fix CVE-2021-26084 bug

Author: SummerSec

cmd/commons/core/banner.go

@@ -15,10 +15,10 @@ const banner = `
 `
 
 // TODO 修改版本号
-const version = "0.1.0"
+const version = "0.0.10"
 
-func ShowBanner(Version string) {
+func ShowBanner() {
 	fmt.Println(banner)
-	fmt.Println("\t\t\tAuthor: SummerSec Version:", Version+" Github: https://Github.com/SummerSec\n")
+	fmt.Println("\t\t\tAuthor: SummerSec Version:", version+" Github: https://Github.com/SummerSec\n")
 
 }

cmd/commons/core/options.go

@@ -79,7 +79,7 @@ func ParseOptions() *Options {
 
 	// TODO 修改版本号
 	logs.SaveLogs(options.LogFile)
-	ShowBanner(version)
+	ShowBanner()
 	showVerbose(options)
 
 	if options.Version {

cmd/commons/poc/2021/CVE-2021-26084.go

@@ -56,14 +56,23 @@ func (CVE202126084) init() {
 }
 
 func (CVE202126084) SaveResult(target string, file string) {
-	utils.SaveToFile(target, file)
+	err := utils.SaveToFile(target, file)
+	if err != nil {
+		return
+	}
 }
 
 func (CVE202126084) CheckExp(resp *req.Response, target string, hashmap map[string]interface{}) bool {
 	if resp.IsSuccess() {
 		log.Debugf(resp.Dump())
 		return true
 	}
+	// 处理异常
+	defer func() {
+		if errs := recover(); errs != nil {
+			log.Debug(errs)
+		}
+	}()
 
 	return false
 

cmd/commons/utils/httpclient.go

@@ -56,7 +56,7 @@ func Send(hashmap map[string]interface{}) (resp *req.Response) {
 	reqs := SetRequest(reqt, headers, body.(string))
 	defer func() {
 		if err := recover(); err != nil {
-			log.Error("send request error:	" + err.(string))
+			log.Trace(err)
 		}
 	}()
 	resp, _ = reqs.Send(method, url)

cmd/test/url.go

@@ -1,22 +1,5 @@
 package main
 
-import (
-	"fmt"
-	"net/url"
-	"strings"
-)
-
 func main() {
-	u := "https://sumsec.me/"
-	//c := req.C()
-	//resp, _ := c.R().EnableDump().Get(u)
-	//s := resp.Dump()
-	//fmt.Println("--->" + s)
-
-	r, _ := url.Parse(u)
-	fmt.Println(r.Scheme + "://" + r.Host + r.Path)
-	d := ""
-	ds := strings.Split(d, ",")
-	fmt.Println(ds)
 
 }