Closed 7rovu closed 8 months ago
https://github.com/chainreactors/neutron/blob/master/templates_gogo/impl.go:25和31行有bug,在循环中使用指针会导致requests中所有路径均指向最后一个路径:
e.g:使用如下poc会导致,进行两次/bbb/路径的请求
id: test info: name: test severity: info tags: http http: - method: GET path: - "{{BaseURL}}/aaa/" matchers: - type: word part: body words: - 'refresh' - method: GET path: - "{{BaseURL}}/bbb/" matchers: - type: word part: body words: - 'Found'
fixed https://github.com/chainreactors/neutron/commit/fd6aaac9c50b24193b90429744287e77e4c5a691.
将会尽快发布新release
感谢你的反馈, 已发布新的release https://github.com/chainreactors/gogo/releases/tag/v2.11.11
https://github.com/chainreactors/neutron/blob/master/templates_gogo/impl.go:25和31行有bug,在循环中使用指针会导致requests中所有路径均指向最后一个路径:
e.g:使用如下poc会导致,进行两次/bbb/路径的请求