Open stitch opened 6 years ago
Ok, I'll answer according the subject of this issue: cannot kill hanging scan
Up to now, this is a known run-time issue, it's also documented. Hence I'd like to mark this as "enhancement request".
according "How to quit/kill/stop the script when it hangs?"
Depends on your shell and/or operating system. In plain shell on *nix Ctrl-C should work. If it is in a VM, depends on your VM preferences too. If it is in docker, I guess you need to kill the container:
docker container kill
How to quit/kill/stop the script when it hangs? Is there a keyboard command, escape key that works?
The manual points out that: "If the specified targets accepts connections but does not speak SSL, the connection will be closed after the system's TCP/IP-timeout. This script will hang (about 2-3 minutes)."
I've found that the hang is indefinite scanning a non-tls site with the following command:
docker run --rm -it owasp/o-saft --trace-key --legacy=quick +check arnhem.nl:80
As suggested the --ssl-error-max= (or --no-ssl-error) can be used. After the script hangs, this counter does not increase. Thus using a --ssl-error-max= with a too high value might be a risk of a hang. This is enough for a workaround for this issue š