zmap / zgrab2

Fast Go Application Scanner
Other
1.75k stars 307 forks source link

improves http body decoding and enforces max length #295

Closed bwireman closed 3 years ago

bwireman commented 3 years ago

improves http body decoding and enforces max length

How to Test

echo "www.qq.com" | ./zgrab2 http -p 443 --use-https --max-size=64 --with-body-size | jq .

Notes & Caveats

I decided the initial read should still be limited and that we should just re-enforce length afterwards, but I can see the argument for not doing that

qq.com is a good example because it decodes correctly even though it isn't certain