Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

invalid behaviour for big http responses (files) #4942

Closed
savushkin-yauheni opened this issue Mar 25, 2024 · 0 comments · Fixed by #4944
Closed

invalid behaviour for big http responses (files) #4942

savushkin-yauheni opened this issue Mar 25, 2024 · 0 comments · Fixed by #4944
Assignees
Labels
Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors.
Milestone

Comments

@savushkin-yauheni
Copy link
Contributor

Hi

I think the problem is connected with #4722 and such code:

respChain := httpUtils.NewResponseChain(resp, maxBodylimit)

Right now if the response is really big nuclei throws error:

 could not generate response chain: error reading response body: could not read response body: http: request body too large

Nuclei version:

v3.2.2

Current Behavior:

throws error

Expected Behavior:

correctly handles the file

Steps To Reproduce:

id: fuzz-dirs

info:
  name: fuzz-dirs
  author: savik
  severity: info

requests:
  - method: GET
    path:
      - "{{BaseURL}}"
    skip-variables-check: true
    matchers:
      - type: status
        condition: or
        status:
          - 200
          - 201
          - 204
          - 206
          - 304
          - 500
 nuclei -t template.yaml -target https://download.binance.com/electron-desktop/mac/production/binance.dmg --debug

Regards

@savushkin-yauheni savushkin-yauheni added the Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors. label Mar 25, 2024
@dogancanbakir dogancanbakir self-assigned this Mar 25, 2024
@ehsandeep ehsandeep added this to the nuclei v3.2.5 milestone Apr 24, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants