Merge pull request #293 from edoardottt/devel

v0.3.1 (#291)

pkg/csprecon/net.go

@@ -30,7 +30,11 @@ func DomainOk(input string, domains []string) bool {
 	}
 
 	for _, domain := range domains {
-		if len(input) >= len(domain) && input[len(input)-len(domain):] == domain {
+		if input == domain {
+			return true
+		}
+
+		if len(input)-len(domain) >= 2 && input[len(input)-len(domain)-1:] == "."+domain {
 			return true
 		}
 	}

pkg/csprecon/net_test.go

@@ -117,6 +117,18 @@ func TestDomainOk(t *testing.T) {
 			domains: []string{"ciao.com", "goooooooogle.com"},
 			want:    false,
 		},
+		{
+			name:    "subdomain not ok 2",
+			input:   "dc.*.agoogle.com",
+			domains: []string{"ciao.com", "google.com"},
+			want:    false,
+		},
+		{
+			name:    "subdomain not ok 3",
+			input:   "agoogle.com",
+			domains: []string{"ciao.com", "aaagoogle.com"},
+			want:    false,
+		},
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {

pkg/output/banner.go

@@ -12,7 +12,7 @@ import "github.com/projectdiscovery/gologger"
 var printed = false
 
 const (
-	Version = "v0.3.0"
+	Version = "v0.3.1"
 	banner  = `    ______________  ________  _________  ____ 
    / ___/ ___/ __ \/ ___/ _ \/ ___/ __ \/ __ \
   / /__(__  ) /_/ / /  /  __/ /__/ /_/ / / / /

snapcraft.yaml

@@ -3,7 +3,7 @@ summary: Discover new target domains using Content Security Policy
 description: |
       Take as input target URLs and probe them to retrieve their CSP (either from Head or Header) 
       and get new target domains.
-version: 0.3.0
+version: 0.3.1
 grade: stable
 base: core20