[feature] Add helper function for rand stuffs

[dwisiswant0]

Is your feature request related to a problem? Please describe.

Hi, I think it would be very useful to add a new help function to generate random stuffs.

For example, as in the Metasploit module.

> grep "def self.rand" /usr/share/metasploit-framework/lib/rex/text.rb
def self.rand_char(bad, chars = AllChars)
def self.rand_base(len, bad, *foo)
def self.rand_text(len, bad='', chars = AllChars)
def self.rand_text_alpha(len, bad='')
def self.rand_text_alpha_lower(len, bad='')
def self.rand_text_alpha_upper(len, bad='')
def self.rand_text_alphanumeric(len, bad='')
def self.rand_text_numeric(len, bad='')
def self.rand_text_english(len, bad='')
def self.rand_text_highascii(len, bad='')
def self.randomize_space(str)
def self.rand_hostname
def self.rand_state()

[averagesecurityguy]

The idea would be to add random values within payloads like:

id: put-method-enabled

info:
  name: PUT method enabled
  author: xElkomy
  severity: high

# https://portswigger.net/kb/issues/00100900_http-put-method-is-enabled

requests:
  - raw:
      - |
        PUT /{{RandFile}} HTTP/1.1
        Content-Type: text/plain
        {{RandText}}
      - |
        GET /{{RandFile}} HTTP/1.1
        Content-Type: text/plain
    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - {{RandText}}

If so, I believe this is the place where the values would be added to the templates, right?

nuclei/v2/pkg/requests/bulk-http-request.go

Lines 84 to 94 in bdb3321

	func (r *BulkHTTPRequest) MakeHTTPRequest(baseURL string, dynamicValues map[string]interface{}, data string) (*HttpRequest, error) {
	parsed, err := url.Parse(baseURL)
	if err != nil {
	return nil, err
	}
	hostname := parsed.Host
	values := generators.MergeMaps(dynamicValues, map[string]interface{}{
	"BaseURL": baseURL,
	"Hostname": hostname,
	})

Would just need to define the rand methods, maybe in a new file, requests/randtext.go?

If this is all correct, I can try to put together a PR next week.

[marcelo321]

Sorry guys but can anyone like me the dcoumentation for the random string/int generation? since I can't find it and i don't know how to use it properly

[dwisiswant0]

@marcelo321 - see https://nuclei.projectdiscovery.io/templating-guide/helper-functions/