Git
/
testssl.sh
mirror of https://github.com/drwetter/testssl.sh.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fix Accept header 

see #2325.

"whenever HTTP/1.1 is used then the Accept header uses "text/*" as a MIME type.
This causes some minor issues with some of the checks we are doing"
This commit is contained in:
Dirk 2023-02-20 15:01:40 +01:00
parent e57527f3ec
commit a14fc5bdcf
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
testssl.sh
View File

@ -17193,7 +17193,7 @@ run_breach() {
# Assemble the GET command with all available compressions and send them all, initially. # Assemble the GET command with all available compressions and send them all, initially.
# If the result is negative: we can just tell the finding and return. If it's # If the result is negative: we can just tell the finding and return. If it's
# positive: We already have identified 1x compression # positive: We already have identified 1x compression
get_command="GET $url HTTP/1.1\r\nHost: $NODE\r\nUser-Agent: $useragent\r\nReferer: $referer\r\nConnection: Close\r\nAccept-encoding: ${compressions// /,}\r\nAccept: text/*\r\n\r\n" get_command="GET $url HTTP/1.1\r\nHost: $NODE\r\nUser-Agent: $useragent\r\nReferer: $referer\r\nConnection: Close\r\nAccept-encoding: ${compressions// /,}\r\nAccept: */*\r\n\r\n"
detected_compression=$(sub_breach_helper "$get_command") detected_compression=$(sub_breach_helper "$get_command")
case "$detected_compression" in case "$detected_compression" in
warn_stalled) warn_stalled)
@ -17216,7 +17216,7 @@ run_breach() {
has_compression+=("$detected_compression:yes") has_compression+=("$detected_compression:yes")
compressions="${compressions//$detected_compression/}" compressions="${compressions//$detected_compression/}"
for c in $compressions; do for c in $compressions; do
get_command="GET $url HTTP/1.1\r\nHost: $NODE\r\nUser-Agent: $useragent\r\nReferer: $referer\r\nConnection: Close\r\nAccept-encoding: ${c}\r\nAccept: text/*\r\n\r\n" get_command="GET $url HTTP/1.1\r\nHost: $NODE\r\nUser-Agent: $useragent\r\nReferer: $referer\r\nConnection: Close\r\nAccept-encoding: ${c}\r\nAccept: */*\r\n\r\n"
detected_compression=$(sub_breach_helper "$get_command") detected_compression=$(sub_breach_helper "$get_command")
if [[ $? -ne 0 ]]; then if [[ $? -ne 0 ]]; then
# This failure unlikely here. The initial request must have succeeded and this one then # This failure unlikely here. The initial request must have succeeded and this one then
@ -21854,7 +21854,7 @@ determine_service() {
if [[ -n "$REQHEADERS" ]]; then if [[ -n "$REQHEADERS" ]]; then
reqheader="$(join_by "\r\n" "${REQHEADERS[@]}")\r\n" #Add all required custom http headers to one string with newlines reqheader="$(join_by "\r\n" "${REQHEADERS[@]}")\r\n" #Add all required custom http headers to one string with newlines
fi fi
GET_REQ11="GET $URL_PATH HTTP/1.1\r\nHost: $NODE\r\nUser-Agent: $ua\r\n${basicauth_header}${reqheader}Accept-Encoding: identity\r\nAccept: text/*\r\nConnection: Close\r\n\r\n" GET_REQ11="GET $URL_PATH HTTP/1.1\r\nHost: $NODE\r\nUser-Agent: $ua\r\n${basicauth_header}${reqheader}Accept-Encoding: identity\r\nAccept: */*\r\nConnection: Close\r\n\r\n"
determine_optimal_proto determine_optimal_proto
# returns always 0: # returns always 0:
service_detection $OPTIMAL_PROTO service_detection $OPTIMAL_PROTO