@tarunKoyalwar
fix empty template-id in scan logs (#4969)
1d8b10b
@tarunKoyalwar
pre-condition in code , fuzz and other misc updates (#4966)
255032f 
* fuzz: rename 'filters' -> 'pre-condition'

* code proto: pre-condition + integration test

* feat: dsl document generator

* update dsl page header

* fix lint error

* add js defined helper funcs in docs

* remove panic recovery unless its for third party(go-rod,goja)

* handle dynamic values flattening edgecase in flow+multiprotocol

* fix order of kv in form-data (failing test)

* fix template loading counters

* Revert "handle dynamic values flattening edgecase in flow+multiprotocol"

This reverts commit 58fdd4f.

* fix flow iteration using 'iterate'
@actions-user
Auto Generate Syntax Docs + JSONSchema [Mon Apr 1 13:49:30 UTC 2024] …
39ee0b7 
…:robot:
@dependabot
chore(deps): bump github.com/projectdiscovery/wappalyzergo
b4b71d9 
Bumps [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) from 0.0.112 to 0.0.116.
- [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases)
- [Commits](projectdiscovery/wappalyzergo@v0.0.112...v0.0.116)

---
updated-dependencies:
- dependency-name: github.com/projectdiscovery/wappalyzergo
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
Merge pull request #4972 from projectdiscovery/dependabot/go_modules/…
5443c1c 
…dev/github.com/projectdiscovery/wappalyzergo-0.0.116
@dogancanbakir @ehsandeep
fix nocolor output (#4954)
dccfc10 
Co-authored-by: Sandeep Singh <[email protected]>
@tarunKoyalwar
bump utils (#4975)
9951626 
* bump utils

* fix windows build + dev version update

* use utils from main

* use v0.0.87 of utils
@dependabot
chore(deps): bump github.com/quic-go/quic-go from 0.40.1 to 0.42.0
86b8496 
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.40.1 to 0.42.0.
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Changelog](https://github.com/quic-go/quic-go/blob/master/Changelog.md)
- [Commits](quic-go/quic-go@v0.40.1...v0.42.0)

---
updated-dependencies:
- dependency-name: github.com/quic-go/quic-go
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
Merge pull request #4982 from projectdiscovery/dependabot/go_modules/…
abc8ac8 
…github.com/quic-go/quic-go-0.42.0
@tarunKoyalwar
fix multiple panics & missing matcher-status in flow templates (#4978)
3907e20 
* validate and fix empty internal-event

* fix on error with interactsh req

* disable clustering in flow & multiproto

* fix empty/missing matcher-status result

* fix cluster unit test

* fix no results found unit test
@tibbon
Remove prefix v from Sarif exporters (#4976)
143f179 
because: In config.Version there is already
a `v`` prefix, such as `v3.2.2``.

Prior to this commit the versions were being
tagged as `vv3.2.2`

this commit: Removes the 'v' prefix from the
Sarif exporter in the ToolDetails for both
FullName and SemanticVersion.
@ehsandeep
syntax update in test
03b2fb5
@ehsandeep
Merge branch 'dev' of https://github.com/projectdiscovery/nuclei into…
6b5e0ba 
… dev
@ehsandeep
misc option update
b687c11
@dogancanbakir
fix raw req single slash issue (#4955)
e994206 
* fix raw req single slash issue

* fix raw unsafe req single slash issue

* commit to last commit

* minor
@ehsandeep ehsandeep marked this pull request as ready for review April 3, 2024 14:17
@ehsandeep ehsandeep merged commit 9957003 into main Apr 3, 2024
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
7 participants
@ehsandeep @tarunKoyalwar @kchason @actions-user @llussy @dogancanbakir @tibbon