Function firstRequestPoisoningIndicator

pkg/requests.go:435–468

(identifier string, body []byte, poison string, header map[string][]string, identifierIsCB bool, cb string, statusCode int)

}

func firstRequestPoisoningIndicator(identifier string, body []byte, poison string, header map[string][]string, identifierIsCB bool, cb string, statusCode int) bool {
	var reason string
	if poison != "" && poison != "http" && poison != "https" && poison != "nothttps" && poison != "1" { // dont check for reflection of http/https/nothttps (used by forwarded headers), 1 (used by DOS) or empty poison
		if strings.Contains(string(body), poison) || (identifierIsCB && strings.Contains(string(body), cb)) { //
			reason = "Response Body contained " + poison
		}
		var reflections []string
		for x := range header {
			for _, v := range header[x] {
				if strings.Contains(v, poison) || (identifierIsCB && strings.Contains(v, cb)) {
					reflections = append(reflections, x)
				}
			}
		}
		if len(reflections) > 0 {
			reason = "Response Header(s) " + strings.Join(reflections, ", ") + " contained " + poison
		}
	}
	if Config.Website.StatusCode != statusCode && reason == "" {
		reason = fmt.Sprintf("Status Code %d differed from %d", statusCode, Config.Website.StatusCode)
	}
	if Config.CLDiff != 0 && reason == "" && len(body) > 0 && compareLengths(len(body), len(Config.Website.Body), Config.CLDiff) {
		reason = fmt.Sprintf("Length %d differed more than %d bytes from normal length %d", len(body), Config.CLDiff, len(Config.Website.Body))
	}

	if reason != "" {
		msg := identifier + ": " + reason + "\n"
		Print(msg, Cyan)
		return true
	} else {
		return false
	}

}