Skip to content

[BUG] net/url: invalid control character in URL #44

@adilsoybali

Description

@adilsoybali

Describe the bug

Hello, thanks for this great tool. However when I run the tool I get this error:
image


   _____ _____ __    _____             
  |     | __  |  |  |   __|_ _ ___ ___ 
  |   --|    -|  |__|   __| | |- _|- _|
  |_____|__|__|_____|__|  |___|___|___|

      v1.4.0 - @dwisiswant0

[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
[ERR] parse "https://example.com/\r\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/\rSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/\r%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/\r\nSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/\r\n%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/\r\n\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\rSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\r%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\r\nSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\r\n%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\r\n\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\r\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\r%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\r\nSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\r\n%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\r\n\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\r\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\rSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL

I got the same error even though I tested it on 2 different linux machines.

Environment:

  • OS: linux
  • OS version:
    1- Linux tester 5.11.0-1027-azure #30~20.04.1-Ubuntu SMP Wed Jan 12 20:56:50 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
    2- Linux kali 5.10.0-kali9-amd64 #1 SMP Debian 5.10.46-4kali1 (2021-08-09) x86_64 GNU/Linux
  • CRLFuzz Version: CRLFuzz 1.4.0

This link may be helpful: https://stackoverflow.com/questions/55945325/golang-url-parse-always-return-invalid-control-character-url

Thanks

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions