Function TestRequestFileHandlesHTTP20

cmd/bypass_test.go:760–808

(t *testing.T)

}

func TestRequestFileHandlesHTTP20(t *testing.T) {
	resetTestState()

	var mu sync.Mutex
	var capturedURIs []string

	ts := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
		mu.Lock()
		capturedURIs = append(capturedURIs, r.URL.RequestURI())
		mu.Unlock()
		w.WriteHeader(http.StatusForbidden)
		fmt.Fprint(w, "Forbidden")
	}))
	defer ts.Close()

	// Test with "HTTP/2.0" (another common Burp format)
	rawRequest := fmt.Sprintf("GET /admin/panel HTTP/2.0\r\nHost: %s\r\n\r\n",
		strings.TrimPrefix(ts.URL, "http://"))

	dir := t.TempDir()
	reqFile := filepath.Join(dir, "request.txt")
	if err := os.WriteFile(reqFile, []byte(rawRequest), 0o600); err != nil {
		t.Fatalf("write request file: %v", err)
	}

	payloadsDir := setupPayloadsDir(t)
	folder = payloadsDir
	nobanner = true

	loadFlagsFromRequestFile(reqFile, true, true, []string{"verbs"}, false)

	mu.Lock()
	defer mu.Unlock()

	if len(capturedURIs) == 0 {
		t.Fatal("expected requests from HTTP/2.0 request file, got 0")
	}

	foundURI := false
	for _, uri := range capturedURIs {
		if strings.Contains(uri, "/admin/panel") {
			foundURI = true
			break
		}
	}
	if !foundURI {
		t.Errorf("expected /admin/panel in URIs, got: %v", capturedURIs)
	}
}

func TestPayloadPositionsSendsRequests(t *testing.T) {
	resetTestState()