Function ScanHTTPRequestSmuggling

pkg/techniques.go:186–223

(proxyURL *url.URL)

}

func ScanHTTPRequestSmuggling(proxyURL *url.URL) reportResult {
	var repResult reportResult
	identifier := "HTTP Request Smuggling"
	repResult.Technique = identifier

	path := Config.Website.Url.Path
	if Config.Website.Cache.CBisParameter {
		path, _ = addCachebusterParameter(path, "", Config.Website.Cache.CBName, false)
	}
	if path == "" {
		path = "/"
	}
	headers := GenerateHeaderString()

	PrintVerbose("Trying CLTE Request Smuggling\n", NoColor, 1)
	req := clte(path, headers)
	httpRequestSmuggling(req, &repResult, proxyURL)

	if !repResult.Vulnerable {
		PrintVerbose("Trying TECL Request Smuggling\n", NoColor, 1)
		req = tecl(path, headers)
		httpRequestSmuggling(req, &repResult, proxyURL)
	}

	if !repResult.Vulnerable {
		PrintVerbose("Trying CLCL Request Smuggling\n", NoColor, 1)
		req = clcl(path, headers)
		httpRequestSmuggling(req, &repResult, proxyURL)
	}

	if !repResult.Vulnerable {
		PrintVerbose("Trying CLCL2 Request Smuggling\n", NoColor, 1)
		req = clcl2(path, headers)
		httpRequestSmuggling(req, &repResult, proxyURL)
	}

	return repResult
}

/* Scan headers for poisoning */
func ScanHeaders(headerList []string) reportResult {