gosec fixes

Author: 9dl

.github/workflows/go.yml

@@ -4,8 +4,9 @@ import (
 	"GoInjection/backend/helper"
 	"GoInjection/backend/query"
 	"GoInjection/backend/structs"
+	"crypto/rand"
 	"fmt"
-	"math/rand"
+	"math/big"
 	"strings"
 )
 
@@ -58,8 +59,11 @@ func BooleanBasedInjection(url string) (bool, string) {
 				payloadStr := payload.([]interface{})[0].(string)
 				//expectedBool := payload.([]interface{})[1].(bool)
 
-				payload = strings.ReplaceAll(payloadStr, "§", fmt.Sprintf("%08d", rand.Int63n(1e8)))
-				payload = strings.ReplaceAll(payloadStr, "$", fmt.Sprintf("%08d", rand.Int63n(1e8)))
+				randomNum, _ := rand.Int(rand.Reader, big.NewInt(1e8))
+				payload := strings.ReplaceAll(payloadStr, "§", fmt.Sprintf("%08d", randomNum))
+
+				randomNum, _ = rand.Int(rand.Reader, big.NewInt(1e8))
+				payload = strings.ReplaceAll(payload, "$", fmt.Sprintf("%08d", randomNum))
 
 				payloads, status := q.Build(payloadStr)
 				if status != "Success" {

.github/workflows/golangci-lint.yml

@@ -5,9 +5,10 @@ import (
 	helper2 "GoInjection/backend/injections/helper"
 	"GoInjection/backend/query"
 	"GoInjection/backend/structs"
+	"crypto/rand"
 	"encoding/hex"
 	"fmt"
-	"math/rand"
+	"math/big"
 	"strings"
 )
 
@@ -36,7 +37,8 @@ func UnionInjection(url string) (bool, string) {
 		if payloads, ok := unionPayloads[structs.TargetSyntax]; ok {
 			for _, payload := range payloads {
 
-				var identifierString = fmt.Sprintf("%08d", rand.Int63n(1e8))
+				randomNum, _ := rand.Int(rand.Reader, big.NewInt(1e8))
+				var identifierString = strings.ReplaceAll(payload, "$", fmt.Sprintf("%08d", randomNum))
 				var identifierBytes = hex.EncodeToString([]byte(identifierString))
 
 				editor := query.Editor{}