Function requestMethods

cmd/requester.go:1708–1755

requestMethods makes HTTP requests using a list of methods from a file and prints the results.

(options RequestOptions)

// requestMethods makes HTTP requests using a list of methods from a file and prints the results.
func requestMethods(options RequestOptions) {
	lines, err := parseFile(options.folder + "/httpmethods")
	if err != nil {
		log.Printf("[!] Skipping verb tampering: %v", err)
		return
	}
	if len(lines) == 0 {
		return
	}

	w := goccm.New(maxGoroutines)
	var verbTamperingResultsMutex = &sync.Mutex{}
	p := newProgress("verb-tampering", len(lines))

	for _, line := range lines {
		time.Sleep(time.Duration(delay) * time.Millisecond)
		w.Wait()
		go func(line string) {
			defer w.Done()
			defer p.done()
			resp, err := requestWithRetry(line, options.uri, options.headers, options.proxy, options.rateLimit, options.timeout, options.redirect)
			if err != nil {
				if errors.Is(err, ErrRateLimited) {
					log.Printf("[!] Rate limited, stopping verb tampering")
					return
				}
				logVerbose(err)
				return
			}

			contentLength := resp.contentLength

			verbTamperingResultsMutex.Lock()
			verbTamperingResults[line] = contentLength
			verbTamperingResultsMutex.Unlock()

			if isCalibrationMatch(contentLength) {
				return
			}

			result := resultFromResponse(line, false, "verb-tampering", resp)
			attachHTTPReplay(&result, line, options.uri, options.headers, "", options.redirect, options.proxy, options.timeout)
			printResponse(result, "verb-tampering")
		}(line)
	}
	w.WaitAllDone()
	p.finish()
}

// requestMethodsCaseSwitching makes HTTP requests using a list of methods from a file and prints the results.
func requestMethodsCaseSwitching(options RequestOptions) {