You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pkg/js/CONTRIBUTE.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -67,7 +67,7 @@ Javascript Protocol Documentation is auto-generated using [jsdoc] and is hosted
67
67
68
68
### Javascript Code Guidelines
69
69
70
-
1. Catch exceptions using `try/catch` blocks and handle errors gracefully, showing useful information. By default, the implementation returns a Go error on a unhandled exception along with stack trace in debug mode.
71
-
2. Use `let`/`cost` instead of `var` to declare variables.
70
+
1. Catch exceptions using `try/catch` blocks and handle errors gracefully, showing useful information. By default, the implementation returns a Go error on an unhandled exception along with stack trace in debug mode.
71
+
2. Use `let`/`const` instead of `var` to declare variables.
72
72
3. Keep the global scope clean. The VMs are not shared so do not rely on VM state.
73
73
4. Use functions to divide the code and keep the implementation clean.
Copy file name to clipboardExpand all lines: pkg/tmplexec/flow/README.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -108,13 +108,13 @@ The update template now seems straight forward and easy to understand. we are fi
108
108
- update variables at runtime (ex: when jwt expires update it by using refresh token and then continue execution)
109
109
- and a lot more (this is just a tip of iceberg)
110
110
111
-
simply put request execution orchestration can be understood as nuclei logic bindings for javascript (i.e. twoway interaction between javascript and nuclei for a specific template)
111
+
simply put request execution orchestration can be understood as nuclei logic bindings for javascript (i.e. two-way interaction between javascript and nuclei for a specific template)
112
112
113
113
To better understand orchestration we can try to build a template for vhost enumeration using flow. which usually requires writing / using a new tool
114
114
115
115
**for basic vhost enumeration a template should**
116
116
- do a PTR lookup for given ip
117
-
- get SSL certificate for given ip (i.e tls-grab)
117
+
- get SSL certificate for given ip (i.e. tls-grab)
**But this template is not yet ready as it is missing core logic i.e how we use all these obtained data and do bruteforce**
167
+
**But this template is not yet ready as it is missing core logic i.e. how we use all these obtained data and do bruteforce**
168
168
and this is where flow comes into picture. flow is javascript code with two way bindings to nuclei. if we write javascript code to orchestrate vhost enumeration it is as simple as
0 commit comments