Book a Demo!
CoCalc Logo Icon
StoreFeaturesDocsShareSupportNewsAboutPoliciesSign UpSign In
projectdiscovery
GitHub Repository: projectdiscovery/nuclei
 Path: blob/dev/cmd/integration-test/generic.go
2070 views
1
package main

2


3
import (

4
	"crypto/tls"

5
	"crypto/x509"

6
	"fmt"

7
	"net/http"

8
	"net/http/httptest"

9
	"os"

10


11
	"github.com/julienschmidt/httprouter"

12


13
	"github.com/projectdiscovery/nuclei/v3/pkg/testutils"

14
	permissionutil "github.com/projectdiscovery/utils/permission"

15
)

16


17
var genericTestcases = []TestCaseInfo{

18
	{Path: "generic/auth/certificate/http-get.yaml", TestCase: &clientCertificate{}},

19
}

20


21
var (

22
	serverCRT = `-----BEGIN CERTIFICATE-----

23
MIIDEzCCAfsCFC21Zw7U0tGDyLyMalwfo9cWbL6dMA0GCSqGSIb3DQEBCwUAMEUx

24
CzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYDVQQKDBhJbnRl

25
cm5ldCBXaWRnaXRzIFB0eSBMdGQwIBcNMjMwNzI4MTAwNzI3WhgPMzAwMzA5Mjkx

26
MDA3MjdaMEUxCzAJBgNVBAYTAkFVMRMwEQYDVQQIDApTb21lLVN0YXRlMSEwHwYD

27
VQQKDBhJbnRlcm5ldCBXaWRnaXRzIFB0eSBMdGQwggEiMA0GCSqGSIb3DQEBAQUA

28
A4IBDwAwggEKAoIBAQCjMlvOKQX9yn9SOYPJ8p+jeDUU/JWPwT4LRfqaxvvKSnS7

29
NZzd7lS4AR0YTjyjiRj3+t0QnEDHVKBD8cMh9kMXkQ2S0r7psCURLvvZOYt4v6KM

30
CyZpBbp8b/pG3aJQHDZjRDOApQrXhx62XJDIs64YKA8NybYOLqNisrWGrfqF4uEz

31
RMgVGlthuQcXo3n2HzobuYN7RsHBzCWGLn9fRMDC2j3IAnQLf4YOznOJ57CjMd2W

32
mn/yhHK8h9s4iU5zw3+PK+X/IM4GeAfeJMx8c5uq2A8A24uzMidyhxJCK7VUprjK

33
/ckdNYya6dkG2De+LR7W82ygfWbFDOnZKM26cPG/AgMBAAEwDQYJKoZIhvcNAQEL

34
BQADggEBAH5+Wdb/1jgBhihN6Pb6SWJmDvwkOEP3t00E3fBao4TDqdDOhPsLYrAm

35
8gt16OcGrrXDQA3bi79mAVqAqCvaf4hk0vSI0L4rNcCSP4D3fUBjRO3fY3fM4Qw8

36
xg9AusF5hRrvzFbEak7lPJ01kLOJEgBA1l457HrLnXcpDTml8Y46WqdWa6yVM33l

37
7tNaXWrPwYZYMTcRumIytsYtIJXp/sMLBIT0AO/QR4yarvVOeMSJ1va459PjKLBG

38
JGGmf2rigaT050e71QOrGyMXgT6xsNjJgzeVhUgPO422mPT692kDi2oB5DA0Fau0

39
4qm5CMFgmYcC3zQoN53aDs1mHyWeroc=

40
-----END CERTIFICATE-----	

41
`

42
	serverKey = `-----BEGIN PRIVATE KEY-----

43
MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQCjMlvOKQX9yn9S

44
OYPJ8p+jeDUU/JWPwT4LRfqaxvvKSnS7NZzd7lS4AR0YTjyjiRj3+t0QnEDHVKBD

45
8cMh9kMXkQ2S0r7psCURLvvZOYt4v6KMCyZpBbp8b/pG3aJQHDZjRDOApQrXhx62

46
XJDIs64YKA8NybYOLqNisrWGrfqF4uEzRMgVGlthuQcXo3n2HzobuYN7RsHBzCWG

47
Ln9fRMDC2j3IAnQLf4YOznOJ57CjMd2Wmn/yhHK8h9s4iU5zw3+PK+X/IM4GeAfe

48
JMx8c5uq2A8A24uzMidyhxJCK7VUprjK/ckdNYya6dkG2De+LR7W82ygfWbFDOnZ

49
KM26cPG/AgMBAAECggEAFtRko2J5xBcf2JDTLt0SF/wo8Nak1Ydi9pDDjgNoFdR0

50
n/vQBfvhPhxpxYysTvRO2eHuKvSw2zGredXIRmf82r8f9vokWuyZQt4fvTOfnzSv

51
uIeWx/pVLDM9/8vhePN5aEmSKtzrt1rfoQMx/eGk6RwxfuxI25MKqDP30O9lrHTn

52
Y0lW7dthgdDMlQnSpOqUm2ldDsykYCBFteh4i5RDzAhiGx1ryaz3FMg+/y0VTTk0

53
BM43qW6H9PD8P4iOau3DGIPNqtIlFSnWoYaM6Ta2osfzzdsnFbe5F7JbdMrf5MBc

54
Jq3VMUqffRmHubz7di03qRsRqGYQn2cJeiuVC+y6gQKBgQDYpq3MfMjwzPeoB1Ay

55
ZQdzx+T290XRxFZwkiv3uugsYMlFGEabdAMFx5oIIOdjWSBLI92RvXbg7qMd/xMC

56
ya/GzbKQd+5GbRLW+TZ0odGkMFkTo+DEkt07yEM8mrPJ6XePUndHbiNFSdpVKx4g

57
KdmiRHinm3R8Lr5/puvISrOdcwKBgQDA1kln9aD1mvIdObI6MubPitb+NuNcpVDo

58
myc1UrEJbcn8nBbLb+0Q+7gckjau2C8GN7Olnd8RCYLc7kU1On2pY+f19Ru/PdZX

59
cjCCTcxqCJvWkNWOzw14ag6UrDTF5nxtoVl/eXbHxWqFjdt0a211sa1mp3Gn3ZNq

60
m/teImYHhQKBgQCzWUA1MPPzi+pU2kEEhugla8xauha9cUiRhiAJw1uiKTlVDqSc

61
2ewKo9MaeYqzjruSGI26sVqxGDxGf7tQKoBuFiiFOhMxj+fxuHrhEHiI8FE9VgOj

62
F2U3sTAgAn1lX/VO21jM9BsUp++rY7dbrulwUDiFn8ZNazDeYeN8eoK4iwKBgQCb

63
cqJN+YW9NyCBSqdPnwTMvSE+YES7xFAKkjfzFiu8bBJtXe5KJHm4PRJXhc4q9/5A

64
Rtq8YR0WgNJLApArrnDqAa1Vajbp3RFSAKz1/X0Q5MurFanxqxsyvFvwoTkRZxFa

65
1rxstB96Prv12TrVCFx+ibI8lDJcnZNeV0s0wQn6eQKBgQDXkfPuX5TFBpNe1bWI

66
KUFmw9R1ynmUlIOaU3ITLv9C+w8zaJSpxFDZgJdv3uT8PfnXrsHm+lWjaOunvjri

67
quZSc06mLlEbggYoIFQNPeNPRyN0+GLvefMS3mCotzanZTmD5GrH9XG451tVPiH9

68
G/lpNA1ccRCCsLslcG/aaa5PQw==

69
-----END PRIVATE KEY-----	

70
`

71
)

72


73
type clientCertificate struct{}

74


75
// Execute executes a test case and returns an error if occurred

76
func (h *clientCertificate) Execute(filePath string) error {

77
	router := httprouter.New()

78


79
	router.GET("/", func(w http.ResponseWriter, r *http.Request, _ httprouter.Params) {

80
		if len(r.TLS.PeerCertificates) == 0 {

81
			http.Error(w, "Client certificate required", http.StatusForbidden)

82
			return

83
		}

84


85
		_, _ = fmt.Fprintf(w, "Hello, %s!\n", r.TLS.PeerCertificates[0].Subject)

86
	})

87


88
	_ = os.WriteFile("server.crt", []byte(serverCRT), permissionutil.ConfigFilePermission)

89
	_ = os.WriteFile("server.key", []byte(serverKey), permissionutil.ConfigFilePermission)

90
	defer func() {

91
		_ = os.Remove("server.crt")

92
		_ = os.Remove("server.key")

93
	}()

94
	serverCert, _ := tls.LoadX509KeyPair("server.crt", "server.key")

95


96
	certPool := x509.NewCertPool()

97
	caCert, _ := os.ReadFile("server.crt")

98
	certPool.AppendCertsFromPEM(caCert)

99


100
	tlsConfig := &tls.Config{

101
		Certificates: []tls.Certificate{serverCert},

102
		ClientAuth:   tls.RequireAndVerifyClientCert,

103
		ClientCAs:    certPool,

104
	}

105


106
	ts := httptest.NewUnstartedServer(router)

107


108
	ts.TLS = tlsConfig

109


110
	ts.StartTLS()

111
	defer ts.Close()

112


113
	results, err := testutils.RunNucleiTemplateAndGetResults(filePath, ts.URL, debug,

114
		"-ca", "generic/auth/certificate/assets/server.crt",

115
		"-cc", "generic/auth/certificate/assets/client.crt",

116
		"-ck", "generic/auth/certificate/assets/client.key")

117
	if err != nil {

118
		return err

119
	}

120


121
	return expectResultsCount(results, 1)

122
}

123


124