Function FuzzAttackerHTTP

lib/attack_fuzz.go:72–129

FuzzAttackerHTTP fuzzes valid HTTP responses to attacker.

(fuzz []byte)

// FuzzAttackerHTTP fuzzes valid HTTP responses to attacker.
func FuzzAttackerHTTP(fuzz []byte) int {
	// Decode response
	code, headers, body, ok := decodeFuzzResponse(fuzz)
	if !ok {
		return -1
	}

	// Start server
	directory, err := os.MkdirTemp("/tmp", "fuzz")
	if err != nil {
		panic(err.Error())
	}
	socket := fmt.Sprintf("%s/attacker.sock", directory)
	listener, err := net.Listen("unix", socket)
	if err != nil {
		panic(err.Error())
	}
	handler := func(response http.ResponseWriter, request *http.Request) {
		for name, values := range headers {
			for _, value := range values {
				response.Header().Add(name, value)
			}
		}
		response.WriteHeader(int(code))
		_, err := response.Write(body)
		if err != nil {
			panic(err.Error())
		}
	}
	server := http.Server{
		Handler: http.HandlerFunc(handler),
	}
	defer server.Close()
	defer listener.Close()
	defer os.RemoveAll(directory)
	go server.Serve(listener)

	// Setup targeter
	targeter := Targeter(func(target *Target) error {
		target.Method = "GET"
		target.URL = "http://vegeta.test"
		return nil
	})

	// Deliver a single hit
	attacker := NewAttacker(
		UnixSocket(socket),
		Workers(1),
		MaxWorkers(1),
		Timeout(time.Second),
		KeepAlive(false),
	)
	result := attacker.hit(targeter, "fuzz")
	if result.Error != "" {
		return 0
	}
	return 1
}