PentestPad / subzy

Subdomain takeover vulnerability checker
https://www.pentestpad.com
GNU General Public License v2.0
989 stars 149 forks source link

Error: Process: Fingerprints #55

Closed MedoX71T closed 1 month ago

MedoX71T commented 1 month ago

$ subzy run --targets target.txt Error: Process: Fingerprints: invalid character ':' after top-level value $ go version go version go1.22.1 linux/amd64 Updated 3 times already ... its the same issue every time

MedoX71T commented 1 month ago

i manually updated fingerprint.json file from can-i-take-over-xyz and it worked fine but literally every subdomain is VULNERABLE which is not .

lydacious commented 1 month ago

I have also created an issue regarding this. It shows every domain as vulnerable.

edongkido commented 1 month ago

Encountered the same issue as well

3RassRK commented 1 month ago

Facing the same issue :(

root@98829:~/subdomains# subzy r --targets list.txt
Error: Process: Fingerprints: invalid character ':' after top-level value
DrDisconnect27 commented 1 month ago

Same issue as well

DevSuyashA commented 1 month ago

same here, any solution that worked for y'all, even temporarily?

acuciureanu commented 1 month ago

@NSEcho I think you have to create a new release with a new version and that's why the guys are experiencing the problem.

Until then here's a workaround:

git clone https://github.com/PentestPad/subzy.git
cd subzy
go install .
NSEcho commented 1 month ago

Okay, I have pushed some changes, now by default with each run fingerprints will be checked with an upstream and if there are no fingerprints (it will download them), additionally, if there is a mismatch between two versions (local and upstream), it will download them again.

You can simply do go install -v github.com/PentestPad/subzy@latest.

Let me know if this fixed the issues you had.

acuciureanu commented 1 month ago

Okay, I have pushed some changes, now by default with each run fingerprints will be checked with an upstream and if there are no fingerprints (it will download them), additionally, if there is a mismatch between two versions (local and upstream), it will download them again.

You can simply do go install -v github.com/PentestPad/subzy@latest.

Let me know if this fixed the issues you had.

i get

$ go install -v github.com/PentestPad/subzy@latest
go: github.com/PentestPad/subzy@latest: version constraints conflict:
        github.com/PentestPad/subzy@v1.1.0: parsing go.mod:
        module declares its path as: github.com/LukaSikic/subzy
                but was required as: github.com/PentestPad/subzy
NSEcho commented 1 month ago

Probably takes some time for Go proxy to update the changes, do go install github.com/PentestPad/subzy@2a8493c

secfung commented 1 month ago

I got the same error message "Error: Process: Fingerprints: invalid character ':' after top-level value" even ran "go install github.com/PentestPad/subzy@2a8493c". Thanks!

NSEcho commented 1 month ago

Can you check your home directory, there should be subzy directory and is there fingerprints.json inside of it?

secfung commented 1 month ago

Yes. I got this file.

┌──(root㉿kali)-[~/subzy] └─# ls -al total 12 drwxr-xr-x 2 root root 4096 Aug 27 15:26 . drwx------ 46 root root 4096 Aug 27 15:26 .. -rwxr-xr-x 1 root root 14 Aug 27 15:26 fingerprints.json

NSEcho commented 1 month ago

Can you remove it and run subzy again and please send the screenshot here of it running

secfung commented 1 month ago

I deleted the fingerprints.json and re-run subzy but got the same error.

Selection_014

NSEcho commented 1 month ago

It appears to me that the issue is related to failed download of the fingerprints.json, is there anything that blocks your access to this github repo?

NSEcho commented 1 month ago

Meanwhile, as a workaround download this file https://raw.githubusercontent.com/EdOverflow/can-i-take-over-xyz/master/fingerprints.json and place it inside the subzy directory inside of your home directory.

secfung commented 1 month ago

It works without the error message now. Thanks a lot!

lydacious commented 1 month ago

Probably takes some time for Go proxy to update the changes, do go install github.com/PentestPad/subzy@2a8493c

This worked. Thanks

krn966 commented 1 month ago

Okay, I have pushed some changes, now by default with each run fingerprints will be checked with an upstream and if there are no fingerprints (it will download them), additionally, if there is a mismatch between two versions (local and upstream), it will download them again.

You can simply do go install -v github.com/PentestPad/subzy@latest.

Let me know if this fixed the issues you had.

Worked for me. Thanks.