detect

Documentation

Index

• Variables

Variables

var (
	RootCmd = &cobra.Command{
		Use:     "detect -u <url>",
		Aliases: []string{"scan"},
		Short:   "Detect SSTI vulnerabilities",
		Long:    `Detect SSTI vulnerabilities in a given URL`,
		Example: `gossti detect -u http://example.com/?param1=SSTI&param2=value2`,
		PreRunE: func(cmd *cobra.Command, args []string) error {

			u, _ := cmd.Flags().GetString("url")
			_, err := url.ParseRequestURI(u)
			if err != nil {
				return err
			}

			return nil
		},
		RunE: func(cmd *cobra.Command, args []string) error {
			url, _ := cmd.Flags().GetString("url")

			options := ssti.Options{}

			method, _ := cmd.Flags().GetString("method")
			options.Method = method

			userAgent, _ := cmd.Flags().GetString("user-agent")
			options.UserAgent = userAgent

			cookies, _ := cmd.Flags().GetStringSlice("cookies")
			options.Cookies = cookies

			timeout, _ := cmd.Flags().GetDuration("timeout")
			options.Timeout = timeout

			form, _ := cmd.Flags().GetStringToString("form-item")
			formSlice, _ := cmd.Flags().GetStringSlice("form")
			for _, v := range formSlice {
				form[v] = ""
			}

			options.Form = form

			formType, _ := cmd.Flags().GetString("form-type")
			options.FormType = formType
			return ssti.Detect(url, options)
		},
	}
)