ffuff/pkg/input/command.go
Joona Hoikkala 9bddff79b9
New functionality to map fired blind payloads back to the initial request (#632)
* Fix ioutil deprecation and use xdg paths instead (wip)

* Clean up deprecated ioutil references, add config directory structure creation and run entry creation

* Add wordlist position setting and FFUFHASH variable

* Save full wordlist paths and print out a raw request when searched

* Cast from string to 32bit integer, 2billion should be enough for a position

* Use correct format strings for float
2023-02-02 11:51:11 +02:00

96 lines
1.9 KiB
Go

package input
import (
"bytes"
"os"
"os/exec"
"strconv"
"github.com/ffuf/ffuf/pkg/ffuf"
)
type CommandInput struct {
config *ffuf.Config
count int
active bool
keyword string
command string
shell string
}
func NewCommandInput(keyword string, value string, conf *ffuf.Config) (*CommandInput, error) {
var cmd CommandInput
cmd.active = true
cmd.keyword = keyword
cmd.config = conf
cmd.count = 0
cmd.command = value
cmd.shell = SHELL_CMD
if cmd.config.InputShell != "" {
cmd.shell = cmd.config.InputShell
}
return &cmd, nil
}
// Keyword returns the keyword assigned to this InternalInputProvider
func (c *CommandInput) Keyword() string {
return c.keyword
}
// Position will return the current position in the input list
func (c *CommandInput) Position() int {
return c.count
}
// SetPosition will set the current position of the inputprovider
func (c *CommandInput) SetPosition(pos int) {
c.count = pos
}
// ResetPosition will reset the current position of the InternalInputProvider
func (c *CommandInput) ResetPosition() {
c.count = 0
}
// IncrementPosition increments the current position in the inputprovider
func (c *CommandInput) IncrementPosition() {
c.count += 1
}
// Next will increment the cursor position, and return a boolean telling if there's iterations left
func (c *CommandInput) Next() bool {
return c.count < c.config.InputNum
}
// Value returns the input from command stdoutput
func (c *CommandInput) Value() []byte {
var stdout bytes.Buffer
os.Setenv("FFUF_NUM", strconv.Itoa(c.count))
cmd := exec.Command(c.shell, SHELL_ARG, c.command)
cmd.Stdout = &stdout
err := cmd.Run()
if err != nil {
return []byte("")
}
return stdout.Bytes()
}
// Total returns the size of wordlist
func (c *CommandInput) Total() int {
return c.config.InputNum
}
func (c *CommandInput) Active() bool {
return c.active
}
func (c *CommandInput) Enable() {
c.active = true
}
func (c *CommandInput) Disable() {
c.active = false
}