leonjza
commented
4 years ago Trying to replicate this now, but I am not winning. Could you give this a bash @BBerastegui, or maybe tell me what I am missing?
package main
import (
"encoding/json"
"log"
"net/http"
)
type person struct {
Name string `json:"name"`
Age int `json:"age"`
}
var tom *person = &person{
Name: "Tom",
Age: 28,
}
func tomHandler(w http.ResponseWriter, r *http.Request) {
j, _ := json.Marshal(tom)
w.Header().Add("Content-Type", "application/json")
w.WriteHeader(http.StatusUnauthorized)
w.Write(j)
}
func main() {
http.HandleFunc("/", tomHandler)
log.Println("Go!")
http.ListenAndServe(":8080", nil)
}
Running it, I get the following from curl (trying to replicate the original request), with gowitness not crashing on me:
$ curl -v localhost:8080
* Trying ::1...
* TCP_NODELAY set
* Connected to localhost (::1) port 8080 (#0)
> GET / HTTP/1.1
> Host: localhost:8080
> User-Agent: curl/7.64.1
> Accept: */*
>
< HTTP/1.1 401 Unauthorized
< Content-Type: application/json
< Date: Thu, 30 Jan 2020 14:15:54 GMT
< Content-Length: 23
<
* Connection #0 to host localhost left intact
{"name":"Tom","age":28}* Closing connection 0$ gowitness single --url=http://localhost:8080
INFO[2020-01-30 16:16:50] Title parsed title= url="http://localhost:8080"
INFO[2020-01-30 16:16:50] Response code status="401 Unauthorized" url="http://localhost:8080"
INFO[2020-01-30 16:16:50] Final URL after redirects final-url="http://localhost:8080" url="http://localhost:8080"
INFO[2020-01-30 16:16:50] Response header Date="Thu, 30 Jan 2020 14:16:50 GMT" url="http://localhost:8080"
INFO[2020-01-30 16:16:50] Response header Content-Length=23 url="http://localhost:8080"
INFO[2020-01-30 16:16:50] Response header Retry-Count=0 url="http://localhost:8080"
INFO[2020-01-30 16:16:50] Response header Content-Type=application/json url="http://localhost:8080"
INFO[2020-01-30 16:16:50] [--headless --disable-gpu --hide-scrollbars --disable-crash-reporter --user-agent=Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.75 Safari/537.36 --window-size=1440,900 --screenshot=http-localhost-8080.png --virtual-time-budget=2000]
INFO[2020-01-30 16:16:50] Taking screenshot destination=http-localhost-8080.png url="http://localhost:8080"
INFO[2020-01-30 16:16:51] Screenshot taken destination=http-localhost-8080.png duration=1.06122262s url="http://localhost:8080"
INFO[2020-01-30 16:16:51] Complete
BBerastegui
Latest version with the same problem when hitting pages that are returning just a JSON string (for example).
The page returned this when using curl:
Originally posted by @BBerastegui in https://github.com/sensepost/gowitness/issues/24#issuecomment-578404476