Function ScanFatGET

pkg/techniques.go:410–511

* Check for fat GET */

()

/* Check for fat GET */
func ScanFatGET() reportResult {
	var repResult reportResult
	repResult.Technique = "Fat GET"

	if len(impactfulQueries) == 0 {
		msg := "No impactful query parameters were found beforehand. Run the query parameter scan (maybe with a different wordlist)."
		Print(msg+"\n", Yellow)
		repResult.HasError = true
		repResult.ErrorMessages = append(repResult.ErrorMessages, msg)
		return repResult
	} else {
		msg := fmt.Sprintf("The following parameters were found to be impactful and will be tested for parameter cloaking: %s\n", impactfulQueries)
		Print(msg, Cyan)
	}

	threads := Config.Threads
	if Config.Website.Cache.CBisHTTPMethod {
		threads = 1 // No multithreading if HTTP Method is used... Otherwise there will be a lot of false negatives/positives
		PrintVerbose("Can only scan single threaded because a HTTP Method is used as Cachebuster...\n", Yellow, 1)
	}
	sem := make(chan int, threads)
	var wg sync.WaitGroup
	wg.Add(len(impactfulQueries))
	var m sync.Mutex

	headers := []string{"", "", "X-HTTP-Method-Override", "X-HTTP-Method", "X-Method-Override"}
	values := []string{"", "", "POST", "POST", "POST"}

	for method := 0; method < 5; method++ {
		var identifier string
		forcePost := false
		if method == 0 {
			identifier = "simple Fat GET"
		} else if method == 1 {
			identifier = "POST Fat GET"
			forcePost = true
		} else {
			identifier = fmt.Sprintf("%s Fat GET", headers[method])
		}
		msg := "Testing now " + identifier + "\n"
		Print(msg, NoColor)

		for i, s := range impactfulQueries {
			// Parameter Limit
			if i >= 500 {
				if i == 500 {
					Print("Parameter Limit at 500\n", Red)
				}
				wg.Done()
				continue
			}
			poison := "p" + randInt()

			go func(i int, s string, poison string) {
				defer wg.Done()
				sem <- 1
				defer func() { <-sem }() // Freigabe der Semaphore, egal was passiert. Dadurch werden Deadlocks verhindert