[BUG] net/url: invalid control character in URL

[adilsoybali]

Describe the bug

Hello, thanks for this great tool. However when I run the tool I get this error:

   _____ _____ __    _____             
  |     | __  |  |  |   __|_ _ ___ ___ 
  |   --|    -|  |__|   __| | |- _|- _|
  |_____|__|__|_____|__|  |___|___|___|

      v1.4.0 - @dwisiswant0

[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
[ERR] parse "https://example.com/\r\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/\rSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/\r%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/\r\nSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/\r\n%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/\r\n\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\rSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\r%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\r\nSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\r\n%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\r\n\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/crlfuzz\r\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\r%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\r\nSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\r\n%20Set-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\r\n\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\r\tSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL
[ERR] parse "https://example.com/?crlfuzz=\rSet-Cookie:param=crlfuzz;": net/url: invalid control character in URL

I got the same error even though I tested it on 2 different linux machines.

Environment:

• OS: linux
• OS version:
  1- Linux tester 5.11.0-1027-azure #30~20.04.1-Ubuntu SMP Wed Jan 12 20:56:50 UTC 2022 x86_64 x86_64 x86_64 GNU/Linux
  2- Linux kali 5.10.0-kali9-amd64 #1 SMP Debian 5.10.46-4kali1 (2021-08-09) x86_64 GNU/Linux
• CRLFuzz Version: CRLFuzz 1.4.0

This link may be helpful: https://stackoverflow.com/questions/55945325/golang-url-parse-always-return-invalid-control-character-url

Thanks

[Hamza12700]

Do you get the same error when running this on HTTP?

[DeadPackets]

This issue is still happening in 2023 even with HTTP.

[dhruvvyas25]

Please fix the issue.

[bananabr]

Any updates on this?

[AexonSec]

.