fix(http): resolve timeout config issues by dwisiswant0 · Pull Request #6562 · projectdiscovery/nuclei

dwisiswant0 · 2025-10-29T15:26:35Z

Proposed changes

fix(http): resolve timeout config issues

across multiple layers

Fixes timeout configuration conflicts where HTTP
requests would timeout prematurely despite
configured values in `@timeout` annotations or
`-timeout` flags.

RCA:
* `retryablehttp` pkg overriding with default
  30s timeout.
* Custom timeouts not propagating to
  `retryablehttp` layer.
* Multiple timeout layers not sync properly.

Changes:
* Propagate custom timeouts from `@timeout`
  annotations to `retryablehttp` layer.
* Adjust 5-minute maximum cap to prevent DoS via
  extremely large timeouts.
* Ensure `retryableHttpOptions.Timeout` respects
  `ResponseHeaderTimeout`.
* Add comprehensive tests for timeout capping
  behavior.

This allows templates to override global timeout
via `@timeout` annotations while preventing abuse
thru unreasonably large timeout values.

Fixes #6560.

Proof

Templates:

debug-timeout-issue.yaml

id: debug-timeout-issue

info:
  name: Debug Timeout Issue — debug extended timeout
  author: Maoz Zadok
  severity: info
  tags: debug,timeout

variables:
  time_to_sleep: "61"
  request_timeout: "300s"

http:
  - raw:
      - |
        @timeout: {{request_timeout}}
        GET /?time_to_sleep={{time_to_sleep}} HTTP/1.1
        Host: {{Hostname}}
        X-Requested-With: curl
        Accept: application/json
    matchers:
      - type: status
        status: [200]
    extractors:
      - type: dsl
        name: scan_data
        part: body
        dsl:
          - body

debug-timeout-issue-2.yaml

id: debug-timeout-issue-2

info:
  name: Debug Timeout Issue 2 — debug extended timeout
  author: Maoz Zadok
  severity: info
  tags: debug,timeout

variables:
  time_to_sleep_2: "25"
  request_timeout: "300s"

http:
  - raw:
      - |
        GET /?time_to_sleep={{time_to_sleep_2}} HTTP/1.1
        Host: {{Hostname}}
        X-Requested-With: curl
        Accept: application/json
    matchers:
      - type: status
        status: [200]
    extractors:
      - type: dsl
        name: scan_data
        part: body
        dsl:
          - body

Usage:

$ time ./bin/nuclei -silent -t debug-template-issue.yaml -t debug-template-issue-2.yaml -var time_to_sleep=30 -u https://sleep.skymaster.io/ --timeout 70
[debug-timeout-issue-2:scan_data] [http] [info] https://sleep.skymaster.io/?time_to_sleep=25 ["{\n  "args": {\n    "time_to_sleep": "25"\n  },\n  "data": null,\n  "form": {},\n  "headers": {\n    "Accept": "application/json",\n    "Accept-Encoding": "gzip",\n    "Forwarded": "for=\\"[2404:8000:1016:a2d:61c1:7ef3:4fdc:3e43]\\";proto=https",\n    "Host": "sleep.skymaster.io",\n    "Traceparent": "00-da5670c8b650410813076d491865564a-a6daa532bd006592-00",\n    "User-Agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36",\n    "X-Cloud-Trace-Context": "da5670c8b650410813076d491865564a/12023103792556828050",\n    "X-Forwarded-For": "2404:8000:1016:a2d:61c1:7ef3:4fdc:3e43",\n    "X-Forwarded-Proto": "https",\n    "X-Requested-With": "curl"\n  },\n  "json": null,\n  "method": "GET",\n  "path": "/",\n  "remote_addr": "169.254.169.126",\n  "time_slept": 25.0,\n  "url": "http://sleep.skymaster.io/?time_to_sleep=25"\n}"]
[debug-timeout-issue:scan_data] [http] [info] https://sleep.skymaster.io/?time_to_sleep=30 ["{\n  "args": {\n    "time_to_sleep": "30"\n  },\n  "data": null,\n  "form": {},\n  "headers": {\n    "Accept": "application/json",\n    "Accept-Encoding": "gzip",\n    "Forwarded": "for=\\"[2404:8000:1016:a2d:61c1:7ef3:4fdc:3e43]\\";proto=https",\n    "Host": "sleep.skymaster.io",\n    "Traceparent": "00-2ce9e24b62506a7d2900098b95254ae1-23880069822af813-01",\n    "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.6",\n    "X-Cloud-Trace-Context": "2ce9e24b62506a7d2900098b95254ae1/2560296841315547155;o=1",\n    "X-Forwarded-For": "2404:8000:1016:a2d:61c1:7ef3:4fdc:3e43",\n    "X-Forwarded-Proto": "https",\n    "X-Requested-With": "curl"\n  },\n  "json": null,\n  "method": "GET",\n  "path": "/",\n  "remote_addr": "169.254.169.126",\n  "time_slept": 30.0,\n  "url": "http://sleep.skymaster.io/?time_to_sleep=30"\n}"]

real	0m31.785s
user	0m0.185s
sys	0m0.075s

Checklist

Pull request is created against the dev branch
All checks passed (lint, unit/integration/regression tests etc.) with my changes
I have added tests that prove my fix is effective or that my feature works
I have added necessary documentation (if appropriate)

Summary by CodeRabbit

Release Notes

Bug Fixes
- Enhanced timeout configuration logic to ensure response header timeouts are properly aligned with HTTP timeouts, preventing misalignment scenarios.
New Features
- Updated @timeout annotation maximum cap from 2 minutes to 5 minutes.
Tests
- Added test coverage for timeout annotation parsing, including verification of cap enforcement and deadline calculations.

coderabbitai · 2025-10-29T15:27:05Z

Walkthrough

The pull request introduces coordinated timeout handling across HTTP client configuration, request annotations, and type defaults. It caps @timeout annotations at 5 minutes, ensures response header timeout respects the main timeout value, and removes hardcoded 10-second defaults to make timeout propagation dynamic and consistent.

Changes

Cohort / File(s)	Summary
HTTP Client Timeout Configuration `pkg/protocols/http/httpclientpool/clientpool.go`	Sets retryable HTTP client timeout from options, conditionally updates it based on response header timeout configuration, and ensures response header timeout is not less than the main timeout.
Timeout Annotation Parsing & Capping `pkg/protocols/http/request_annotations.go`	Introduces `maxAnnotationTimeout` constant (5 minutes), caps parsed `@timeout` values to this maximum, renames duration variable to `parsedTimeout`, and propagates the capped timeout through context and custom timeout application.
Type Defaults Logic `pkg/types/types.go`	Modifies `Timeouts.ApplyDefaults` to conditionally set `HttpResponseHeaderTimeout` to `HttpTimeout` when the former is smaller, replacing the previous hardcoded 10-second default.
Formatting `pkg/protocols/http/request.go`	Inserts blank line between `connConfiguration` assignment and `modifiedConfig.ResponseHeaderTimeout` setting.
Timeout Annotation Tests `pkg/protocols/http/request_annotations_test.go`	Adds `getExecuterOptions` helper function, introduces "large-timeout" and "below-cap-timeout" subtests to verify timeout capping behavior, expands test coverage with deadline and context value verification, and updates test initialization and imports.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~25 minutes

Specific areas requiring attention:
- pkg/types/types.go: Verify the conditional logic for HttpResponseHeaderTimeout vs. HttpTimeout comparison correctly handles all initialization paths and defaults
- pkg/protocols/http/request_annotations.go: Confirm the new maxAnnotationTimeout value (5 minutes) aligns with intended behavior and that parsedTimeout propagation is consistent across all downstream consumers
- pkg/protocols/http/httpclientpool/clientpool.go: Ensure timeout coordination between retryableHttpOptions.Timeout and response header timeout does not create conflicts or unexpected cascading effects
- pkg/protocols/http/request_annotations_test.go: Verify test helper function getExecuterOptions is appropriately scoped and mock values reflect real-world scenarios

Poem

🐰 Five minutes is our @timeout throne,
ResponseHeaders bowed to timeout's bone,
No more sixty-second chains,
Nuclei's patience now sustains,
Long requests now find their home!

Pre-merge checks and finishing touches

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'fix(http): resolve timeout config issues' is concise and clearly describes the main change: fixing HTTP timeout configuration problems, which aligns with the PR's primary objective of resolving hardcoded 60-second timeout limits.
Linked Issues check	✅ Passed	Code changes comprehensively address issue #6560 requirements: retryableHttpOptions.Timeout is set from CLI values [clientpool.go], ResponseHeaderTimeout is ensured >= client timeout [types.go, clientpool.go], @timeout annotation cap changed from 2min to 5min [request_annotations.go], and custom timeouts are properly propagated [request_annotations.go]. Tests verify capping and context timeout propagation.
Out of Scope Changes check	✅ Passed	All changes are directly scoped to fixing timeout configuration: client pool timeout setup, response header timeout logic, annotation timeout capping, and corresponding test coverage. No unrelated formatting, refactoring, or feature additions detected beyond the timeout resolution scope.

✨ Finishing touches

📝 Generate docstrings

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch dwisiswant0/fix/http/resolve-timeout-config-issues

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 7af3a89 and cca3233.

📒 Files selected for processing (5)

pkg/protocols/http/httpclientpool/clientpool.go (2 hunks)
pkg/protocols/http/request.go (1 hunks)
pkg/protocols/http/request_annotations.go (2 hunks)
pkg/protocols/http/request_annotations_test.go (3 hunks)
pkg/types/types.go (1 hunks)

✅ Files skipped from review due to trivial changes (1)

pkg/protocols/http/request.go

🚧 Files skipped from review as they are similar to previous changes (1)

pkg/protocols/http/httpclientpool/clientpool.go

🧰 Additional context used

📓 Path-based instructions (2)

**/*.go

📄 CodeRabbit inference engine (CLAUDE.md)

**/*.go: Format Go code using go fmt
Run static analysis with go vet

Files:

pkg/protocols/http/request_annotations.go
pkg/protocols/http/request_annotations_test.go
pkg/types/types.go

pkg/protocols/**/*.go

📄 CodeRabbit inference engine (CLAUDE.md)

Each protocol implementation must provide a Request interface with methods Compile(), ExecuteWithResults(), Match(), and Extract()

Files:

pkg/protocols/http/request_annotations.go
pkg/protocols/http/request_annotations_test.go

🧠 Learnings (1)

📚 Learning: 2025-09-05T14:23:55.257Z

Learnt from: CR
Repo: projectdiscovery/nuclei PR: 0
File: CLAUDE.md:0-0
Timestamp: 2025-09-05T14:23:55.257Z
Learning: Applies to pkg/protocols/**/*.go : Each protocol implementation must provide a Request interface with methods Compile(), ExecuteWithResults(), Match(), and Extract()

Applied to files:

pkg/protocols/http/request_annotations_test.go

🧬 Code graph analysis (2)

pkg/protocols/http/request_annotations.go (1)

pkg/protocols/http/httpclientpool/options.go (1)

WithCustomTimeout (15-17)

pkg/protocols/http/request_annotations_test.go (4)

pkg/protocols/protocols.go (1)

ExecutorOptions (61-141)

pkg/types/types.go (1)

DefaultOptions (780-797)

pkg/protocols/http/httpclientpool/clientpool.go (1)

Configuration (77-92)

pkg/testutils/testutils.go (1)

NewMockExecuterOptions (94-116)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (3)

GitHub Check: Tests (macOS-latest)
GitHub Check: Tests (windows-latest)
GitHub Check: Tests (ubuntu-latest)

🔇 Additional comments (3)

pkg/types/types.go (1)

748-750: Synchronizing header timeout with client timeout

Good call ensuring HttpResponseHeaderTimeout never undercuts HttpTimeout; this prevents the header deadline from expiring first and recreating the premature timeout symptom the PR is fixing.

pkg/protocols/http/request_annotations.go (1)

32-145: Annotated timeout cap and propagation look solid

The 5-minute guardrail still lets extended templates run while preventing abusive durations, and syncing the capped value into both context.WithTimeoutCause and httpclientpool.WithCustomTimeout keeps downstream logic aligned.

pkg/protocols/http/request_annotations_test.go (1)

17-154: Nice regression coverage for the new timeout behavior

The helper setup keeps the fixtures consistent, and the added sub-tests validate both the 5-minute cap and below-cap scenarios, including the stored custom timeout in context.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 1

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 3be27b9 and c832712.

📒 Files selected for processing (4)

pkg/protocols/http/httpclientpool/clientpool.go (2 hunks)
pkg/protocols/http/request.go (1 hunks)
pkg/protocols/http/request_annotations.go (1 hunks)
pkg/types/types.go (1 hunks)

🧰 Additional context used

📓 Path-based instructions (2)

**/*.go

📄 CodeRabbit inference engine (CLAUDE.md)

**/*.go: Format Go code using go fmt
Run static analysis with go vet

Files:

pkg/protocols/http/request.go
pkg/protocols/http/request_annotations.go
pkg/protocols/http/httpclientpool/clientpool.go
pkg/types/types.go

pkg/protocols/**/*.go

📄 CodeRabbit inference engine (CLAUDE.md)

Each protocol implementation must provide a Request interface with methods Compile(), ExecuteWithResults(), Match(), and Extract()

Files:

pkg/protocols/http/request.go
pkg/protocols/http/request_annotations.go
pkg/protocols/http/httpclientpool/clientpool.go

🧬 Code graph analysis (1)

pkg/protocols/http/request_annotations.go (2)

pkg/types/types.go (1)

Options (34-472)

pkg/protocols/http/httpclientpool/options.go (1)

WithCustomTimeout (15-17)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)

GitHub Check: Lint

🔇 Additional comments (4)

pkg/protocols/http/request.go (1)

828-828: Minor formatting improvement – LGTM.

The blank line improves readability by separating the cookie jar configuration logic from the timeout annotation handling logic.

pkg/types/types.go (1)

748-750: Timeout defaulting logic improved – LGTM.

The new logic ensures HttpResponseHeaderTimeout is never shorter than HttpTimeout by promoting it when necessary. This replaces the previous hardcoded 10s default and aligns with the PR's goal to honor configured timeout values. The change works in conjunction with the client pool timeout propagation to fix premature timeout issues.

pkg/protocols/http/httpclientpool/clientpool.go (2)

217-217: Critical timeout propagation fix – LGTM.

This change ensures the CLI --timeout value is propagated to the retryable HTTP client, addressing the root cause where retryablehttp's default timeout was overriding user-configured values. This directly fixes the issue described in the PR objectives.

265-268: Response header timeout safeguard – LGTM.

This guard ensures ResponseHeaderTimeout is never shorter than the overall client timeout, preventing premature header read timeouts. The placement before the CustomMaxTimeout override (lines 270-272) is correct, allowing explicit overrides to take precedence. This change complements the timeout defaulting logic in pkg/types/types.go.

pkg/protocols/http/request_annotations.go

coderabbitai

Actionable comments posted: 0

🧹 Nitpick comments (1)

pkg/protocols/http/request_annotations_test.go (1)
89-122: Consider making HttpTimeout explicit for test clarity.

The test properly validates timeout capping behavior. However, the comment on line 95 mentions "default is 210s" while the test relies on the runtime default. For improved clarity and test maintainability, consider explicitly setting request.options.Options with a known HttpTimeout value (e.g., 210s) to make the test's expectations clear and self-documenting.

Example approach:
// Set explicit HttpTimeout for this test
request.options.Options.Timeout = 210 // or use timeouts configuration
Alternatively, add an assertion to document the expected default:
httpTimeout := request.options.Options.GetTimeouts().HttpTimeout
require.Equal(t, 210*time.Second, httpTimeout, "verify expected default HttpTimeout")

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between c832712 and fbf37bd.

📒 Files selected for processing (2)

pkg/protocols/http/request_annotations.go (1 hunks)
pkg/protocols/http/request_annotations_test.go (4 hunks)

🚧 Files skipped from review as they are similar to previous changes (1)

pkg/protocols/http/request_annotations.go

🧰 Additional context used

📓 Path-based instructions (2)

**/*.go

📄 CodeRabbit inference engine (CLAUDE.md)

**/*.go: Format Go code using go fmt
Run static analysis with go vet

Files:

pkg/protocols/http/request_annotations_test.go

pkg/protocols/**/*.go

📄 CodeRabbit inference engine (CLAUDE.md)

Each protocol implementation must provide a Request interface with methods Compile(), ExecuteWithResults(), Match(), and Extract()

Files:

pkg/protocols/http/request_annotations_test.go

🧠 Learnings (2)

📓 Common learnings

Learnt from: parthmalhotra
PR: projectdiscovery/nuclei#6041
File: pkg/catalog/loader/ai_loader.go:110-114
Timestamp: 2025-02-10T13:35:06.322Z
Learning: HTTP client timeout should not be added for AI template generation endpoints in nuclei as the generation process can take variable time to complete. Adding a timeout could interrupt valid template generation requests.

📚 Learning: 2025-09-05T14:23:55.257Z

Learnt from: CR
PR: projectdiscovery/nuclei#0
File: CLAUDE.md:0-0
Timestamp: 2025-09-05T14:23:55.257Z
Learning: Applies to pkg/protocols/**/*.go : Each protocol implementation must provide a Request interface with methods Compile(), ExecuteWithResults(), Match(), and Extract()

Applied to files:

pkg/protocols/http/request_annotations_test.go

🧬 Code graph analysis (1)

pkg/protocols/http/request_annotations_test.go (3)

pkg/protocols/protocols.go (1)

ExecutorOptions (61-141)

pkg/testutils/testutils.go (1)

NewMockExecuterOptions (94-116)

pkg/protocols/http/httpclientpool/options.go (1)

WithCustomTimeout (15-17)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)

GitHub Check: Lint

🔇 Additional comments (3)

pkg/protocols/http/request_annotations_test.go (3)

17-25: LGTM! Clean test helper implementation.

The helper function properly initializes mock executor options with correct setup sequence and follows Go testing conventions with t.Helper().

74-87: LGTM! Comprehensive timeout validation.

The enhanced assertions properly verify that the timeout annotation correctly configures the request context with a deadline, stores the custom timeout value, and sets the deadline to the expected duration. The 100ms tolerance is appropriate for unit tests.

126-126: LGTM! Consistent use of helper function.

Using the shared helper promotes consistency across test cases.

dwisiswant0 · 2025-10-30T02:44:01Z

Rebase after #6565

Mzack9999 · 2025-10-30T12:20:29Z

TODO before merging:

Failing integration tests

across multiple layers Fixes timeout configuration conflicts where HTTP requests would timeout prematurely despite configured values in `@timeout` annotations or `-timeout` flags. RCA: * `retryablehttp` pkg overriding with default 30s timeout. * Custom timeouts not propagating to `retryablehttp` layer. * Multiple timeout layers not sync properly. Changes: * Propagate custom timeouts from `@timeout` annotations to `retryablehttp` layer. * Adjust 5-minute maximum cap to prevent DoS via extremely large timeouts. * Ensure `retryableHttpOptions.Timeout` respects `ResponseHeaderTimeout`. * Add comprehensive tests for timeout capping behavior. This allows templates to override global timeout via `@timeout` annotations while preventing abuse thru unreasonably large timeout values. Fixes #6560. Signed-off-by: Dwi Siswanto <git@dw1.io>

* CheckRDPEncryption * feat(templating): add vars templating into yaml inputs * fix: enhance code rabbit * fix: change gologger runner version * feat(ytt): add ytt files var + add vars from cli and config * feat: send struct from var file * fix code rabbit * fix(main.go): add errcheck * retain required empty spaces * fixing path * fixing test * use bytes slice * Add option to control number of concurrent templates loaded on startup * adding vnc auth * gen go+js * lint * no changes custom template message should be INF not ERR * Path-Based Fuzzing SQL fix (#6400) * setup claude * migrate to using errkit * fix unused imports + lint errors * update settings.json * fix url encoding issue * fix lint error * fix the path fuzzing component * fix lint error * fix(fuzz): handles duplicate multipart form field names (#6404) * fix: handle duplicate field names in multipart form encoding * fix(fuzz): handles `[]any` type in `*MultiPartForm.Encode` Signed-off-by: Dwi Siswanto <git@dw1.io> * test(fuzz): adds panic recovery & display encoded out Signed-off-by: Dwi Siswanto <git@dw1.io> * fix(fuzz): incorrectly treated mixed type field in `*MultiPartForm.Encode` Signed-off-by: Dwi Siswanto <git@dw1.io> * test(fuzz): refactor compare w decoded instead Signed-off-by: Dwi Siswanto <git@dw1.io> * chore(fuzz): prealloc for `[]any` type Signed-off-by: Dwi Siswanto <git@dw1.io> * fix(fuzz): treats nil value as empty string Signed-off-by: Dwi Siswanto <git@dw1.io> * chore(fuzz): rm early error return for non-array file Signed-off-by: Dwi Siswanto <git@dw1.io> * test(fuzz): adds `TestMultiPartFormFileUpload` test Signed-off-by: Dwi Siswanto <git@dw1.io> --------- Signed-off-by: Dwi Siswanto <git@dw1.io> Co-authored-by: yusei-wy <31252054+yusei-wy@users.noreply.github.com> * limited test, instead of all * lint * integration test * lint * Update pkg/external/customtemplates/github.go Co-authored-by: Dwi Siswanto <25837540+dwisiswant0@users.noreply.github.com> * fix for error.Is false return * bump httpx version * chore(deps): bump github.com/go-viper/mapstructure/v2 Bumps the go_modules group with 1 update in the / directory: [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure). Updates `github.com/go-viper/mapstructure/v2` from 2.3.0 to 2.4.0 - [Release notes](https://github.com/go-viper/mapstructure/releases) - [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md) - [Commits](https://github.com/go-viper/mapstructure/compare/v2.3.0...v2.4.0) --- updated-dependencies: - dependency-name: github.com/go-viper/mapstructure/v2 dependency-version: 2.4.0 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com> * test(reporting/exporters/mongo): add mongo integration test with test… (#6237) * test(reporting/exporters/mongo): add mongo integration test with testcontainer-go module Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com> * execute exportes only on linux --------- Signed-off-by: Lorenzo Susini <susinilorenzo1@gmail.com> Co-authored-by: Mzack9999 <mzack9999@protonmail.com> * Refactor to use reflect.TypeFor (#6428) * issue / discussion template update * misc hyperlink update * link update * chore(deps): bump the modules group across 1 directory with 11 updates (#6438) * chore(deps): bump the modules group across 1 directory with 11 updates Bumps the modules group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer) | `0.4.6` | `0.4.7` | | [github.com/projectdiscovery/hmap](https://github.com/projectdiscovery/hmap) | `0.0.92` | `0.0.93` | | [github.com/projectdiscovery/retryabledns](https://github.com/projectdiscovery/retryabledns) | `1.0.105` | `1.0.106` | | [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) | `1.0.120` | `1.0.121` | | [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) | `0.5.0` | `0.5.1` | | [github.com/projectdiscovery/gozero](https://github.com/projectdiscovery/gozero) | `0.0.3` | `0.1.0` | | [github.com/projectdiscovery/ratelimit](https://github.com/projectdiscovery/ratelimit) | `0.0.81` | `0.0.82` | | [github.com/projectdiscovery/tlsx](https://github.com/projectdiscovery/tlsx) | `1.1.9` | `1.2.0` | | [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) | `0.2.37` | `0.2.43` | | [github.com/projectdiscovery/cdncheck](https://github.com/projectdiscovery/cdncheck) | `1.1.27` | `1.1.33` | Updates `github.com/projectdiscovery/fastdialer` from 0.4.6 to 0.4.7 - [Release notes](https://github.com/projectdiscovery/fastdialer/releases) - [Commits](https://github.com/projectdiscovery/fastdialer/compare/v0.4.6...v0.4.7) Updates `github.com/projectdiscovery/hmap` from 0.0.92 to 0.0.93 - [Release notes](https://github.com/projectdiscovery/hmap/releases) - [Commits](https://github.com/projectdiscovery/hmap/compare/v0.0.92...v0.0.93) Updates `github.com/projectdiscovery/retryabledns` from 1.0.105 to 1.0.106 - [Release notes](https://github.com/projectdiscovery/retryabledns/releases) - [Commits](https://github.com/projectdiscovery/retryabledns/compare/v1.0.105...v1.0.106) Updates `github.com/projectdiscovery/retryablehttp-go` from 1.0.120 to 1.0.121 - [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases) - [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.120...v1.0.121) Updates `github.com/projectdiscovery/dsl` from 0.5.0 to 0.5.1 - [Release notes](https://github.com/projectdiscovery/dsl/releases) - [Commits](https://github.com/projectdiscovery/dsl/compare/v0.5.0...v0.5.1) Updates `github.com/projectdiscovery/gozero` from 0.0.3 to 0.1.0 - [Release notes](https://github.com/projectdiscovery/gozero/releases) - [Commits](https://github.com/projectdiscovery/gozero/compare/v0.0.3...v0.1.0) Updates `github.com/projectdiscovery/networkpolicy` from 0.1.20 to 0.1.21 - [Release notes](https://github.com/projectdiscovery/networkpolicy/releases) - [Commits](https://github.com/projectdiscovery/networkpolicy/compare/v0.1.20...v0.1.21) Updates `github.com/projectdiscovery/ratelimit` from 0.0.81 to 0.0.82 - [Release notes](https://github.com/projectdiscovery/ratelimit/releases) - [Commits](https://github.com/projectdiscovery/ratelimit/compare/v0.0.81...v0.0.82) Updates `github.com/projectdiscovery/tlsx` from 1.1.9 to 1.2.0 - [Release notes](https://github.com/projectdiscovery/tlsx/releases) - [Changelog](https://github.com/projectdiscovery/tlsx/blob/main/.goreleaser.yml) - [Commits](https://github.com/projectdiscovery/tlsx/compare/v1.1.9...v1.2.0) Updates `github.com/projectdiscovery/wappalyzergo` from 0.2.37 to 0.2.43 - [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases) - [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.2.37...v0.2.43) Updates `github.com/projectdiscovery/cdncheck` from 1.1.27 to 1.1.33 - [Release notes](https://github.com/projectdiscovery/cdncheck/releases) - [Changelog](https://github.com/projectdiscovery/cdncheck/blob/main/.goreleaser.yaml) - [Commits](https://github.com/projectdiscovery/cdncheck/compare/v1.1.27...v1.1.33) --- updated-dependencies: - dependency-name: github.com/projectdiscovery/fastdialer dependency-version: 0.4.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/hmap dependency-version: 0.0.93 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/retryabledns dependency-version: 1.0.106 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/retryablehttp-go dependency-version: 1.0.121 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/dsl dependency-version: 0.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/gozero dependency-version: 0.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: modules - dependency-name: github.com/projectdiscovery/networkpolicy dependency-version: 0.1.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/ratelimit dependency-version: 0.0.82 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/tlsx dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: modules - dependency-name: github.com/projectdiscovery/wappalyzergo dependency-version: 0.2.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/cdncheck dependency-version: 1.1.33 dependency-type: indirect update-type: version-update:semver-patch dependency-group: modules ... Signed-off-by: dependabot[bot] <support@github.com> * bump * httpx dev * mod tidy --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Mzack9999 <mzack9999@protonmail.com> * Reporting validation (#6456) * add custom validator for reporting issues * use httpx dev branch * remove yaml marshal/unmarshal for validator callback * chore(deps): bump the workflows group across 1 directory with 2 updates (#6462) Bumps the workflows group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [actions/stale](https://github.com/actions/stale). Updates `actions/checkout` from 4 to 5 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v5) Updates `actions/stale` from 9 to 10 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/stale/compare/v9...v10) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: workflows - dependency-name: actions/stale dependency-version: '10' dependency-type: direct:production update-type: version-update:semver-major dependency-group: workflows ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * feat: added new text/template syntax to jira custom fields * feat: added additional text/template helpers * dont load templates with the same ID * using synclockmap * lint * lint * chore(deps): bump the modules group with 9 updates Bumps the modules group with 9 updates: | Package | From | To | | --- | --- | --- | | [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer) | `0.4.7` | `0.4.9` | | [github.com/projectdiscovery/retryabledns](https://github.com/projectdiscovery/retryabledns) | `1.0.106` | `1.0.107` | | [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) | `1.0.121` | `1.0.123` | | [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) | `0.5.1` | `0.6.0` | | [github.com/projectdiscovery/httpx](https://github.com/projectdiscovery/httpx) | `1.7.1-0.20250902174407-8d6c2658663f` | `1.7.1` | | [github.com/projectdiscovery/networkpolicy](https://github.com/projectdiscovery/networkpolicy) | `0.1.21` | `0.1.23` | | [github.com/projectdiscovery/utils](https://github.com/projectdiscovery/utils) | `0.4.24-0.20250823123502-bd7f2849ddb4` | `0.5.0` | | [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) | `0.2.43` | `0.2.45` | | [github.com/projectdiscovery/cdncheck](https://github.com/projectdiscovery/cdncheck) | `1.1.33` | `1.1.35` | Updates `github.com/projectdiscovery/fastdialer` from 0.4.7 to 0.4.9 - [Release notes](https://github.com/projectdiscovery/fastdialer/releases) - [Commits](https://github.com/projectdiscovery/fastdialer/compare/v0.4.7...v0.4.9) Updates `github.com/projectdiscovery/retryabledns` from 1.0.106 to 1.0.107 - [Release notes](https://github.com/projectdiscovery/retryabledns/releases) - [Commits](https://github.com/projectdiscovery/retryabledns/compare/v1.0.106...v1.0.107) Updates `github.com/projectdiscovery/retryablehttp-go` from 1.0.121 to 1.0.123 - [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases) - [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.121...v1.0.123) Updates `github.com/projectdiscovery/dsl` from 0.5.1 to 0.6.0 - [Release notes](https://github.com/projectdiscovery/dsl/releases) - [Commits](https://github.com/projectdiscovery/dsl/compare/v0.5.1...v0.6.0) Updates `github.com/projectdiscovery/httpx` from 1.7.1-0.20250902174407-8d6c2658663f to 1.7.1 - [Release notes](https://github.com/projectdiscovery/httpx/releases) - [Changelog](https://github.com/projectdiscovery/httpx/blob/dev/.goreleaser.yml) - [Commits](https://github.com/projectdiscovery/httpx/commits/v1.7.1) Updates `github.com/projectdiscovery/networkpolicy` from 0.1.21 to 0.1.23 - [Release notes](https://github.com/projectdiscovery/networkpolicy/releases) - [Commits](https://github.com/projectdiscovery/networkpolicy/compare/v0.1.21...v0.1.23) Updates `github.com/projectdiscovery/utils` from 0.4.24-0.20250823123502-bd7f2849ddb4 to 0.5.0 - [Release notes](https://github.com/projectdiscovery/utils/releases) - [Changelog](https://github.com/projectdiscovery/utils/blob/main/CHANGELOG.md) - [Commits](https://github.com/projectdiscovery/utils/commits/v0.5.0) Updates `github.com/projectdiscovery/wappalyzergo` from 0.2.43 to 0.2.45 - [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases) - [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.2.43...v0.2.45) Updates `github.com/projectdiscovery/cdncheck` from 1.1.33 to 1.1.35 - [Release notes](https://github.com/projectdiscovery/cdncheck/releases) - [Changelog](https://github.com/projectdiscovery/cdncheck/blob/main/.goreleaser.yaml) - [Commits](https://github.com/projectdiscovery/cdncheck/compare/v1.1.33...v1.1.35) --- updated-dependencies: - dependency-name: github.com/projectdiscovery/fastdialer dependency-version: 0.4.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/retryabledns dependency-version: 1.0.107 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/retryablehttp-go dependency-version: 1.0.123 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/dsl dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: modules - dependency-name: github.com/projectdiscovery/httpx dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/networkpolicy dependency-version: 0.1.23 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/utils dependency-version: 0.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: modules - dependency-name: github.com/projectdiscovery/wappalyzergo dependency-version: 0.2.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/cdncheck dependency-version: 1.1.35 dependency-type: indirect update-type: version-update:semver-patch dependency-group: modules ... Signed-off-by: dependabot[bot] <support@github.com> * httpx fix * release fix * code from https://github.com/projectdiscovery/nuclei/pull/6427 * lint * centralizing ratelimiter logic * adding me * refactor * Remove the stack trace when the nuclei-ignore file does not exist (#6455) * remove the stack trace when the nuclei-ignore file does not exist * removing useless debug stack --------- Co-authored-by: Mzack9999 <mzack9999@protonmail.com> * chore(deps): bump the modules group with 7 updates Bumps the modules group with 7 updates: | Package | From | To | | --- | --- | --- | | [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer) | `0.4.9` | `0.4.10` | | [github.com/projectdiscovery/hmap](https://github.com/projectdiscovery/hmap) | `0.0.93` | `0.0.94` | | [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) | `1.0.123` | `1.0.124` | | [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) | `0.6.0` | `0.7.0` | | [github.com/projectdiscovery/networkpolicy](https://github.com/projectdiscovery/networkpolicy) | `0.1.23` | `0.1.24` | | [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) | `0.2.45` | `0.2.46` | | [github.com/projectdiscovery/cdncheck](https://github.com/projectdiscovery/cdncheck) | `1.1.35` | `1.1.36` | Updates `github.com/projectdiscovery/fastdialer` from 0.4.9 to 0.4.10 - [Release notes](https://github.com/projectdiscovery/fastdialer/releases) - [Commits](https://github.com/projectdiscovery/fastdialer/compare/v0.4.9...v0.4.10) Updates `github.com/projectdiscovery/hmap` from 0.0.93 to 0.0.94 - [Release notes](https://github.com/projectdiscovery/hmap/releases) - [Commits](https://github.com/projectdiscovery/hmap/compare/v0.0.93...v0.0.94) Updates `github.com/projectdiscovery/retryablehttp-go` from 1.0.123 to 1.0.124 - [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases) - [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.123...v1.0.124) Updates `github.com/projectdiscovery/dsl` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/projectdiscovery/dsl/releases) - [Commits](https://github.com/projectdiscovery/dsl/compare/v0.6.0...v0.7.0) Updates `github.com/projectdiscovery/networkpolicy` from 0.1.23 to 0.1.24 - [Release notes](https://github.com/projectdiscovery/networkpolicy/releases) - [Commits](https://github.com/projectdiscovery/networkpolicy/compare/v0.1.23...v0.1.24) Updates `github.com/projectdiscovery/wappalyzergo` from 0.2.45 to 0.2.46 - [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases) - [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.2.45...v0.2.46) Updates `github.com/projectdiscovery/cdncheck` from 1.1.35 to 1.1.36 - [Release notes](https://github.com/projectdiscovery/cdncheck/releases) - [Changelog](https://github.com/projectdiscovery/cdncheck/blob/main/.goreleaser.yaml) - [Commits](https://github.com/projectdiscovery/cdncheck/compare/v1.1.35...v1.1.36) --- updated-dependencies: - dependency-name: github.com/projectdiscovery/fastdialer dependency-version: 0.4.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/hmap dependency-version: 0.0.94 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/retryablehttp-go dependency-version: 1.0.124 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/dsl dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: modules - dependency-name: github.com/projectdiscovery/networkpolicy dependency-version: 0.1.24 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/wappalyzergo dependency-version: 0.2.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/cdncheck dependency-version: 1.1.36 dependency-type: indirect update-type: version-update:semver-patch dependency-group: modules ... Signed-off-by: dependabot[bot] <support@github.com> * fix: update go jira deps (#6475) * fix: handle jira deprecated endpoint * refactor: update Jira issue search result structure to include 'Self' field * Revert "refactor: update Jira issue search result structure to include 'Self' field" This reverts commit b0953419d33dff3fb61f1bcdcddab0ae759379b8. * Revert "fix: handle jira deprecated endpoint" This reverts commit 1fc05076cdb31906f403d80455b2e1609a66e2ae. * chore(deps): bump github.com/andygrunwald/go-jira to v1.16.1 and tidy * fix(jira): migrate Issue.Search to SearchV2JQL with explicit Fields * cache, goroutine and unbounded workers management (#6420) * Enhance matcher compilation with caching for regex and DSL expressions to improve performance. Update template parsing to conditionally retain raw templates based on size constraints. * Implement caching for regex and DSL expressions in extractors and matchers to enhance performance. Introduce a buffer pool in raw requests to reduce memory allocations. Update template cache management for improved efficiency. * feat: improve concurrency to be bound * refactor: replace fmt.Sprintf with fmt.Fprintf for improved performance in header handling * feat: add regex matching tests and benchmarks for performance evaluation * feat: add prefix check in regex extraction to optimize matching process * feat: implement regex caching mechanism to enhance performance in extractors and matchers, along with tests and benchmarks for validation * feat: add unit tests for template execution in the core engine, enhancing test coverage and reliability * feat: enhance error handling in template execution and improve regex caching logic for better performance * Implement caching for regex and DSL expressions in the cache package, replacing previous sync.Map usage. Add unit tests for cache functionality, including eviction by capacity and retrieval of cached items. Update extractors and matchers to utilize the new cache system for improved performance and memory efficiency. * Add tests for SetCapacities in cache package to ensure cache behavior on capacity changes - Implemented TestSetCapacities_NoRebuildOnZero to verify that setting capacities to zero does not clear existing caches. - Added TestSetCapacities_BeforeFirstUse to confirm that initial cache settings are respected and not overridden by subsequent capacity changes. * Refactor matchers and update load test generator to use io package - Removed maxRegexScanBytes constant from match.go. - Replaced ioutil with io package in load_test.go for NopCloser usage. - Restored TestValidate_AllowsInlineMultiline in load_test.go to ensure inline validation functionality. * Add cancellation support in template execution and enhance test coverage - Updated executeTemplateWithTargets to respect context cancellation. - Introduced fakeTargetProvider and slowExecuter for testing. - Added Test_executeTemplateWithTargets_RespectsCancellation to validate cancellation behavior during template execution. * Refactored header-based auth scans not to normalize the header names. (#6479) * Refactored header-based auth scans not to normalize the header names. * Removed the header validation as it's not really useful here. * adding docs --------- Co-authored-by: Mzack9999 <mzack9999@protonmail.com> * docs: update syntax & JSON schema 🤖 * chore(deps): bump the modules group with 6 updates Bumps the modules group with 6 updates: | Package | From | To | | --- | --- | --- | | [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer) | `0.4.10` | `0.4.11` | | [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) | `1.0.124` | `1.0.125` | | [github.com/projectdiscovery/gologger](https://github.com/projectdiscovery/gologger) | `1.1.54` | `1.1.55` | | [github.com/projectdiscovery/networkpolicy](https://github.com/projectdiscovery/networkpolicy) | `0.1.24` | `0.1.25` | | [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) | `0.2.46` | `0.2.47` | | [github.com/projectdiscovery/cdncheck](https://github.com/projectdiscovery/cdncheck) | `1.1.36` | `1.2.0` | Updates `github.com/projectdiscovery/fastdialer` from 0.4.10 to 0.4.11 - [Release notes](https://github.com/projectdiscovery/fastdialer/releases) - [Commits](https://github.com/projectdiscovery/fastdialer/compare/v0.4.10...v0.4.11) Updates `github.com/projectdiscovery/retryablehttp-go` from 1.0.124 to 1.0.125 - [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases) - [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.124...v1.0.125) Updates `github.com/projectdiscovery/gologger` from 1.1.54 to 1.1.55 - [Release notes](https://github.com/projectdiscovery/gologger/releases) - [Commits](https://github.com/projectdiscovery/gologger/compare/v1.1.54...v1.1.55) Updates `github.com/projectdiscovery/networkpolicy` from 0.1.24 to 0.1.25 - [Release notes](https://github.com/projectdiscovery/networkpolicy/releases) - [Commits](https://github.com/projectdiscovery/networkpolicy/compare/v0.1.24...v0.1.25) Updates `github.com/projectdiscovery/wappalyzergo` from 0.2.46 to 0.2.47 - [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases) - [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.2.46...v0.2.47) Updates `github.com/projectdiscovery/cdncheck` from 1.1.36 to 1.2.0 - [Release notes](https://github.com/projectdiscovery/cdncheck/releases) - [Changelog](https://github.com/projectdiscovery/cdncheck/blob/main/.goreleaser.yaml) - [Commits](https://github.com/projectdiscovery/cdncheck/compare/v1.1.36...v1.2.0) --- updated-dependencies: - dependency-name: github.com/projectdiscovery/fastdialer dependency-version: 0.4.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/retryablehttp-go dependency-version: 1.0.125 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/gologger dependency-version: 1.1.55 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/networkpolicy dependency-version: 0.1.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/wappalyzergo dependency-version: 0.2.47 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/cdncheck dependency-version: 1.2.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: modules ... Signed-off-by: dependabot[bot] <support@github.com> * Feat 6231 deadlock (#6469) * fixing recursive deadlock * using atomics * fixing init * feat(fuzz): enhance `MultiPartForm` with metadata APIs (#6486) * feat(fuzz): enhance `MultiPartForm` with metadata APIs * add `SetFileMetadata`/`GetFileMetadata` APIs for file metadata management. * implement RFC-2046 boundary validation (max 70 chars). * add boundary validation in `Decode` method. * fix `filesMetadata` initialization. * fix mem leak by removing defer from file reading loop. * fix file metadata overwriting by storing first file's metadata instead of last. Closes #6405, #6406 Signed-off-by: Dwi Siswanto <git@dw1.io> * chore(fuzz): satisfy lint errs Signed-off-by: Dwi Siswanto <git@dw1.io> --------- Signed-off-by: Dwi Siswanto <git@dw1.io> * jira: hotfix for Cloud to use /rest/api/3/search/jql (#6489) * jira: hotfix for Cloud to use /rest/api/3/search/jql in FindExistingIssue; add live test verifying v3 endpoint * jira: fix Cloud v3 search response handling (no total); set Self from base * fix lint error * tests(jira): apply De Morgan to satisfy staticcheck QF1001 * fix headless template loading logic when `-dast` option is enabled * fix: improve cleanup in parallel execution (#6490) * fixing logic * fix(templates): suppress warn code flag not found on validate. fixes #6498 Signed-off-by: Dwi Siswanto <git@dw1.io> * feat(config): adds known misc directories and excludes em in IsTemplate func. Signed-off-by: Dwi Siswanto <git@dw1.io> * fix(disk): uses `config.IsTemplate` instead fixes #6499 Signed-off-by: Dwi Siswanto <git@dw1.io> * chore(make): rm unnecessary flag on template-validate Signed-off-by: Dwi Siswanto <git@dw1.io> * refactor(confif): update known misc dirs & improve IsTemplate func Signed-off-by: Dwi Siswanto <git@dw1.io> * chore(deps): bump the modules group with 7 updates (#6505) Bumps the modules group with 7 updates: | Package | From | To | | --- | --- | --- | | [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) | `1.0.125` | `1.0.126` | | [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) | `0.7.0` | `0.7.1` | | [github.com/projectdiscovery/gologger](https://github.com/projectdiscovery/gologger) | `1.1.55` | `1.1.56` | | [github.com/projectdiscovery/mapcidr](https://github.com/projectdiscovery/mapcidr) | `1.1.34` | `1.1.95` | | [github.com/projectdiscovery/utils](https://github.com/projectdiscovery/utils) | `0.5.0` | `0.6.0` | | [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) | `0.2.47` | `0.2.48` | | [github.com/projectdiscovery/cdncheck](https://github.com/projectdiscovery/cdncheck) | `1.2.0` | `1.2.3` | Updates `github.com/projectdiscovery/retryablehttp-go` from 1.0.125 to 1.0.126 - [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases) - [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.125...v1.0.126) Updates `github.com/projectdiscovery/dsl` from 0.7.0 to 0.7.1 - [Release notes](https://github.com/projectdiscovery/dsl/releases) - [Commits](https://github.com/projectdiscovery/dsl/compare/v0.7.0...v0.7.1) Updates `github.com/projectdiscovery/gologger` from 1.1.55 to 1.1.56 - [Release notes](https://github.com/projectdiscovery/gologger/releases) - [Commits](https://github.com/projectdiscovery/gologger/compare/v1.1.55...v1.1.56) Updates `github.com/projectdiscovery/mapcidr` from 1.1.34 to 1.1.95 - [Release notes](https://github.com/projectdiscovery/mapcidr/releases) - [Changelog](https://github.com/projectdiscovery/mapcidr/blob/main/.goreleaser.yml) - [Commits](https://github.com/projectdiscovery/mapcidr/compare/v1.1.34...v1.1.95) Updates `github.com/projectdiscovery/utils` from 0.5.0 to 0.6.0 - [Release notes](https://github.com/projectdiscovery/utils/releases) - [Changelog](https://github.com/projectdiscovery/utils/blob/main/CHANGELOG.md) - [Commits](https://github.com/projectdiscovery/utils/compare/v0.5.0...v0.6.0) Updates `github.com/projectdiscovery/wappalyzergo` from 0.2.47 to 0.2.48 - [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases) - [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.2.47...v0.2.48) Updates `github.com/projectdiscovery/cdncheck` from 1.2.0 to 1.2.3 - [Release notes](https://github.com/projectdiscovery/cdncheck/releases) - [Changelog](https://github.com/projectdiscovery/cdncheck/blob/main/.goreleaser.yaml) - [Commits](https://github.com/projectdiscovery/cdncheck/compare/v1.2.0...v1.2.3) --- updated-dependencies: - dependency-name: github.com/projectdiscovery/retryablehttp-go dependency-version: 1.0.126 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/dsl dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/gologger dependency-version: 1.1.56 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/mapcidr dependency-version: 1.1.95 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/utils dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: modules - dependency-name: github.com/projectdiscovery/wappalyzergo dependency-version: 0.2.48 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/cdncheck dependency-version: 1.2.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: modules ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fix(config): normalize `fpath` in `IsTemplate` * normalize file `fpath` in `IsTemplate` using filepath.FromSlash to ensure consistent matching across platforms. * update `GetKnownMiscDirectories` docs to clarify that trailing slashes prevent false positives, since `IsTemplate` compares against normalized full paths. Signed-off-by: Dwi Siswanto <git@dw1.io> * ai recommendations * chore(deps): bump the modules group with 10 updates Bumps the modules group with 10 updates: | Package | From | To | | --- | --- | --- | | [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer) | `0.4.11` | `0.4.12` | | [github.com/projectdiscovery/hmap](https://github.com/projectdiscovery/hmap) | `0.0.94` | `0.0.95` | | [github.com/projectdiscovery/retryabledns](https://github.com/projectdiscovery/retryabledns) | `1.0.107` | `1.0.108` | | [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) | `1.0.126` | `1.0.127` | | [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) | `0.7.1` | `0.7.2` | | [github.com/projectdiscovery/gologger](https://github.com/projectdiscovery/gologger) | `1.1.56` | `1.1.57` | | [github.com/projectdiscovery/networkpolicy](https://github.com/projectdiscovery/networkpolicy) | `0.1.25` | `0.1.26` | | [github.com/projectdiscovery/useragent](https://github.com/projectdiscovery/useragent) | `0.0.101` | `0.0.102` | | [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) | `0.2.48` | `0.2.49` | | [github.com/projectdiscovery/cdncheck](https://github.com/projectdiscovery/cdncheck) | `1.2.3` | `1.2.4` | Updates `github.com/projectdiscovery/fastdialer` from 0.4.11 to 0.4.12 - [Release notes](https://github.com/projectdiscovery/fastdialer/releases) - [Commits](https://github.com/projectdiscovery/fastdialer/compare/v0.4.11...v0.4.12) Updates `github.com/projectdiscovery/hmap` from 0.0.94 to 0.0.95 - [Release notes](https://github.com/projectdiscovery/hmap/releases) - [Commits](https://github.com/projectdiscovery/hmap/compare/v0.0.94...v0.0.95) Updates `github.com/projectdiscovery/retryabledns` from 1.0.107 to 1.0.108 - [Release notes](https://github.com/projectdiscovery/retryabledns/releases) - [Commits](https://github.com/projectdiscovery/retryabledns/compare/v1.0.107...v1.0.108) Updates `github.com/projectdiscovery/retryablehttp-go` from 1.0.126 to 1.0.127 - [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases) - [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.126...v1.0.127) Updates `github.com/projectdiscovery/dsl` from 0.7.1 to 0.7.2 - [Release notes](https://github.com/projectdiscovery/dsl/releases) - [Commits](https://github.com/projectdiscovery/dsl/compare/v0.7.1...v0.7.2) Updates `github.com/projectdiscovery/gologger` from 1.1.56 to 1.1.57 - [Release notes](https://github.com/projectdiscovery/gologger/releases) - [Commits](https://github.com/projectdiscovery/gologger/compare/v1.1.56...v1.1.57) Updates `github.com/projectdiscovery/networkpolicy` from 0.1.25 to 0.1.26 - [Release notes](https://github.com/projectdiscovery/networkpolicy/releases) - [Commits](https://github.com/projectdiscovery/networkpolicy/compare/v0.1.25...v0.1.26) Updates `github.com/projectdiscovery/useragent` from 0.0.101 to 0.0.102 - [Release notes](https://github.com/projectdiscovery/useragent/releases) - [Commits](https://github.com/projectdiscovery/useragent/compare/v0.0.101...v0.0.102) Updates `github.com/projectdiscovery/wappalyzergo` from 0.2.48 to 0.2.49 - [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases) - [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.2.48...v0.2.49) Updates `github.com/projectdiscovery/cdncheck` from 1.2.3 to 1.2.4 - [Release notes](https://github.com/projectdiscovery/cdncheck/releases) - [Changelog](https://github.com/projectdiscovery/cdncheck/blob/main/.goreleaser.yaml) - [Commits](https://github.com/projectdiscovery/cdncheck/compare/v1.2.3...v1.2.4) --- updated-dependencies: - dependency-name: github.com/projectdiscovery/fastdialer dependency-version: 0.4.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/hmap dependency-version: 0.0.95 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/retryabledns dependency-version: 1.0.108 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/retryablehttp-go dependency-version: 1.0.127 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/dsl dependency-version: 0.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/gologger dependency-version: 1.1.57 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/networkpolicy dependency-version: 0.1.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/useragent dependency-version: 0.0.102 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/wappalyzergo dependency-version: 0.2.49 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/cdncheck dependency-version: 1.2.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: modules ... Signed-off-by: dependabot[bot] <support@github.com> * feat: http(s) probing optimization * small changes * updating docs * chore(typos): fix typos * log failed expr compilations * Update Go version badge in README update accordingly * Update README.md edit correct version of go * Update Go version requirement in README (#6529) need to update required go version from 1.23 to >=1.24.1 * fix(variable): global variable not same between two request in flow mode (#6395) * fix(variable): global variable not same between two request in flow mode(#6337) * update gitignore --------- Co-authored-by: chuu <7704684+lizhi3n@user.noreply.gitee.com> Co-authored-by: PDTeamX <8293321+ehsandeep@users.noreply.github.com> Co-authored-by: Mzack9999 <mzack9999@protonmail.com> * chore: add typos check into tests CI Signed-off-by: Dwi Siswanto <git@dw1.io> * chore(deps): bump github/codeql-action in the workflows group Bumps the workflows group with 1 update: [github/codeql-action](https://github.com/github/codeql-action). Updates `github/codeql-action` from 3 to 4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3...v4) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: workflows ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump the modules group with 7 updates Bumps the modules group with 7 updates: | Package | From | To | | --- | --- | --- | | [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer) | `0.4.12` | `0.4.13` | | [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) | `1.0.127` | `1.0.128` | | [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) | `0.7.2` | `0.8.0` | | [github.com/projectdiscovery/gologger](https://github.com/projectdiscovery/gologger) | `1.1.57` | `1.1.58` | | [github.com/projectdiscovery/mapcidr](https://github.com/projectdiscovery/mapcidr) | `1.1.95` | `1.1.96` | | [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) | `0.2.49` | `0.2.50` | | [github.com/projectdiscovery/cdncheck](https://github.com/projectdiscovery/cdncheck) | `1.2.4` | `1.2.5` | Updates `github.com/projectdiscovery/fastdialer` from 0.4.12 to 0.4.13 - [Release notes](https://github.com/projectdiscovery/fastdialer/releases) - [Commits](https://github.com/projectdiscovery/fastdialer/compare/v0.4.12...v0.4.13) Updates `github.com/projectdiscovery/retryablehttp-go` from 1.0.127 to 1.0.128 - [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases) - [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.127...v1.0.128) Updates `github.com/projectdiscovery/dsl` from 0.7.2 to 0.8.0 - [Release notes](https://github.com/projectdiscovery/dsl/releases) - [Commits](https://github.com/projectdiscovery/dsl/compare/v0.7.2...v0.8.0) Updates `github.com/projectdiscovery/gologger` from 1.1.57 to 1.1.58 - [Release notes](https://github.com/projectdiscovery/gologger/releases) - [Commits](https://github.com/projectdiscovery/gologger/compare/v1.1.57...v1.1.58) Updates `github.com/projectdiscovery/mapcidr` from 1.1.95 to 1.1.96 - [Release notes](https://github.com/projectdiscovery/mapcidr/releases) - [Changelog](https://github.com/projectdiscovery/mapcidr/blob/main/.goreleaser.yml) - [Commits](https://github.com/projectdiscovery/mapcidr/compare/v1.1.95...v1.1.96) Updates `github.com/projectdiscovery/wappalyzergo` from 0.2.49 to 0.2.50 - [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases) - [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.2.49...v0.2.50) Updates `github.com/projectdiscovery/cdncheck` from 1.2.4 to 1.2.5 - [Release notes](https://github.com/projectdiscovery/cdncheck/releases) - [Changelog](https://github.com/projectdiscovery/cdncheck/blob/main/.goreleaser.yaml) - [Commits](https://github.com/projectdiscovery/cdncheck/compare/v1.2.4...v1.2.5) --- updated-dependencies: - dependency-name: github.com/projectdiscovery/fastdialer dependency-version: 0.4.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/retryablehttp-go dependency-version: 1.0.128 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/dsl dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: modules - dependency-name: github.com/projectdiscovery/gologger dependency-version: 1.1.58 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/mapcidr dependency-version: 1.1.96 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/wappalyzergo dependency-version: 0.2.50 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/cdncheck dependency-version: 1.2.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: modules ... Signed-off-by: dependabot[bot] <support@github.com> * docs: update syntax & JSON schema 🤖 * Revert "chore: add typos check into tests CI" This reverts commit 73e70ea49d18faee311be47a4207de8e476ee3a3. * chore: preserve issue report w/ issue form (#6531) Signed-off-by: Dwi Siswanto <git@dw1.io> * perf(loader): reuse cached parsed templates (#6504) * perf(loader): reuse cached parsed templates in `(*Store).areWorkflowOrTemplatesValid`, which is being called during template `-validate`-ion. Signed-off-by: Dwi Siswanto <git@dw1.io> * refactor(testutils): optionally assign template info in `NewMockExecuterOptions`, which is not required for specific case, like when we want to `(*Store).ValidateTemplates`. Signed-off-by: Dwi Siswanto <git@dw1.io> * test(loader): adds `(*Store).ValidateTemplates` bench Signed-off-by: Dwi Siswanto <git@dw1.io> * refactor(templates): adds fast read parser Signed-off-by: Dwi Siswanto <git@dw1.io> * test(templates): adds `Parser*` benchs Signed-off-by: Dwi Siswanto <git@dw1.io> * chore(templates): satisfy lints Signed-off-by: Dwi Siswanto <git@dw1.io> * revert(templates): rm fast read parser Signed-off-by: Dwi Siswanto <git@dw1.io> --------- Signed-off-by: Dwi Siswanto <git@dw1.io> * fix: Add important context to `tl` flag option * feat: template list alphabetical order * fix: Implement coderabbit suggestion * Http probing optimizations high ports (#6538) * feat: Assume HTTP(S) server on high port is HTTP * feat: enhance http probing tests * improving issue description --------- Co-authored-by: Matej Smycka <smycka@ics.muni.cz> Co-authored-by: Mzack9999 <mzack9999@protonmail.com> * chore(deps): bump the modules group with 5 updates (#6543) Bumps the modules group with 5 updates: | Package | From | To | | --- | --- | --- | | [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) | `1.0.128` | `1.0.129` | | [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) | `0.8.0` | `0.8.1` | | [github.com/projectdiscovery/gologger](https://github.com/projectdiscovery/gologger) | `1.1.58` | `1.1.59` | | [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) | `0.2.50` | `0.2.51` | | [github.com/projectdiscovery/cdncheck](https://github.com/projectdiscovery/cdncheck) | `1.2.5` | `1.2.6` | Updates `github.com/projectdiscovery/retryablehttp-go` from 1.0.128 to 1.0.129 - [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases) - [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.128...v1.0.129) Updates `github.com/projectdiscovery/dsl` from 0.8.0 to 0.8.1 - [Release notes](https://github.com/projectdiscovery/dsl/releases) - [Commits](https://github.com/projectdiscovery/dsl/compare/v0.8.0...v0.8.1) Updates `github.com/projectdiscovery/gologger` from 1.1.58 to 1.1.59 - [Release notes](https://github.com/projectdiscovery/gologger/releases) - [Commits](https://github.com/projectdiscovery/gologger/compare/v1.1.58...v1.1.59) Updates `github.com/projectdiscovery/wappalyzergo` from 0.2.50 to 0.2.51 - [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases) - [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.2.50...v0.2.51) Updates `github.com/projectdiscovery/cdncheck` from 1.2.5 to 1.2.6 - [Release notes](https://github.com/projectdiscovery/cdncheck/releases) - [Changelog](https://github.com/projectdiscovery/cdncheck/blob/main/.goreleaser.yaml) - [Commits](https://github.com/projectdiscovery/cdncheck/compare/v1.2.5...v1.2.6) --- updated-dependencies: - dependency-name: github.com/projectdiscovery/retryablehttp-go dependency-version: 1.0.129 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/dsl dependency-version: 0.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/gologger dependency-version: 1.1.59 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/wappalyzergo dependency-version: 0.2.51 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/cdncheck dependency-version: 1.2.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: modules ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fixing failing integration tests * clean up pools after 24hours inactivity * fixing lint * fixing go routine leak * bump utils * fixing leak * fixing syntax * removing go logo * fix: populate req_url_pattern before event creation (#6547) * refactor(disk): templates catalog (#5914) * refactor(disk): templates catalog Signed-off-by: Dwi Siswanto <git@dw1.io> * feat(disk): drying err Signed-off-by: Dwi Siswanto <git@dw1.io> * feat(disk): simplify `DiskCatalog.OpenFile` method since `BackwardsCompatiblePaths` func is already deprecated. Signed-off-by: Dwi Siswanto <git@dw1.io> * test: update functional test cases Signed-off-by: Dwi Siswanto <git@dw1.io> * feat: reuse error Signed-off-by: Dwi Siswanto <git@dw1.io> * fix(disk): handle glob errors consistently Signed-off-by: Dwi Siswanto <git@dw1.io> * fix(disk): use forward slashes for fs.FS path ops to fix Windows compat. The io/fs package requires forward slashes ("/") as path separators regardless of the OS. Using [filepath.Separator] or [os.PathSeparator] breaks [fs.Open] and [fs.Glob] ops on Windows where the separator is backslash ("\"). Signed-off-by: Dwi Siswanto <git@dw1.io> --------- Signed-off-by: Dwi Siswanto <git@dw1.io> * adding support for execution in docker * adding test for virtual code * executing virtual only on linux * chore(deps): bump actions/upload-artifact in the workflows group Bumps the workflows group with 1 update: [actions/upload-artifact](https://github.com/actions/upload-artifact). Updates `actions/upload-artifact` from 4 to 5 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v5) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: workflows ... Signed-off-by: dependabot[bot] <support@github.com> * chore(deps): bump the modules group with 5 updates (#6551) Bumps the modules group with 5 updates: | Package | From | To | | --- | --- | --- | | [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer) | `0.4.13` | `0.4.14` | | [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) | `0.8.1` | `0.8.2` | | [github.com/projectdiscovery/networkpolicy](https://github.com/projectdiscovery/networkpolicy) | `0.1.26` | `0.1.27` | | [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) | `0.2.51` | `0.2.52` | | [github.com/projectdiscovery/cdncheck](https://github.com/projectdiscovery/cdncheck) | `1.2.6` | `1.2.7` | Updates `github.com/projectdiscovery/fastdialer` from 0.4.13 to 0.4.14 - [Release notes](https://github.com/projectdiscovery/fastdialer/releases) - [Commits](https://github.com/projectdiscovery/fastdialer/compare/v0.4.13...v0.4.14) Updates `github.com/projectdiscovery/dsl` from 0.8.1 to 0.8.2 - [Release notes](https://github.com/projectdiscovery/dsl/releases) - [Commits](https://github.com/projectdiscovery/dsl/compare/v0.8.1...v0.8.2) Updates `github.com/projectdiscovery/networkpolicy` from 0.1.26 to 0.1.27 - [Release notes](https://github.com/projectdiscovery/networkpolicy/releases) - [Commits](https://github.com/projectdiscovery/networkpolicy/compare/v0.1.26...v0.1.27) Updates `github.com/projectdiscovery/wappalyzergo` from 0.2.51 to 0.2.52 - [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases) - [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.2.51...v0.2.52) Updates `github.com/projectdiscovery/cdncheck` from 1.2.6 to 1.2.7 - [Release notes](https://github.com/projectdiscovery/cdncheck/releases) - [Changelog](https://github.com/projectdiscovery/cdncheck/blob/main/.goreleaser.yaml) - [Commits](https://github.com/projectdiscovery/cdncheck/compare/v1.2.6...v1.2.7) --- updated-dependencies: - dependency-name: github.com/projectdiscovery/fastdialer dependency-version: 0.4.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/dsl dependency-version: 0.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/networkpolicy dependency-version: 0.1.27 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/wappalyzergo dependency-version: 0.2.52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/cdncheck dependency-version: 1.2.7 dependency-type: indirect update-type: version-update:semver-patch dependency-group: modules ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * fixing tests * adding virtual python * adding xpath + json extractors * adding tests * chore: satisfy lints Signed-off-by: Dwi Siswanto <git@dw1.io> * using clone options for auth store * fix(headless): fixed memory leak issue during page initialization (#6569) * fix(headless): fixed memory leak issue during page initialization * fix(headless): typo fix and added comment * fix(headless): one more typo fix * feat: best-effort keyboard-interactive support for SSH * fix: provide answer only when asked for * fix: add logging * feat(js): enhance SSH keyboard interactive auth by: * implement regex-based prompt matching for password variants. * add support for filling username prompts in keyboard interactive challenges. * improve debug logging with structured output. this addresses issues with servers using non-standard prompt formats and provides better visibility into auth failures. Signed-off-by: Dwi Siswanto <git@dw1.io> * chore(js): migrate `github.com/go-pg/pg` => `github.com/go-pg/pg/v10` Signed-off-by: Dwi Siswanto <git@dw1.io> * feat(templates): add file metadata fields to `parsedTemplate` (#6534) * feat(templates): add file metadata fields to `parsedTemplate` to track template file information for cache validation purposes. closes #6515. Signed-off-by: Dwi Siswanto <git@dw1.io> * chore(templates): satisfy lints Signed-off-by: Dwi Siswanto <git@dw1.io> --------- Signed-off-by: Dwi Siswanto <git@dw1.io> * chore(deps): bump the modules group with 7 updates Bumps the modules group with 7 updates: | Package | From | To | | --- | --- | --- | | [github.com/projectdiscovery/fastdialer](https://github.com/projectdiscovery/fastdialer) | `0.4.14` | `0.4.15` | | [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go) | `1.0.129` | `1.0.130` | | [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl) | `0.8.2` | `0.8.3` | | [github.com/projectdiscovery/mapcidr](https://github.com/projectdiscovery/mapcidr) | `1.1.96` | `1.1.97` | | [github.com/projectdiscovery/utils](https://github.com/projectdiscovery/utils) | `0.6.1-0.20251022145046-e013dc9c5bed` | `0.6.1-0.20251030144701-ce5c4b44e1e6` | | [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) | `0.2.52` | `0.2.53` | | [github.com/projectdiscovery/cdncheck](https://github.com/projectdiscovery/cdncheck) | `1.2.7` | `1.2.8` | Updates `github.com/projectdiscovery/fastdialer` from 0.4.14 to 0.4.15 - [Release notes](https://github.com/projectdiscovery/fastdialer/releases) - [Commits](https://github.com/projectdiscovery/fastdialer/compare/v0.4.14...v0.4.15) Updates `github.com/projectdiscovery/retryablehttp-go` from 1.0.129 to 1.0.130 - [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases) - [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.129...v1.0.130) Updates `github.com/projectdiscovery/dsl` from 0.8.2 to 0.8.3 - [Release notes](https://github.com/projectdiscovery/dsl/releases) - [Commits](https://github.com/projectdiscovery/dsl/compare/v0.8.2...v0.8.3) Updates `github.com/projectdiscovery/mapcidr` from 1.1.96 to 1.1.97 - [Release notes](https://github.com/projectdiscovery/mapcidr/releases) - [Changelog](https://github.com/projectdiscovery/mapcidr/blob/main/.goreleaser.yml) - [Commits](https://github.com/projectdiscovery/mapcidr/compare/v1.1.96...v1.1.97) Updates `github.com/projectdiscovery/utils` from 0.6.1-0.20251022145046-e013dc9c5bed to 0.6.1-0.20251030144701-ce5c4b44e1e6 - [Release notes](https://github.com/projectdiscovery/utils/releases) - [Changelog](https://github.com/projectdiscovery/utils/blob/main/CHANGELOG.md) - [Commits](https://github.com/projectdiscovery/utils/commits) Updates `github.com/projectdiscovery/wappalyzergo` from 0.2.52 to 0.2.53 - [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases) - [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.2.52...v0.2.53) Updates `github.com/projectdiscovery/cdncheck` from 1.2.7 to 1.2.8 - [Release notes](https://github.com/projectdiscovery/cdncheck/releases) - [Changelog](https://github.com/projectdiscovery/cdncheck/blob/main/.goreleaser.yaml) - [Commits](https://github.com/projectdiscovery/cdncheck/compare/v1.2.7...v1.2.8) --- updated-dependencies: - dependency-name: github.com/projectdiscovery/fastdialer dependency-version: 0.4.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/retryablehttp-go dependency-version: 1.0.130 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/dsl dependency-version: 0.8.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/mapcidr dependency-version: 1.1.97 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/utils dependency-version: 0.6.1-0.20251030144701-ce5c4b44e1e6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/wappalyzergo dependency-version: 0.2.53 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/cdncheck dependency-version: 1.2.8 dependency-type: indirect update-type: version-update:semver-patch dependency-group: modules ... Signed-off-by: dependabot[bot] <support@github.com> * fix(templates): mem leaks in parser cache Fixes duplicate template storage & removes unnecessary raw bytes caching. Mem usage reduced by ~30%. > 423MB => 299MB heap alloc. * Use `StoreWithoutRaw()` to avoid storing raw bytes. * Remove duplicate storage in both caches. * Remove ineffective raw bytes retrieval logic. Benchmarks show 45% perf improvement with no regressions. Signed-off-by: Dwi Siswanto <git@dw1.io> * fix(http): resolve timeout config issues (#6562) across multiple layers Fixes timeout configuration conflicts where HTTP requests would timeout prematurely despite configured values in `@timeout` annotations or `-timeout` flags. RCA: * `retryablehttp` pkg overriding with default 30s timeout. * Custom timeouts not propagating to `retryablehttp` layer. * Multiple timeout layers not sync properly. Changes: * Propagate custom timeouts from `@timeout` annotations to `retryablehttp` layer. * Adjust 5-minute maximum cap to prevent DoS via extremely large timeouts. * Ensure `retryableHttpOptions.Timeout` respects `ResponseHeaderTimeout`. * Add comprehensive tests for timeout capping behavior. This allows templates to override global timeout via `@timeout` annotations while preventing abuse thru unreasonably large timeout values. Fixes #6560. Signed-off-by: Dwi Siswanto <git@dw1.io> * add env variable for nuclei tempaltes dir * chore(deps): bump github.com/opencontainers/runc Bumps the go_modules group with 1 update in the / directory: [github.com/opencontainers/runc](https://github.com/opencontainers/runc). Updates `github.com/opencontainers/runc` from 1.2.3 to 1.2.8 - [Release notes](https://github.com/opencontainers/runc/releases) - [Changelog](https://github.com/opencontainers/runc/blob/v1.2.8/CHANGELOG.md) - [Commits](https://github.com/opencontainers/runc/compare/v1.2.3...v1.2.8) --- updated-dependencies: - dependency-name: github.com/opencontainers/runc dependency-version: 1.2.8 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com> * adding env tests on linux * docs: update syntax & JSON schema 🤖 * chore(deps): bump the modules group with 4 updates Bumps the modules group with 4 updates: [github.com/projectdiscovery/retryablehttp-go](https://github.com/projectdiscovery/retryablehttp-go), [github.com/projectdiscovery/dsl](https://github.com/projectdiscovery/dsl), [github.com/projectdiscovery/wappalyzergo](https://github.com/projectdiscovery/wappalyzergo) and [github.com/projectdiscovery/cdncheck](https://github.com/projectdiscovery/cdncheck). Updates `github.com/projectdiscovery/retryablehttp-go` from 1.0.130 to 1.0.131 - [Release notes](https://github.com/projectdiscovery/retryablehttp-go/releases) - [Commits](https://github.com/projectdiscovery/retryablehttp-go/compare/v1.0.130...v1.0.131) Updates `github.com/projectdiscovery/dsl` from 0.8.3 to 0.8.4 - [Release notes](https://github.com/projectdiscovery/dsl/releases) - [Commits](https://github.com/projectdiscovery/dsl/compare/v0.8.3...v0.8.4) Updates `github.com/projectdiscovery/wappalyzergo` from 0.2.53 to 0.2.54 - [Release notes](https://github.com/projectdiscovery/wappalyzergo/releases) - [Commits](https://github.com/projectdiscovery/wappalyzergo/compare/v0.2.53...v0.2.54) Updates `github.com/projectdiscovery/cdncheck` from 1.2.8 to 1.2.9 - [Release notes](https://github.com/projectdiscovery/cdncheck/releases) - [Changelog](https://github.com/projectdiscovery/cdncheck/blob/main/.goreleaser.yaml) - [Commits](https://github.com/projectdiscovery/cdncheck/compare/v1.2.8...v1.2.9) --- updated-dependencies: - dependency-name: github.com/projectdiscovery/retryablehttp-go dependency-version: 1.0.131 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: modules - dependency-name: github.com/projectdiscovery/dsl depe…

auto-assign bot requested a review from Mzack9999 October 29, 2025 15:26

coderabbitai bot reviewed Oct 29, 2025

View reviewed changes

pkg/protocols/http/request_annotations.go Show resolved Hide resolved

coderabbitai bot reviewed Oct 30, 2025

View reviewed changes

Mzack9999 approved these changes Oct 30, 2025

View reviewed changes

dwisiswant0 force-pushed the dwisiswant0/fix/http/resolve-timeout-config-issues branch from 7af3a89 to cca3233 Compare November 4, 2025 00:32

dwisiswant0 merged commit d7da0e0 into dev Nov 4, 2025
19 checks passed

dwisiswant0 deleted the dwisiswant0/fix/http/resolve-timeout-config-issues branch November 4, 2025 01:51

BrewTestBot mentioned this pull request Nov 14, 2025

nuclei 3.5.0 Homebrew/homebrew-core#254453

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(http): resolve timeout config issues#6562

fix(http): resolve timeout config issues#6562
dwisiswant0 merged 1 commit intodevfrom
dwisiswant0/fix/http/resolve-timeout-config-issues

dwisiswant0 commented Oct 29, 2025 •

edited by coderabbitai bot

Loading

Uh oh!

coderabbitai bot commented Oct 29, 2025 •

edited

Loading

Uh oh!

coderabbitai bot left a comment

Uh oh!

Uh oh!

coderabbitai bot left a comment

Uh oh!

dwisiswant0 commented Oct 30, 2025

Uh oh!

Mzack9999 commented Oct 30, 2025 •

edited by ehsandeep

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dwisiswant0 commented Oct 29, 2025 • edited by coderabbitai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Proposed changes

Proof

Checklist

Summary by CodeRabbit

Release Notes

Uh oh!

coderabbitai bot commented Oct 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Poem

Pre-merge checks and finishing touches

Uh oh!

coderabbitai bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

coderabbitai bot left a comment

Choose a reason for hiding this comment

Uh oh!

dwisiswant0 commented Oct 30, 2025

Uh oh!

Mzack9999 commented Oct 30, 2025 • edited by ehsandeep Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dwisiswant0 commented Oct 29, 2025 •

edited by coderabbitai bot

Loading

coderabbitai bot commented Oct 29, 2025 •

edited

Loading

Mzack9999 commented Oct 30, 2025 •

edited by ehsandeep

Loading