nuclei icon indicating copy to clipboard operation
nuclei copied to clipboard

iterate-all executes the last value repeatedly multiple times

Open Thamaraiselvan942 opened this issue 10 months ago • 0 comments

Hi Team, When using iterate-all: true to loop through all extracted data and process the request, it only works correctly for the 2nd request. In that case, if the same dynamic iterator value from the 2nd request response is passed to the 3rd request, it loops the last value repeatedly 49 times. Similarly, if I add multiple requests below, it increases the request count.

requests:
   - raw:
       - |
         GET https://test.com/api/accounts/650847/messages/search?searchKey=entire:Invitation HTTP/2
         Host: test.com
         Authorization: Bearer 1000.e57a25740

       - |
         GET https://test.com/api/accounts/650847/folders/6508471/messages/{{message_id}}/content HTTP/2
         Host: test.com
         Authorization: Bearer 1000.e57a2574

       - |
         GET {{url}} HTTP/2

         

     req-condition: true
     extractors:
          - type: json
            part: body_1
            name: message_id
            group: 1
            json:
              - '.data[].messageId'
            internal: true

          - type: json
            part: body_2
            name: url
            group: 1
            json:
              - '.data.url'
            internal: true

     iterate-all: true
https://test.com/api/accounts/650847/folders/6508471/messages/1111/content 
https://test.com/api/accounts/650847/folders/6508471/messages/2222/content 
https://test.com/api/accounts/650847/folders/6508471/messages/3333/content 
https://test.com/api/accounts/650847/folders/6508471/messages/4444/content 
https://test.com/api/accounts/650847/folders/6508471/messages/5555/content 
https://test.com/api/accounts/650847/folders/6508471/messages/6666/content 
https://test.com/api/accounts/650847/folders/6508471/messages/7777/content 

https://test.com/api/accept/invite/AAAA
https://test.com/api/accept/invite/BBBB
https://test.com/api/accept/invite/CCCC
https://test.com/api/accept/invite/DDDD
https://test.com/api/accept/invite/EEEE
https://test.com/api/accept/invite/FFFF
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
https://test.com/api/accept/invite/GGGG
...


Thamaraiselvan942 avatar Apr 07 '24 08:04 Thamaraiselvan942