Merge branch 'feature/custom_headers' into develop

config.toml

@@ -15,6 +15,8 @@ verbose = true
     # body = "body=text"
     # Set the cookie values to send with the request to this target. Must be an array.
     cookies = ["PHPSESSIONID=12345","JSESSIONID=67890"]
+    # Set custom headers to send with the request to this target. Must be an array.
+    headers = ["X-Originating-IP: 127.0.0.1", "X-Remote-IP: 127.0.0.1"]
     # Follow redirects
     redirects = true
 
@@ -28,5 +30,7 @@ verbose = true
     body = "val=1000"
     # Set the cookie values to send with the request to this target. Must be an array.
     cookies = ["PHPSESSIONID=ABCDE","JSESSIONID=FGHIJ"]
+    # Set custom headers to send with the request to this target. Must be an array.
+    headers = ["X-Originating-IP: 127.0.0.1", "X-Remote-IP: 127.0.0.1"]
     # Do not follow redirects
     redirects = false

main.go

@@ -47,6 +47,7 @@ type Target struct {
 	URL       string
 	Body      string
 	Cookies   []string
+	Headers   []string
 	Redirects bool
 	CookieJar http.CookieJar
 }
@@ -274,8 +275,18 @@ func sendRequests() (responses chan ResponseInfo, errors chan error) {
 					var client http.Client
 
 					// TEMP- append cookies directly to the request
-					cookieStr := strings.Join(t.Cookies, ";")
-					req.Header.Add("Cookie", cookieStr)
+					if len(t.Cookies) > 0 {
+						cookieStr := strings.Join(t.Cookies, ";")
+						req.Header.Add("Cookie", cookieStr)
+					}
+
+					// Add custom headers to the request
+					for _, header := range t.Headers {
+						split := strings.Split(header, ":")
+						hKey := split[0]
+						hVal := split[1]
+						req.Header.Add(hKey, hVal)
+					}
 
 					// Add content-type to POST requests (some applications require this to properly process POST requests)
 					// TODO: Find any bugs around other request types