Bruteforce with Hydra keeps running even through -b option not chosen

1N3 / Sn1per

Attack Surface Management Platform

https://sn1persecurity.com

Other

7.9k stars 1.82k forks source link

Bruteforce with Hydra keeps running even through -b option not chosen #323

Closed digitizeddude closed 3 years ago

digitizeddude commented 3 years ago

I ran a standard scan using the following command with Sniper Pro 8: sniper -t domain.com -m normal -w domain.com and for some reason brute force through Hydra is running against the site. Is this an expected result? I've never seen this before so i'm just trying to figure out if the issue is a bug. The environment is running on Kali 2020.4 with the lastest version of Sniper and Sniper Pro 8. The command was run through Sniper Pro. Thanks

1N3 commented 3 years ago

Thanks for the heads up. Looks like this was a bug..

You have two options to fix. You can:

1) Set your /root/.sniper.conf "AUTO_BRUTE" setting to "0"

2) You can download the updated /usr/share/sniper/modes/bruteforce.sh in the master repo to replace your existing script

rm -f /usr/share/sniper/modes/bruteforce.sh
wget https://raw.githubusercontent.com/1N3/Sn1per/master/modes/bruteforce.sh -O /usr/share/sniper/modes/bruteforce.sh
chmod 775 /usr/share/sniper/modes/bruteforce.sh