85e1fe8b68
`extractHeaders` had an incorrect regex that crashed Corsy with the msg: "sre_constants.error: nothing to repeat at position 1". This was caused by `^?`, which is not a valid regex, and can be reproduced with the README example: `python3 corsy.py -u https://example.com --headers "User-Agent: GoogleBot\nCookie: SESSION=Hacked"`. Instead of using the regex this commit simplifies the logic by using a `split` to split lines and header_name/value pairs.
76 lines
1.9 KiB
Python
76 lines
1.9 KiB
Python
import os
|
|
import re
|
|
import json
|
|
import tempfile
|
|
import re
|
|
|
|
from urllib.parse import urlparse
|
|
|
|
def host(string):
|
|
if string and '*' not in string:
|
|
return urlparse(string).netloc
|
|
|
|
|
|
def load_json(file):
|
|
with open(file) as f:
|
|
return json.load(f)
|
|
|
|
|
|
def format_result(result):
|
|
new_result = {}
|
|
for each in result:
|
|
if each:
|
|
for i in each:
|
|
new_result[i] = each[i]
|
|
return new_result
|
|
|
|
|
|
def create_url_list(target_url, inp_file):
|
|
urls = []
|
|
if inp_file:
|
|
with open(inp_file, 'r') as file:
|
|
for line in file:
|
|
if line.startswith(('http://', 'https://')):
|
|
urls.append(line.rstrip('\n'))
|
|
if target_url and target_url.startswith(('http://', 'https://')):
|
|
urls.append(target_url)
|
|
return urls
|
|
|
|
def create_stdin_list(target_url, inp_file):
|
|
urls = []
|
|
if inp_file:
|
|
for line in inp_file.readlines():
|
|
if line.startswith(('http://', 'https://')):
|
|
urls.append(line.rstrip('\n'))
|
|
if target_url and target_url.startswith(('http://', 'https://')):
|
|
urls.append(target_url)
|
|
return urls
|
|
|
|
def prompt(default=None):
|
|
editor = 'nano'
|
|
with tempfile.NamedTemporaryFile(mode='r+') as tmpfile:
|
|
if default:
|
|
tmpfile.write(default)
|
|
tmpfile.flush()
|
|
|
|
child_pid = os.fork()
|
|
is_child = child_pid == 0
|
|
|
|
if is_child:
|
|
os.execvp(editor, [editor, tmpfile.name])
|
|
else:
|
|
os.waitpid(child_pid, 0)
|
|
tmpfile.seek(0)
|
|
return tmpfile.read().strip()
|
|
|
|
|
|
def extractHeaders(headers: str):
|
|
sorted_headers = {}
|
|
for header in headers.split('\\n'):
|
|
name, value = header.split(":", 1)
|
|
name = name.strip()
|
|
value = value.strip()
|
|
if len(value) >= 1 and value[-1] == ',':
|
|
value = value[:-1]
|
|
sorted_headers[name] = value
|
|
return sorted_headers |