Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
31 changes: 30 additions & 1 deletion src/wenum/externals/reqresp/cache.py
Original file line number Diff line number Diff line change
@@ -1,8 +1,12 @@
import copy
import datetime
import json
import os
from collections import defaultdict
from typing import Optional
from datetime import timedelta
from typing import Optional, List

import dateutil.parser

from wenum.externals.reqresp.CachedResponse import CachedResponse
from wenum.fuzzobjects import FuzzResult, FuzzType
Expand All @@ -19,6 +23,10 @@ def __init__(self, cache_dir: Optional[str] = None):
# cache control, a dictionary with URLs as keys and their values being lists full of the
# categories that the queries were categorized as
self.__cache_map = defaultdict(list)
# @TODO make this configurable
self.status_200_age = datetime.datetime.now(datetime.UTC) - timedelta(days=7)
self.status_404_age = datetime.datetime.now(datetime.UTC) - timedelta(days=60)

if cache_dir:
self.load_cache_dir(cache_dir)

Expand Down Expand Up @@ -67,6 +75,15 @@ def _fuzz_result_from_cache(self, key: str, fuzz_result: FuzzResult) -> FuzzResu
if key not in self.__cache_dir_map:
return None
cached = self.__cache_dir_map[key]
if "time" in cached:
time = dateutil.parser.parse(cached["time"])
if 200 <= cached['status'] < 400:
if time < self.status_200_age:
return None
elif 400 <= cached['status'] < 599:
if time < self.status_404_age:
return None

res_copy = copy.deepcopy(fuzz_result)
res_copy.item_type = FuzzType.RESULT

Expand All @@ -84,3 +101,15 @@ def _fuzz_result_from_cache(self, key: str, fuzz_result: FuzzResult) -> FuzzResu
res_copy.history._request.response = response

return res_copy

def cached_urls(self) -> List[str]:
"""
Get a list of all cached URLs with status code < 400
:return:
"""
if not self.cache_dir:
return []
for key, cached in self.__cache_dir_map.items():
if cached["status"] >= 400:
continue
yield key
29 changes: 29 additions & 0 deletions src/wenum/plugins/scripts/cache.py
Original file line number Diff line number Diff line change
@@ -0,0 +1,29 @@
from wenum.externals.moduleman.plugin import moduleman_plugin
from wenum.fuzzobjects import FuzzResult
from wenum.plugin_api.base import BasePlugin


@moduleman_plugin
class Cache(BasePlugin):
name = "cache"
author = ("Marmelatze",)
version = "0.1"
summary = "Feed cache entries to the fuzz queue."
description = ("Feed cache entrie to the fuzz queue",)
category = ["active", "discovery"]
priority = 200
output = []

parameters = (
)

def __init__(self, session):
BasePlugin.__init__(self, session)
self.run_once = True

def validate(self, fuzz_result):
return True

def process(self, fuzz_result: FuzzResult):
for url in self.session.cache.cached_urls():
self.queue_url(url)