Function runTests

web-cache-vulnerability-scanner.go:221–565

(rec int, u string, progress string, foundUrls *[]string, stat string)

}

func runTests(rec int, u string, progress string, foundUrls *[]string, stat string) {
	var repWebsite pkg.ReportWebsite
	var err error

	msg := fmt.Sprintf("\nTesting website%s: %s\n", progress, u)
	pkg.Print(msg, pkg.NoColor)
	pkg.Print("===============================================================\n", pkg.NoColor)

	if !strings.HasPrefix(u, "http://") && !strings.HasPrefix(u, "https://") {
		if pkg.Config.UseHTTP {
			u = "http://" + u
		} else {
			u = "https://" + u
		}
	}
	repWebsite.URL = u

	/* Setting up client: cookies and noredirect */
	msg = "Setting up client\n"
	pkg.PrintVerbose(msg, pkg.NoColor, 2)

	// Setting cookies, specified by setcookies
	pkg.Config.Website.Cookies = map[string]string{}
	for _, c := range pkg.Config.Cookies {
		c = strings.TrimSuffix(c, "\r")
		c = strings.TrimSpace(c)
		if c == "" {
			continue
		} else if !strings.Contains(c, "=") {
			msg = "Specified cookie %s doesn't contain a = and will be skipped\n"
			pkg.PrintVerbose(msg, pkg.NoColor, 2)
			continue
		} else {
			cSlice := strings.SplitAfterN(c, "=", 2)
			cSlice[0] = strings.TrimSuffix(cSlice[0], "=")

			pkg.Config.Website.Cookies[cSlice[0]] = cSlice[1]
		}
	}

	timeOutDuration := time.Duration(time.Duration(pkg.Config.TimeOut) * time.Second)
	clientNoRedir := &http.Client{
		CheckRedirect: func(redirRequest *http.Request, via []*http.Request) error {
			/* Commented out, because it unnecessary bloats up logs, especially for 301/302 links
			msg := fmt.Sprintf("Redirect Request denied: %s\n", redirRequest.Header)
			pkg.PrintVerbose(msg, pkg.Yellow, 2)
			*/
			return http.ErrUseLastResponse
		},
		Timeout: timeOutDuration,
	}

	http.DefaultClient = clientNoRedir

	// retrieve cookies, headers etc. Only setStatusCode if no cookies shall be accepted. Otherwise the next request with set Cookies sets the status code
	if !pkg.Config.DeclineCookies {
		pkg.Config.Website, err = pkg.GetWebsite(u, false, false)
	} else {