Yaklang

https://yaklang.com/docs/
Admin
Yaklang is a programming language dedicated to integrating security capabilities, providing a...
Tokens:183,844
Snippets:882
Trust Score:2.5
Update:1 year ago
Show doc for...
Tokens:
Raw
### Go HTTP Request Example

Source: https://yaklang.com/docs/yakexamples/similarity-calc

This Go code snippet demonstrates how to construct and send an HTTP GET request to a specific URL. It includes setting headers such as Host, Accept-Encoding, Accept-Language, Cache-Control, Connection, Content-Length, Cookie, Origin, Pragma, Sec-Websocket-Extensions, Sec-Websocket-Key, Sec-Websocket-Version, and User-Agent. This is useful for interacting with web services or APIs.

```Go
package main

import (
	"fmt"
	"net/http"
)

func main() {

	client := &http.Client{}
	req, err := http.NewRequest("GET", "http://alive.github.com/_sockets/u/13946521/ws?session=eyJ2IjoiVjMiLCJ1IjoxMzk0NjUyMSwicyI6Njk3MjI4MDcxLCJjIjoxMjQ2NzQ1MzA0LCJ0IjoxNjQ2Mzg3NTU0fQ%3D%3D--6f75e12befb81db097c8c8082e77eaad6b68bc422115c03e3a02a6a467a305f3&shared=true&p=1743245261_1645685603.14085", nil)
	if err != nil {
		fmt.Printf("Error creating request: %s\n", err)
		return
	}

	req.Header.Set("Host", "alive.github.com")
	req.Header.Set("Accept-Encoding", "deflate")
	req.Header.Set("Accept-Language", "zh-CN,zh;q=0.9")
	req.Header.Set("Cache-Control", "no-cache")
	req.Header.Set("Connection", "close")
	req.Header.Set("Content-Length", "0")
	req.Header.Set("Cookie", "_ga=GA1.2.33717236.1582554889; logged_in=yes; dotcom_user=VillanCh; color_mode=%7B%22color_mode%22%3A%22light%22%2C%22light_theme%22%3A%7B%22name%22%3A%22light%22%2C%22color_mode%22%3A%22light%22%7D%2C%22dark_theme%22%3A%7B%22name%22%3A%22dark%22%2C%22color_mode%22%3A%22dark%22%7D%7D; tz=Asia%2FShanghai; _octo=GH1.1.973492617.1646016558")
	req.Header.Set("Origin", "https://github.com")
	req.Header.Set("Pragma", "no-cache")
	req.Header.Set("Sec-Websocket-Extensions", "permessage-deflate; client_max_window_bits")
	req.Header.Set("Sec-Websocket-Key", "mn3CV26zb24N5uhErmDaKw==")
	req.Header.Set("Sec-Websocket-Version", "13")
	req.Header.Set("User-Agent", "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/97.0.4692.99 Safari/537.36")

	resp, err := client.Do(req)
	if err != nil {
		fmt.Printf("Error sending request: %s\n", err)
		return
	}

	defer resp.Body.Close()

	fmt.Printf("Response Status: %s\n", resp.Status)
}
```

--------------------------------

### Yak Language First Service Scanner Program

Source: https://yaklang.com/docs/yakexamples/fuzztag

Build your first service scanner program using Yak. This practical example guides you through the process of identifying running services on network hosts.

```Yak
// Basic structure for a service scanner
function scan_service(host, port) {
    if synscan.scan(host, port) {
        print("Service running on " + host + ":" + port);
    }
}

scan_service("192.168.1.1", 80);
```

--------------------------------

### Method Chaining Example

Source: https://yaklang.com/docs/yak-basic/cap8-1-http

Illustrates the method chaining capability in Yak's fuzz library, where multiple method calls can be chained together in a single statement for conciseness. This example chains `fuzz.HTTPRequest` with `.Show()`.

```Yak
raw = `GET / HTTP/1.1Host: www.example.com
abc=1`
fuzz.HTTPRequest(raw, fuzz.https(true))~.Show()
```

--------------------------------

### Yak Language Web Fuzzing Basics

Source: https://yaklang.com/docs/yakexamples/fuzztag

Get started with web fuzzing techniques in Yak. Learn the fundamental principles and common approaches to discovering web application vulnerabilities through fuzzing.

```Yak
// Basic web fuzzing example targeting a parameter
let target_url = "http://vulnerable-website.com/search";
let parameters = {"q": "FUZZ"}; // Placeholder for fuzzing
let wordlist = ["' OR 1=1 --", "<script>alert(1)</script>"];

for word in wordlist {
    let current_params = parameters;
    current_params.q = word;
    let response = http.get(target_url, {"params": current_params});
    if response.status != 200 || response.body.contains("error") {
        print("Potential vulnerability found with payload: " + word);
    }
}
```

--------------------------------

### Yak OS: 文件和目录操作

Source: https://yaklang.com/docs/yak-basic/cap7-buildin-functions

提供用于删除、重命名和修改文件或目录权限的Yak OS函数。包括递归删除目录、更改工作目录以及设置文件权限和所有权。

```Yak
os.Remove("file.txt")
os.RemoveAll("dir")
os.Rename("old.txt", "new.txt")
os.Chdir("dir")
os.Chmod("file.txt", 0644)
os.Chown("file.txt", uid, gid)
```

--------------------------------

### Yak OS: 环境变量操作

Source: https://yaklang.com/docs/yak-basic/cap7-buildin-functions

管理环境变量，包括设置、获取、删除和清空环境变量。支持查找特定环境变量的值以及获取所有环境变量。

```Yak
os.Unsetenv("KEY")
os.LookupEnv("KEY")
os.Clearenv()
os.Setenv("KEY", "VALUE")
os.Getenv("KEY")
os.Environ()
```

--------------------------------

### Yak: 使用 HTTPS 协议进行 HTTP 请求

Source: https://yaklang.com/docs/yakexamples/batch-http

使用 httpool 库通过 HTTPS 协议发送带有参数渲染的 HTTP GET 请求。支持动态加载 suffix 和 body 参数。

```Yak
res, err = httpool.Pool(`GET /target{{params(suffix)}} HTTP/1.1Host: www.baidu.com
{{params(body)}}`, httpool.fuzzParams({"suffix": ["1", "2", "3", "4"], "body": 123}), httpool.https(true))
die(err)
```

--------------------------------

### Nuclei XPath Extractor Example

Source: https://yaklang.com/docs/yak-basic/cap8-4-yaml-poc

Demonstrates using an XPath extractor to get the text content of the '<title>' tag from the response body. It's combined with a DSL matcher to check if the title contains 'Login'.

```yaml
http:-
  method: POST
  path:
    - '{{RootURL}}/'
  headers:
    Content-Type: application/json
  body: '{"key": "value"}'
  redirects: true
  matchers-condition: and
  matchers:
    - id: 1
      type: dsl
      part: body
      dsl:
        - contains(title,"Login")
      condition: and
  extractors:
    - id: 1
      name: title
      scope: body
      type: xpath
      xpath:
        - //title
```

--------------------------------

### Nuclei Key-Value (KV) Extractor Example

Source: https://yaklang.com/docs/yak-basic/cap8-4-yaml-poc

Illustrates using a Key-Value (KV) extractor to get the 'Etag' from the raw response and a DSL matcher to verify if it equals 'ok'. This demonstrates extracting specific headers or body fields.

```yaml
http:-
  method: POST
  path:
    - '{{RootURL}}/'
  redirects: true
  matchers-condition: and
  matchers:
    - id: 1
      type: dsl
      part: body
      dsl:
        - etag=="ok"
      condition: and
  extractors:
    - id: 1
      name: etag
      scope: raw
      type: kval
      kval:
        - Etag
```

--------------------------------

### 解决 MacOS M1/M2 Yakit 安装问题

Source: https://yaklang.com/docs/startup

当在 MacOS 系统（特别是 M1/M2 芯片）上安装 Yakit 时遇到 'Yakit 已损坏' 的问题，可以使用此命令移除文件的隔离属性。

```bash
sudo xattr -r -d com.apple.quarantine /Applications/Yakit.app
```

--------------------------------

### Yaklang: Demonstrating Nested Encoding with Codec Functions

Source: https://yaklang.com/docs/yakexamples/fuzztag-basic

This example focuses on demonstrating nested encoding effects by applying various codec functions to the numbers 1000, 1001, and 1002. It shows the output of each encoding, including potential error messages if the input type is incorrect (e.g., expecting string but getting int).

```yak
&#49;&#48;&#48;&#48;%31%30%30%30line 1: call func codec.EscapeQueryUrl(v1) failed your code: `codec.EscapeQueryUrl(1000)` may be error:    invalid argument type: require `string`, but we got `int`需要模糊随机渲染的字符串为： {{base64({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=8) "MTAwMA==", (string) (len=8) "MTAwMQ==", (string) (len=8) "MTAwMg=="}
---------------------
需要模糊随机渲染的字符串为： {{md5({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=32) "a9b7ba70783b617e9998dc4dd82eb3c5", (string) (len=32) "b8c37e33defde51cf91e1e03e51657da", (string) (len=32) "fba9d88164f3e2d9109ee770223212a0"}
---------------------
需要模糊随机渲染的字符串为： {{hex({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=8) "31303030", (string) (len=8) "31303031", (string) (len=8) "31303032"}
---------------------
需要模糊随机渲染的字符串为： {{sha1({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=40) "e3cbba8883fe746c6e35783c9404b4bc0c7ee9eb", (string) (len=40) "dd01903921ea24941c26a48f2cec24e0bb0e8cc7", (string) (len=40) "a5b1d7e217aa227d5b2b8a84920780cf637960e2"}
---------------------
需要模糊随机渲染的字符串为： {{sha256({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=64) "40510175845988f13f6162ed8526f0b09f73384467fa855e1e79b44a56562a58", (string) (len=64) "fe675fe7aaee830b6fed09b64e034f84dcbdaeb429d9cccd4ebb90e15af8dd71", (string) (len=64) "b281bc2c616cb3c3a097215fdc9397ae87e6e06b156cc34e656be7a1a9ce8839"}
---------------------
需要模糊随机渲染的字符串为： {{sha512({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=128) "1227de669e122a546edf39f0ded50cd2b6332793dc55d835b21be05bd529511655877292748c25f8fc2b5f1d5c987d9aaed2fc92c7e59a448e51cdf1dc5351a3", (string) (len=128) "e3d0e2ef3cab0dab2c12f297e3bc618f6b976aced29b3a301828c6f9f1e1aabbe6dab06e1f899c9c2ae2ca86caa330115218817f4ce36d333733cb2b4c7afde7", (string) (len=128) "59963bfd1fef9ea453959517c8755d00cfa0d7c57f112404f3ca9def63986c149d9aabb28ccb225b5a3470e42a170141558d6d6b87ff104931c754fad0d5c933"}
---------------------
需要模糊随机渲染的字符串为： {{urlenc({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=12) "%31%30%30%30", (string) (len=12) "%31%30%30%31", (string) (len=12) "%31%30%30%32"}
---------------------
需要模糊随机渲染的字符串为： {{doubleurlenc({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=20) "%2531%2530%2530%2530", (string) (len=20) "%2531%2530%2530%2531", (string) (len=20) "%2531%2530%2530%2532"}
---------------------
需要模糊随机渲染的字符串为： {{htmlenc({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=20) "&#49;&#48;&#48;&#48;", (string) (len=20) "&#49;&#48;&#48;&#49;", (string) (len=20) "&#49;&#48;&#48;&#50;"}
---------------------
需要模糊随机渲染的字符串为： {{htmlhexenc({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=24) "&#x31;&#x30;&#x30;&#x30;", (string) (len=24) "&#x31;&#x30;&#x30;&#x31;", (string) (len=24) "&#x31;&#x30;&#x30;&#x32;"}
---------------------

```

--------------------------------

### Yak: 创建和修改可 Fuzz 的 HTTP 请求

Source: https://yaklang.com/docs/yakexamples/fuzz_tutorial

演示了如何使用 Yak 的 fuzz 包创建一个可 Fuzz 的 HTTP 请求，并修改其中的 Get 参数和 User-Agent 头字段。此功能允许开发者快速构建和测试针对 HTTP 数据包的模糊测试用例。

```Yak
// 创建一个可 Fuzz 的请求
fReq, err := fuzz.HTTPRequest(`GET / HTTP/1.1Host: 127.0.0.1`)
die(err)
// 替换掉请求中的某个 Get 参数，同时替换掉 UserAgent 头中的字段
fReq = fReq.FuzzGetParams("testValue", "test").FuzzHTTPHeader("User-Agent", "ua-for www.example.com")
// 展示 fReq 的 Fuzz 结果
fReq.Show()
```

--------------------------------

### Yaklang: Demonstrating Nested Encoding with Codec Functions

Source: https://yaklang.com/docs/yakexamples/fuzztag

This example focuses on demonstrating nested encoding effects by applying various codec functions to the numbers 1000, 1001, and 1002. It shows the output of each encoding, including potential error messages if the input type is incorrect (e.g., expecting string but getting int).

```yak
&#49;&#48;&#48;&#48;%31%30%30%30line 1: call func codec.EscapeQueryUrl(v1) failed your code: `codec.EscapeQueryUrl(1000)` may be error:    invalid argument type: require `string`, but we got `int`需要模糊随机渲染的字符串为： {{base64({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=8) "MTAwMA==", (string) (len=8) "MTAwMQ==", (string) (len=8) "MTAwMg=="}
---------------------
需要模糊随机渲染的字符串为： {{md5({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=32) "a9b7ba70783b617e9998dc4dd82eb3c5", (string) (len=32) "b8c37e33defde51cf91e1e03e51657da", (string) (len=32) "fba9d88164f3e2d9109ee770223212a0"}
---------------------
需要模糊随机渲染的字符串为： {{hex({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=8) "31303030", (string) (len=8) "31303031", (string) (len=8) "31303032"}
---------------------
需要模糊随机渲染的字符串为： {{sha1({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=40) "e3cbba8883fe746c6e35783c9404b4bc0c7ee9eb", (string) (len=40) "dd01903921ea24941c26a48f2cec24e0bb0e8cc7", (string) (len=40) "a5b1d7e217aa227d5b2b8a84920780cf637960e2"}
---------------------
需要模糊随机渲染的字符串为： {{sha256({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=64) "40510175845988f13f6162ed8526f0b09f73384467fa855e1e79b44a56562a58", (string) (len=64) "fe675fe7aaee830b6fed09b64e034f84dcbdaeb429d9cccd4ebb90e15af8dd71", (string) (len=64) "b281bc2c616cb3c3a097215fdc9397ae87e6e06b156cc34e656be7a1a9ce8839"}
---------------------
需要模糊随机渲染的字符串为： {{sha512({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=128) "1227de669e122a546edf39f0ded50cd2b6332793dc55d835b21be05bd529511655877292748c25f8fc2b5f1d5c987d9aaed2fc92c7e59a448e51cdf1dc5351a3", (string) (len=128) "e3d0e2ef3cab0dab2c12f297e3bc618f6b976aced29b3a301828c6f9f1e1aabbe6dab06e1f899c9c2ae2ca86caa330115218817f4ce36d333733cb2b4c7afde7", (string) (len=128) "59963bfd1fef9ea453959517c8755d00cfa0d7c57f112404f3ca9def63986c149d9aabb28ccb225b5a3470e42a170141558d6d6b87ff104931c754fad0d5c933"}
---------------------
需要模糊随机渲染的字符串为： {{urlenc({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=12) "%31%30%30%30", (string) (len=12) "%31%30%30%31", (string) (len=12) "%31%30%30%32"}
---------------------
需要模糊随机渲染的字符串为： {{doubleurlenc({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=20) "%2531%2530%2530%2530", (string) (len=20) "%2531%2530%2530%2531", (string) (len=20) "%2531%2530%2530%2532"}
---------------------
需要模糊随机渲染的字符串为： {{htmlenc({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=20) "&#49;&#48;&#48;&#48;", (string) (len=20) "&#49;&#48;&#48;&#49;", (string) (len=20) "&#49;&#48;&#48;&#50;"}
---------------------
需要模糊随机渲染的字符串为： {{htmlhexenc({{int(1000-1002)}})}}渲染结果为：([]string) (len=3 cap=4) { (string) (len=24) "&#x31;&#x30;&#x30;&#x30;", (string) (len=24) "&#x31;&#x30;&#x30;&#x31;", (string) (len=24) "&#x31;&#x30;&#x30;&#x32;"}
---------------------

```

--------------------------------

### Yak: 快捷打开文件

Source: https://yaklang.com/docs/yak-basic/cap7-buildin-functions

使用 `file.Open` 函数快捷打开文件，该函数默认设置了创建和读写模式，并指定了默认文件权限。`defer fp.Close()` 确保文件在函数结束时被关闭。

```Yak
fp = file.Open("pathtofile.txt")defer fp.Close()
```

--------------------------------

### Yak Language: Building a Service Scanner

Source: https://yaklang.com/docs/yakexamples/intro

A guide on how to build your first service scanner program using the Yak language. This involves understanding basic programming constructs and potentially network communication.

```Yak
```yak
// Placeholder for a basic service scanner program in Yak.
// This would typically involve network I/O and service detection.
// Example: Scanning a port for a specific service banner.
let target_host = "example.com";
let target_port = 80;

// Hypothetical function to scan a port and get banner
// let banner = network.scan_port(target_host, target_port);
// print(banner);
```
```

--------------------------------

### Yak OS: 进程控制与IO

Source: https://yaklang.com/docs/yak-basic/cap7-buildin-functions

控制进程的退出行为，访问命令行参数，以及使用标准输入、输出和错误流。

```Yak
os.Exit(0)
args = os.Args
// Stdin, Stdout, Stderr are file objects
```

--------------------------------

### Yak FuzzHTTPRequest: Get GET Testable Parameters

Source: https://yaklang.com/docs/yakexamples/fuzz-request

Retrieves all testable parameters for GET requests. This focuses on query string parameters.

```yak
FuzzHTTPRequest.GetGetQueryParams()
```

--------------------------------

### Yak：递归遍历目录和文件

Source: https://yaklang.com/docs/yak-basic/cap7-buildin-functions

演示了如何使用 `file.Walk` 函数递归遍历一个目录及其所有子目录。它接受一个路径和一个回调函数，该函数为每个文件或目录执行。回调函数可以根据 `info.IsDir` 和 `info.Path` 来处理信息，并返回 `true` 继续遍历或 `false` 停止。

```Yak
file.Walk("/tmp/yak", info => {
    println(f`${info.IsDir ? "dir ": "file"}\t${info.Path}`)
    return true
})
```

--------------------------------

### Yak FuzzHTTPRequest: Fuzz GET Parameters

Source: https://yaklang.com/docs/yakexamples/fuzz-request

Performs fuzz testing on GET request parameters. This method targets the query string of a GET request.

```yak
FuzzHTTPRequest.FuzzGetParams()
```

--------------------------------

### Fuzz GET JSON Path Parameters

Source: https://yaklang.com/docs/yak-basic/cap8-1-http

Manipulates specific JSON nodes within GET parameters using jsonPath. The API `FuzzGetJsonPathParams` takes a key (GET parameter name), a jsonPath string, and a list of values for fuzzing.

```Yaklang
raw = `GET /?a={\"abc\":\"test\"} HTTP/1.1Host: www.example.com
abc=1`
fuzz.HTTPRequest(raw, fuzz.https(true))~.FuzzGetJsonPathParams(`a`, `$.abc`, [`aaa`,`bbb`]).Show()
```

--------------------------------

### 使用 fuzz 进行参数模糊化

Source: https://yaklang.com/docs/yakexamples/how_to_make_poc

演示如何使用 fuzz 模块对 HTTP 请求的 Host 和 POST 参数进行模糊化处理，以实现动态修改请求以适应不同目标和 payload。

```Go
fReq, err := fuzz.HTTPRequest(`POST /index.php?s=captcha HTTP/1.1Host: localhost:8080User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)Connection: closeContent-Type: application/x-www-form-urlencodedContent-Length: 72

_method=__construct&filter[]=system&method=get&server[REQUEST_METHOD]=id`)
if err != nil {
    die(err)}

```

```Go
rsp, err := fReq.FuzzHTTPHeader("Host", sprintf("{{net(%v)}}:{{port(%v)}}", host, port)).FuzzPostParams("server[REQUEST_METHOD]", ["id", "uname"]).Exec()
die(err)

```

--------------------------------

### Yak poc.Do: 发送 GET 请求

Source: https://yaklang.com/docs/yakexamples/http-advanced

使用 poc.Do 函数通过 URL 发送 GET 请求。该函数返回响应结构体、请求结构体和错误信息。注意 '~' 符号用于自动忽略错误。

```Yak
rsp, req = poc.Do("GET", "https://www.baidu.com")~
```

--------------------------------

### Yak FuzzHTTPRequest: Get Request Method

Source: https://yaklang.com/docs/yakexamples/fuzz-request

Retrieves the HTTP method of the request. This identifies the type of operation requested (e.g., GET, POST).

```yak
FuzzHTTPRequest.GetMethod()
```

--------------------------------

### Yak: Add GET Request Parameters

Source: https://yaklang.com/docs/yak-basic/cap7-buildin-functions

Explains how to add query string parameters to a URL for GET requests using the http.params function, which encodes parameters into the URL.

```Yak
http.Get('http://example.com', http.params({'key': 'value'}))
```

--------------------------------

### YAK: Basic Goroutine Execution

Source: https://yaklang.com/docs/yakexamples/concurrent

Demonstrates the fundamental way to start a goroutine in YAK, analogous to Golang's 'go func(){}'. It shows a simple task executed concurrently, including logging and sleeping.

```YAK
go fn() {
    log.info("goroutine is started")
    sleep(1)
    log.info("I am in Goroutnie!")
}()
// 设置默认日志级别为 info
loglevel(`info`)
sleep(2)
```

--------------------------------

### Yak 引擎版本信息 (MacOS)

Source: https://yaklang.com/docs/startup

安装 Yak 引擎后，可以通过此命令检查已安装的 Yak 版本信息，包括版本号、Go 版本、Git Hash 和构建时间。

```bash
yak version
```

--------------------------------

### 发送 HTTP GET 请求 - Yak

Source: https://yaklang.com/docs/yakexamples/spacengine

使用 Yak 的 http 模块发送 HTTP GET 请求到指定的 URL。该函数返回一个 http.Response 对象和一个 error。可以使用 http.show() 来打印响应的详细信息。

```Yak
rsp, err := http.Get("http://example.com")
die(err)

http.show(rsp)
```

--------------------------------

### 安装 Yak 引擎 (MacOS/Linux)

Source: https://yaklang.com/docs/startup

此脚本用于在 MacOS 和 Linux 系统中下载并安装最新版本的 Yak 引擎。它会自动处理下载、权限设置和环境变量配置。

```bash
bash <(curl -sS -L http://oss-qn.yaklang.com/install-latest-yak.sh)
```

--------------------------------

### Yak: Send Simple HTTP GET Request

Source: https://yaklang.com/docs/yak-basic/cap7-buildin-functions

Sends a simple GET request to a specified URL and displays the full response content using http.show. This is a one-line operation in Yak.

```Yak
rsp = http.Get("http://example.com")~http.show(rsp)
```

--------------------------------

### 安装 libpcap (MacOS)

Source: https://yaklang.com/docs/startup

在 MacOS 系统中，Yak 的 SYN 扫描功能依赖于 libpcap。此命令用于使用 Homebrew 安装 libpcap。

```bash
brew install libpcap
```

--------------------------------

### Fuzz Base64 Encoded GET Parameters

Source: https://yaklang.com/docs/yak-basic/cap8-1-http

Encodes parameter values using Base64 before sending them in GET requests. The `FuzzGetBase64Params` API is used, which functions identically to `FuzzGetParams` but applies Base64 encoding.

```Yaklang
raw = `GET /?a=b HTTP/1.1Host: www.example.com
abc=1`
fuzz.HTTPRequest(raw, fuzz.https(true))~.FuzzGetBase64Params("a",["test","test2"]).Show()
```

--------------------------------

### 安装 Yak (Windows)

Source: https://yaklang.com/docs/startup

在 Windows 系统上安装 Yak 的步骤。将下载的 yak_windows_amd64.exe 文件放入可执行目录，然后通过管理员权限执行安装命令。

```shell
yak_windows_amd64.exe install
```

--------------------------------

### Fuzz Specific GET Parameter

Source: https://yaklang.com/docs/yak-basic/cap8-1-http

Modifies a specific GET parameter's value using the FuzzGetParams API. It allows targeting a parameter by name and providing a list of values or a fuzztag for generation.

```yak
raw = `GET /?a=b HTTP/1.1Host: www.example.com
abc=1`
fuzz.HTTPRequest(raw, fuzz.https(true))~.FuzzGetParams("a",["c","d"]).Show()/*GET /?a=c HTTP/1.1Host: www.example.comContent-Length: 5
abc=1GET /?a=d HTTP/1.1Host: www.example.comContent-Length: 5
abc=1*/
```

```yak
raw = `GET /?a=b HTTP/1.1Host: www.example.com
abc=1`
fuzz.HTTPRequest(raw, fuzz.https(true))~.FuzzGetParams("a","{{i(1-3)}}").Show()/*GET /?a=1 HTTP/1.1Host: www.example.comContent-Length: 5
abc=1GET /?a=2 HTTP/1.1Host: www.example.comContent-Length: 5
abc=1GET /?a=3 HTTP/1.1Host: www.example.comContent-Length: 5
abc=1*/
```

--------------------------------

### Yak: 打开文件并写入内容

Source: https://yaklang.com/docs/yak-basic/cap7-buildin-functions

使用 `file.OpenFile` 打开文件，设置创建和读写模式，并指定文件权限。`WriteLine` 用于写入文本，`Close` 用于关闭文件。

```Yak
f = file.OpenFile("/tmp/test.txt", file.O_CREATE|file.O_RDWR, 0o777)~
```

```Yak
f.WriteLine("Hello World")
```

```Yak
f.Close()
```

--------------------------------

### Fuzz GET parameters using Fuzz object

Source: https://yaklang.com/docs/yak-basic/cap8-1-http

This snippet illustrates how to obtain Fuzz parameter objects for GET parameters using GetGetQueryParams and then use the Fuzz method to generate mutated HTTP requests.

```Yak
raw = `GET /?a=b&c=d HTTP/1.1Host: www.example.com
`
params = fuzz.HTTPRequest(raw, fuzz.https(true))~.GetGetQueryParams()
for param in params{
    print(param.String())
    param.Fuzz("{{i(1-2)}}").Show()
}
```

--------------------------------

### Execute Fuzz HTTP Requests

Source: https://yaklang.com/docs/yakexamples/fuzz_tutorial

This snippet demonstrates how to execute fuzz-tested HTTP requests. It shows creating a fuzzable HTTP request, fuzzing GET parameters with a list of test values, and then executing these requests using the .Exec() method. The results, including status code and response length, are then printed.

```Go
basePacket := `GET / HTTP/1.1Host: www.example.com`
// Create a fuzzable request
fReq, err := fuzz.HTTPRequest(basePacket)
die(err)

// Replace a GET parameter in the request, use fuzz-tagged []string for Fuzz
res, err := fReq.FuzzGetParams("testValue", ["test", "alert(1)", "prompt`34{{char(a-c)}}`"]).Exec()
die(err)

for element := range res {
    printf("status: %3d bodylen: %7d  url: %v\n", element.Response.StatusCode, len(element.ResponseRaw), element.Url)
}
```

--------------------------------

### Yak FuzzHTTPRequest: Fuzz GET Parameters (Raw)

Source: https://yaklang.com/docs/yakexamples/fuzz-request

Performs fuzz testing on GET request parameters in a raw, unparsed format. This method tests the entire query string without key-value separation.

```yak
FuzzHTTPRequest.FuzzGetParamsRaw()
```

--------------------------------

### Yak OS: 系统信息获取

Source: https://yaklang.com/docs/yak-basic/cap7-buildin-functions

获取当前操作系统的名称、架构、可执行文件路径、进程ID、用户ID和组ID等系统信息。

```Yak
println(os.OS)
println(os.ARCH)
execPath, err = os.Executable()
os.Getpid()
os.Getppid()
os.Getuid()
os.Geteuid()
os.Getgid()
os.Getegid()
```

--------------------------------

### Yak Synchronous Function Execution Example

Source: https://yaklang.com/docs/yak-basic/cap6-1-concurrent-and-defer

Demonstrates synchronous execution in Yak where one operation must complete before the next begins. This example shows a function call that blocks further execution until it finishes.

```Yak
func count() {
    for i := 1; i <= 5; i++ {
        println("count function:\t", i)
        sleep(1)
    }
}

count()
for i=1; i<=5; i++ {
    println("Main function:\t", i)
    sleep(1)
}
sleep(1)
```

--------------------------------

### Go: Example of SizedWaitGroup Implementation

Source: https://yaklang.com/docs/yakexamples/concurrent

This Go code snippet, referenced in the Yaklang documentation, shows a typical implementation of a sized wait group. It highlights the core concepts of initializing a sized wait group and managing Goroutine lifecycles.

```Go
package main

import (
	"fmt"
	"log"
	"sync"
	"time"

	"github.com/remeh/sizedwaitgroup"
)

func main() {
	swg := sizedwaitgroup.New(4) // Limit to 4 Goroutines

	for i := 0; i < 10; i++ {
		swg.Add() // Increment counter
		go func(val int) {
			defer swg.Done() // Decrement counter when done
			log.Printf("caller: %d\n", val)
			time.Sleep(1 * time.Second)
			log.Printf("task is finished... caller: %d\n", val)
		}(i)
	}

	log.Println("start to wait all tasks finishing...")
	swg.Wait() // Wait for all Goroutines to finish
	log.Println("all tasks finished")
}
```

--------------------------------

### Discover GET Parameters in HTTP Request

Source: https://yaklang.com/docs/yak-basic/cap8-1-http

Shows how to automatically discover GET parameters within an HTTP request using the `GetGetQueryParams` API. This function returns a list of `FuzzHTTPRequestParam` objects, allowing detailed inspection of each parameter.

```Yak
raw = `POST /?get1=1&get2=2 HTTP/1.1Host: www.example.comContent-Type: application/x-www-form-urlencodedCookie: cookie1 = 1;cookie2 = 2
post1=1&post2=2`
params = fuzz.HTTPRequest(raw, fuzz.https(true))~.GetGetQueryParams()
for param in params{
    print(param.String())
}
```

--------------------------------

### Yak SynScan Basic Scan Example

Source: https://yaklang.com/docs/yak-basic/cap8-3-port-n-service-scan

Demonstrates a basic port scanning operation using the synscan library. It scans a specified IP address range and iterates through the results, displaying information about open ports.

```Go
res, err := synscan.Scan("127.0.0.1", "1-65535")
die(err)
for result := range res {
    result.Show()
}
```

--------------------------------

### 安装 Yak 引擎 (Windows)

Source: https://yaklang.com/docs/startup

此命令用于在 Windows 系统中下载 Yak 引擎的最新版本，执行安装程序，并清理下载的文件。需要以管理员权限运行命令提示符。

```powershell
powershell (new-object System.Net.WebClient).DownloadFile('https://oss-qn.yaklang.com/yak/latest/yak_windows_amd64.exe','yak_windows_amd64.exe') && yak_windows_amd4.exe install && del /f yak_windows_amd64.exe
```

--------------------------------

### Yak: Add Query Parameters to GET Request

Source: https://yaklang.com/docs/yakexamples/http-basic

This snippet shows how to add query parameters to a GET request using http.params. It demonstrates creating a new request with parameters and displaying the resulting URL.

```Yak
req = http.NewRequest("GET", "https://www.baidu.com", http.params({"key": "value"}))~http.show(req)
```

--------------------------------

### Nuclei Regex and DSL Extractor Example

Source: https://yaklang.com/docs/yak-basic/cap8-4-yaml-poc

Shows how to use a regex extractor to capture a 'doctype' from the body and a DSL matcher to check if it equals 'html'. This example highlights data extraction and conditional matching.

```yaml
http:-
  method: POST
  path:
    - '{{RootURL}}/'
  redirects: true
  matchers-condition: and
  matchers:
    - id: 1
      type: dsl
      part: body
      dsl:
        - doctype=="html"
      condition: and
  extractors:
    - id: 1
      name: doctype
      scope: raw
      type: regex
      regex:
        - doctype (\w+)
      group: 1
```

--------------------------------

### Create HTTP Fuzz Object with Proxy

Source: https://yaklang.com/docs/yak-basic/cap8-1-http

This example shows how to initialize an HTTP Fuzz object and configure it to use a proxy server. The `fuzz.proxy()` function allows specifying the proxy address and protocol (e.g., HTTP, SOCKS5).

```Yak
raw = `GET / HTTP/1.1Host: www.example.com
abc=1`
fuzz.HTTPRequest(raw, fuzz.proxy("http://proxy.com"))~
```

--------------------------------

### Yak Service Scan Example

Source: https://yaklang.com/docs/intro

Demonstrates a simple Yak script to scan target hosts and ports. It shows how to retrieve command-line arguments for target and port, perform a service scan using the 'servicescan' library, and iterate through the results.

```Yak
// Get parameters, --target xxxx --port 80
scanTarget, scanPorts = cli.String("target"), cli.String("port")
// Perform service scan on targets and ports
results, err = servicescan.Scan(scanTarget, scanPorts)
die(err)
// Print scan results
for result = range results {
    println(result.String())
}
```

--------------------------------

### Automatic GET Parameter Fuzzing in Yaklang

Source: https://yaklang.com/docs/yakexamples/fuzz-request

This Yaklang code snippet shows an automated approach to fuzzing GET parameters. It utilizes GetGetQueryParams to retrieve all query parameters and directly fuzzes them with randomly generated tokens, simplifying the fuzzing process.

```Yaklang
raw = `GET /target-path?abc=123 HTTP/1.1Host: www.example.comUser-Agent: Ur-Awesome-UA/1.0001
`
freq = fuzz.HTTPRequest(raw, fuzz.https(true))~
for param in freq.GetGetQueryParams() {
    token = str.RandStr(10)
    param.Fuzz(token).Show()
}
```
Tokens:
Raw