Method _parse_whatweb_result

advanced_vuln_scanner.py:1920–1954

Parse WhatWeb JSON result

(self, data: Dict, scan_id: str)

            # Add Cookie if provided
            if options.get('cookie_value'):
                cmd.extend(['-H', f'Cookie: {options["cookie_value"]}'])

            # Add custom headers if provided
            if options.get('headers'):
                for header in options['headers']:
                    cmd.extend(['-H', header])

            logger.debug(f"Running Nuclei: {' '.join(cmd)}")

            # stdout goes to the -o file; route process stdout to DEVNULL and
            # stderr to a file so the pipe buffer can never fill and deadlock,
            # and so we can read the real error message afterwards.
            errf = open(stderr_path, 'w')
            try:
                process = subprocess.Popen(
                    cmd,
                    stdout=subprocess.DEVNULL,
                    stderr=errf,
                    text=True,
                    env={**os.environ, **nuclei_env},
                    # New session when wrapped so we can kill the whole group
                    # (systemd-run scope + nuclei) on cancel/timeout.
                    start_new_session=use_session,
                )
                if use_session:
                    self._session_leader_pids.add(process.pid)
                self._register_scan_process(scan_id, process)

                # Monitor progress with a hard runtime cap so a hung nuclei
                # process cannot block the scan thread indefinitely.
                max_runtime = int(options.get('max_runtime', 1800))
                start_time = time.monotonic()
                # Small initial bump so the bar isn't frozen at 0 before
                # nuclei's first stats line (which -si 5 emits after ~5s).
                progress.progress_percent = max(progress.progress_percent, 3)
                while process.poll() is None:
                    time.sleep(2)
                    if self._is_scan_cancelled(scan_id):