feat(headless): add ActionWaitDialog type

[dwisiswant0]

Proposed changes

Close #5526

How has this been tested?

$ go test -v ./pkg/protocols/headless/engine/... -run "^TestActionWaitDialog$"
=== RUN   TestActionWaitDialog
=== RUN   TestActionWaitDialog/Triggered
=== RUN   TestActionWaitDialog/Invalid
--- PASS: TestActionWaitDialog (2.02s)
    --- PASS: TestActionWaitDialog/Triggered (0.64s)
    --- PASS: TestActionWaitDialog/Invalid (1.38s)
PASS
ok  	github.com/projectdiscovery/nuclei/v3/pkg/protocols/headless/engine	(cached)

Proof

# headless-waitdialog-action.yaml
id: headless-waitdialog-action

info:
  name: Headless Wait Dialog Action
  author: dwisiswant0
  severity: info
  tags: headless,test,xss

headless:
  - steps:
      - action: navigate
        args:
          url: "{{BaseURL}}/?_={{url_encode(concat('<script>', dialog, '</script>'))}}"

      # The 'name' property needs to be defined so that the output variable can
      # be exposed and used later by matchers or extractors.
      - action: waitdialog
        name: alert
        args:
          max-duration: 10ms # it doesn't take a long time to trigger a dialog.

        # Output variables of ActionWaitDialog:
        # * NAME (boolean), indicator of JavaScript dialog triggered.
        # * NAME_type (string), dialog type (alert, confirm, prompt, or
        #   onbeforeunload).
        # * NAME_message (string), displayed message dialog.

    payloads:
      dialog:
        - alert(1)
        - invalidX(1)
        - confirm(1)
        - invalidY(1)
        - prompt(1)
        - invalidZ(1)
        - window.onbeforeunload = () => { return 'ya sure?' }; # nope (unless *Page.Close)

    matchers:
      - type: dsl
        dsl:
          - alert # short of 'alert == true' expr

    extractors:
      - type: dsl
        dsl:
          - "'type: ' + alert_type"
          - "'message: ' + alert_message"

$ go run cmd/nuclei/main.go -headless -t headless-waitdialog-action.yaml -u http://honey.scanme.sh
[headless-waitdialog-action] [headless] [info] http://honey.scanme.sh/?_=%3Cscript%3Ealert%281%29%3C%2Fscript%3E ["type: alert","message: 1"]
[headless-waitdialog-action] [headless] [info] http://honey.scanme.sh/?_=%3Cscript%3Econfirm%281%29%3C%2Fscript%3E ["message: 1","type: confirm"]
[headless-waitdialog-action] [headless] [info] http://honey.scanme.sh/?_=%3Cscript%3Eprompt%281%29%3C%2Fscript%3E ["type: prompt","message: 1"]

Checklist

• Pull request is created against the dev branch
• All checks passed (lint, unit/integration/regression tests etc.) with my changes
• I have added tests that prove my fix is effective or that my feature works
• I have added necessary documentation (if appropriate)

[Ice3man543]

lgtm, very nice work 👍

[ehsandeep]

• panic upon CLT +C

 $ echo http://honey.scanme.sh | ./nuclei -t test.yaml  -headless

                     __     _
   ____  __  _______/ /__  (_)
  / __ \/ / / / ___/ / _ \/ /
 / / / / /_/ / /__/ /  __/ /
/_/ /_/\__,_/\___/_/\___/_/   v3.3.1

		projectdiscovery.io

[INF] Current nuclei version: v3.3.1 (outdated)
[INF] Current nuclei-templates version: v9.9.3 (latest)
[WRN] Scan results upload to cloud is disabled.
[INF] New templates added in latest release: 56
[INF] Templates loaded for current scan: 1
[WRN] Loading 1 unsigned templates for scan. Use with caution.
[INF] Targets loaded for current scan: 1
^C[INF] CTRL+C pressed: Exiting
[INF] Attempting graceful shutdown...
panic: interface conversion: interface {} is nil, not string

goroutine 27 [running]:
github.com/projectdiscovery/nuclei/v3/pkg/protocols/headless.(*Request).executeRequestWithPayloads(0x14000f6ae00, 0x140007f7230, 0x140015109a0?, 0x6?, 0x140008baaf8)
	/Users/geekboy/Github/nuclei/pkg/protocols/headless/request.go:186 +0x12fc
github.com/projectdiscovery/nuclei/v3/pkg/protocols/headless.(*Request).ExecuteWithResults(0x14000f6ae00, 0x14000057248?, 0x140007f6b70, 0x100af5864?, 0x140007f7500)
	/Users/geekboy/Github/nuclei/pkg/protocols/headless/request.go:87 +0x490
github.com/projectdiscovery/nuclei/v3/pkg/tmplexec/generic.(*Generic).ExecuteWithResults(0x14000958f90, 0x14000961680)
	/Users/geekboy/Github/nuclei/pkg/tmplexec/generic/exec.go:61 +0x28c
github.com/projectdiscovery/nuclei/v3/pkg/tmplexec.(*TemplateExecuter).Execute(0x14000d11300, 0x14000961680)
	/Users/geekboy/Github/nuclei/pkg/tmplexec/exec.go:199 +0x340
github.com/projectdiscovery/nuclei/v3/pkg/core.(*Engine).executeTemplateWithTargets.func2.1(0x14ec690?, 0x40?, 0x14000d11540)
	/Users/geekboy/Github/nuclei/pkg/core/executors.go:139 +0x1b0
created by github.com/projectdiscovery/nuclei/v3/pkg/core.(*Engine).executeTemplateWithTargets.func2 in goroutine 26
	/Users/geekboy/Github/nuclei/pkg/core/executors.go:115 +0x478

• disable cert validation in headless? not sure if we do this but I don't find results when running with https://honey.scanme.sh that has expired cert.

[dwisiswant0]

• disable cert validation in headless? [...]

@ehsandeep - To your answer #5550 (comment)

[ehsandeep]

@dwisiswant0 this will make things much easier!

we can also update the docs at - https://docs.projectdiscovery.io/templates/protocols/headless