We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Nuclei send raw HTTP requests in wrong order when pipelining is active.
Template:
id: multiple-raw-pipeline info: name: Test Raw pipeline author: raw-phil severity: info http: - raw: - |+ GET / HTTP/1.1 Host: {{Hostname}} - |+ POST /testing HTTP/1.1 Host: {{Hostname}} unsafe: true pipeline: true matchers: - type: word words: - "Test matcher"
I expect that nuclei will send first the GET and then the POST request, but the order is inverted.
$ nc -l 127.0.0.1 8080 POST /testing HTTP/1.1 Host: 127.0.0.1:8080 GET / HTTP/1.1 Host: 127.0.0.1:8080
nuclei -t ./wrong-order-raw.yaml -u http://127.0.0.1:8080 --debug __ _ ____ __ _______/ /__ (_) / __ \/ / / / ___/ / _ \/ / / / / / /_/ / /__/ / __/ / /_/ /_/\__,_/\___/_/\___/_/ v3.2.7 projectdiscovery.io [INF] Current nuclei version: v3.2.7 (latest) [INF] Current nuclei-templates version: v9.8.6 (latest) [WRN] Scan results upload to cloud is disabled. [INF] New templates added in latest release: 65 [INF] Templates loaded for current scan: 1 [WRN] Loading 1 unsigned templates for scan. Use with caution. [INF] Targets loaded for current scan: 1 [INF] [multiple-raw-pipeline] Dumped HTTP request for http://127.0.0.1:8080 POST / HTTP/1.1 Host: 127.0.0.1:8080 [INF] [multiple-raw-pipeline] Dumped HTTP request for http://127.0.0.1:8080 GET / HTTP/1.1 Host: 127.0.0.1:8080 ...
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Nuclei version: v3.2.7
Current Behavior:
Nuclei send raw HTTP requests in wrong order when pipelining is active.
Expected Behavior:
Template:
I expect that nuclei will send first the GET and then the POST request, but the order is inverted.
Steps To Reproduce:
The text was updated successfully, but these errors were encountered: