Add new scheme/proto headers and improve http_headers_scheme mode

[jtof-fap]

Improving the list of proto/scheme headers:

• Specific rule for header 'Forwarded: proto='

Forwarded: proto=[protocol]

• Standard headers ending with "-Proto" or "-Scheme"

CloudFront-Forwarded-Proto: [protocol]
X-Forwarded-Proto: [protocol]
X-Forwarded-Scheme: [protocol]
X-Protocol-Scheme: [protocol]
X-Sp-Edge-Scheme: [protocol]
X-Url-Scheme: [protocol]

• Non-standard headers that take 'on' value (Ex: Microsoft)

Front-End-Https: on
X-Forwarded-HTTPS: on
X-Forwarded-SSL: on

Sources:

• https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto
• https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-cloudfront-headers.html (CloudFront-Forwarded-Proto)
• https://github.com/GrrrDog/weird_proxies/blob/76d3fefdd515ecdda54d4fe3000ededd7b2452d0/Stackpath.md (X-Sp-Edge-Scheme)

[jtof-fap]

Diff of bup-payloads-2022-09-15.lst file with previous version:

diff --git a/tests-history/bup-payloads-2022-09-11.lst b/tests-history/bup-payloads-2022-09-15.lst
index 8e9903b..cd2a2d7 100644
--- a/tests-history/bup-payloads-2022-09-11.lst
+++ b/tests-history/bup-payloads-2022-09-15.lst
@@ -1,5 +1,5 @@

-Bypasser has generated 1880 payloads for 'http://127.0.0.1:8000/foo/bar' url:
+Bypasser has generated 1913 payloads for 'http://127.0.0.1:8000/foo/bar' url:
 [case_substitution] http://127.0.0.1:8000/Foo/bar
 [case_substitution] http://127.0.0.1:8000/fOo/bar
 [case_substitution] http://127.0.0.1:8000/foO/bar
@@ -879,11 +879,44 @@ Bypasser has generated 1880 payloads for 'http://127.0.0.1:8000/foo/bar' url:
 [http_headers_port] -H X-Forwarded-Port: 80 http://127.0.0.1:8000/foo/bar
 [http_headers_port] -H X-Forwarded-Port: 8080 http://127.0.0.1:8000/foo/bar
 [http_headers_port] -H X-Forwarded-Port: 8443 http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H CloudFront-Forwarded-Proto: foo http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H CloudFront-Forwarded-Proto: ftp http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H CloudFront-Forwarded-Proto: http http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H CloudFront-Forwarded-Proto: https http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H CloudFront-Forwarded-Proto: webdav http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H Forwarded: proto=foo http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H Forwarded: proto=ftp http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H Forwarded: proto=http http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H Forwarded: proto=https http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H Forwarded: proto=webdav http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H Front-End-Https: on http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Forwarded-HTTPS: on http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Forwarded-Proto: foo http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Forwarded-Proto: ftp http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Forwarded-Proto: http http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Forwarded-Proto: https http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Forwarded-Proto: webdav http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Forwarded-SSL: on http://127.0.0.1:8000/foo/bar
 [http_headers_scheme] -H X-Forwarded-Scheme: foo http://127.0.0.1:8000/foo/bar
 [http_headers_scheme] -H X-Forwarded-Scheme: ftp http://127.0.0.1:8000/foo/bar
 [http_headers_scheme] -H X-Forwarded-Scheme: http http://127.0.0.1:8000/foo/bar
 [http_headers_scheme] -H X-Forwarded-Scheme: https http://127.0.0.1:8000/foo/bar
 [http_headers_scheme] -H X-Forwarded-Scheme: webdav http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Protocol-Scheme: foo http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Protocol-Scheme: ftp http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Protocol-Scheme: http http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Protocol-Scheme: https http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Protocol-Scheme: webdav http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Sp-Edge-Scheme: foo http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Sp-Edge-Scheme: ftp http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Sp-Edge-Scheme: http http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Sp-Edge-Scheme: https http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Sp-Edge-Scheme: webdav http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Url-Scheme: foo http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Url-Scheme: ftp http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Url-Scheme: http http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Url-Scheme: https http://127.0.0.1:8000/foo/bar
+[http_headers_scheme] -H X-Url-Scheme: webdav http://127.0.0.1:8000/foo/bar
 [http_methods] -X ACL http://127.0.0.1:8000/foo/bar
 [http_methods] -X BIND http://127.0.0.1:8000/foo/bar
 [http_methods] -X CHECKIN http://127.0.0.1:8000/foo/bar

[laluka]

Small neats to adress, then all good ! :)