gopwebtampering

Documentation

Index

• Variables
• func NginxOffBySlash(webRequestFilename string, urlOption string, validResources []string, ...) error
• func TamperHostHeader(webRequestFilename string) error
• func TamperIPSource(webRequestFilename string) error
• func TamperReferrerHeader(webRequestFilename string) error
• type OptionsStruct

Variables

var HeadersIP = []string{
	"X-Forwarded-For",
	"X-Real-IP",
	"X-ProxyUser-Ip",
	"Client-IP",
	"Forwarded-For-Ip",
	"Forwarded-For",
	"Forwarded-For",
	"Forwarded",
	"Forwarded",
	"True-Client-IP",
	"X-Client-IP",
	"X-Custom-IP-Authorization",
	"X-Forward-For",
	"X-Forward",
	"X-Forward",
	"X-Forwarded-By",
	"X-Forwarded-By",
	"X-Forwarded-For-Original",
	"X-Forwarded-For-Original",
	"X-Forwarded-For",
	"X-Forwarded-For",
	"X-Forwarded-Server",
	"X-Forwarded-Server",
	"X-Forwarded",
	"X-Forwarded",
	"X-Forwared-Host",
	"X-Forwared-Host",
	"X-Host",
	"X-Host",
	"X-HTTP-Host-Override",
	"X-Originating-IP",
	"X-Real-IP",
	"X-Remote-Addr",
	"X-Remote-Addr",
	"X-Remote-IP",
}

var LocalhostAddresses = []string{
	"127.0.0.1",
	"localhost",
	"0",
	"[::]",
	"[0000::1]",
	"[0:0:0:0:0:ffff:127.0.0.1]",
	"①②⑦.⓪.⓪.⓪",
	"127.127.127.127",
	"127.0.1.3",
	"127.0.0.0",
	"127。0。0。1",
	"127%E3%80%820%E3%80%820%E3%80%821",
	"192.168.0.1",
	"192.168.1.1",

	"2130706433",

	"0177.0000.0000.0001",
	"00000177.00000000.00000000.00000001",
	"017700000001",

	"0x7f000001",

	"spoofed.burpcollaborator.net",
}

Functions

func NginxOffBySlash

func NginxOffBySlash(webRequestFilename string, urlOption string, validResources []string, shownStatusCode []int) error

func TamperHostHeader

func TamperHostHeader(webRequestFilename string) error

func TamperIPSource

func TamperIPSource(webRequestFilename string) error

func TamperReferrerHeader

func TamperReferrerHeader(webRequestFilename string) error

Types

type OptionsStruct

type OptionsStruct struct {
	Proxy string
}

var Options OptionsStruct