config headers

Author: Hideo Hattori

attacker.go

@@ -21,6 +21,7 @@ type Attacker struct {
 	UserAgent   string
 	Gzip        bool
 	QueryParams *map[string]string
+	Headers     *map[string]string
 	ExVarOffset map[string]int
 	sync.RWMutex
 }
@@ -81,6 +82,10 @@ func (atk *Attacker) makeRequest() (req *http.Request, err error) {
 	}
 	req.URL.RawQuery = values.Encode()
 
+	for k, v := range *atk.Headers {
+		req.Header.Add(k, v)
+	}
+
 	req.Header.Set("User-Agent", atk.UserAgent)
 	return req, err
 }

config.go

@@ -53,6 +53,7 @@ type Config struct {
 	Consts      map[string]string        `yaml:"consts"`
 	ExVars      []map[string]string      `yaml:"exvars"`
 	Vars        []map[string]string      `yaml:"vars"`
+	Headers     map[string]string        `yaml:"headers"`
 	HTTPVersion int                      `yaml:"http_version"`
 }
 

example/ev2.txt

@@ -0,0 +1,4 @@
+10
+09
+08
+07

example/vars.yml

@@ -10,7 +10,7 @@ exvars:
     - name: ev1
       file: ev.txt
     - name: ev2
-      file: ev.txt
+      file: ev2.txt
 
 vars:
     - name: v1
@@ -26,3 +26,6 @@ query_params:
     qp1: "%(ev1)%"
     qp2: "%(c1)%"
     qp3: "%(c2)%"
+
+headers:
+    X-Foo: "%(ev2)%"

main.go

@@ -55,6 +55,11 @@ func hakai(c http.Client, config *Config, offset map[string]int) {
 		queryParams[k] = vv
 	}
 
+	headers := map[string]string{}
+	for k, v := range config.Headers {
+		headers[k] = ReplaceNames(v, offset)
+	}
+
 	cookieJar, _ := cookiejar.New(nil)
 	c.Jar = cookieJar
 	attacker := Attacker{
@@ -63,6 +68,7 @@ func hakai(c http.Client, config *Config, offset map[string]int) {
 		Gzip:        config.Gzip,
 		UserAgent:   config.UserAgent,
 		QueryParams: &queryParams,
+		Headers:     &headers,
 		ExVarOffset: offset,
 	}
 	for _, action := range config.Actions {