search

1N3 / Sn1per

Attack Surface Management Platform
https://sn1persecurity.com
Other
8.06k stars 1.85k forks source link

Asterisk in dirsearch subprocess is listing the files #269

Closed amirnsahmad closed 4 years ago

amirnsahmad commented 4 years ago

All the dirsearch commands are not using the asterisk properly. The asterisk is listing the files.

Example: python3 $PLUGINS_DIR/dirsearch/dirsearch.py -u http://$TARGET:$PORT -w $WEB_BRUTE_STEALTH -x 400,404,405,406,429,502,503,504 -F -e $WEB_BRUTE_EXTENSIONS -f -r -t $THREADS --random-agents --plain-text-report=$LOOT_DIR/web/dirsearch-$TARGET.txt 2> /dev/null > /dev/null && cat $LOOT_DIR/web/dirsearch-$TARGET.txt

This is generating a subprocess like this: python3 /usr/share/sniper/plugins/dirsearch/dirsearch.py -u http://site.com -w /usr/share/sniper/wordlists/web-brute-common.txt -x 400,404,405,406,429,502,503,504 -F -e build dist Dockerfile LICENSE LinkFinder.egg-info linkfinder.py README.md requirements.txt setup.py template.html test_parser.py -t 20 --random-agents --plain-text-report=/usr/share/sniper/loot/workspace/teste.txt

1N3 commented 4 years ago

Thanks, this will be fixed in the next version (v8.4) which should be out in the next week or so.

1N3 commented 4 years ago

This is fixed now. Closing out.