pkg

var (
	// InputFile is the path to the file containing target URLs. Read from the -l flag.
	InputFile *string
	// CollabServer is an optional custom collaboration server domain. Read from the -c flag.
	CollabServer *string
	// Threads is the number of concurrent worker goroutines. Read from the -t flag.
	Threads *int
	// RateLimit is the maximum number of HTTP requests per second. Read from the -r flag.
	RateLimit *int
	// OutDir is the directory path for output files (logs, findings). Read from the -o flag.
	OutDir *string
	// ExtraHeader is an optional custom HTTP header in "Key: Value" format. Read from the -H flag.
	ExtraHeader *string
	// Silent controls whether banners and progress messages are printed. Read from the -s flag.
	Silent *bool
	// ColorBlind disables colored terminal output. Read from the -b flag.
	ColorBlind *bool
	// Verbose enables live streaming of connection updates. Read from the -v flag.
	Verbose *bool

	// PayloadsFile is the path to the payload configuration file, located at
	// ~/.config/ressrf/payloads.cfg. It is populated with embedded default vectors on first
	// use and user customisations are preserved across updates.
	PayloadsFile = filepath.Join(os.Getenv("HOME"), ".config", "ressrf", "payloads.cfg")
	// HeadersInject is the list of HTTP header names that will be tested for SSRF
	// vulnerabilities. Each header is injected with a collaboration payload and the
	// scanner monitors for out-of-band callbacks.
	HeadersInject = []string{
		"Base-Url", "CF-Connecting_IP", "Client-IP", "Contact",
		"Forwarded", "From", "Http-Url", "Proxy-Host", "Proxy-Url",
		"Real-Ip", "Redirect", "Referer", "Referrer", "Request-Uri",
		"True-Client-IP", "Uri", "Url", "X-Client-IP", "X-Forward-For",
		"X-Forwarded-By", "X-Forwarded-For-Original", "X-Forwarded-For",
		"X-Forwarded-Host", "X-Forwarded-Server", "X-Forwarded",
		"X-Forwarder-For", "X-Host", "X-Http-Destinationurl",
		"X-Http-Host-Override", "X-Original-Remote-Addr", "X-Original-Url",
		"X-Originating-IP", "X-Proxy-Url", "X-Real-Ip", "X-Remote-Addr",
		"X-Rewrite-Url", "X-Wap-Profile",
	}
	// AltProtoRegex matches response bodies that indicate an alternate-protocol SSRF
	// vulnerability (e.g. cloud metadata endpoints, localhost references, or gopher/dict/file
	// scheme content). When the regex matches, the scanner reports an ALT-PROTO HIT.
	AltProtoRegex = regexp.MustCompile(`169\.254\.169\.254|latest/meta-data|root:|127\.0\.0\.1|localhost|gopher://|dict://|file://`)
	// QsReplaceRegex matches the value portion of URL query parameters (the text after "="
	// up to the next "&" or end-of-string). It is used by QsReplace to substitute payloads
	// into query strings.
	QsReplaceRegex = regexp.MustCompile(`=([^?|&]*)`)
)

var ClientInstance *client.Client

var HttpClient = &http.Client{
	Timeout: 10 * time.Second,
	Transport: &http.Transport{
		MaxIdleConnsPerHost: 100,
	},
	CheckRedirect: func(req *http.Request, via []*http.Request) error {
		return http.ErrUseLastResponse
	},
}

var SessionDomain string