search

PentestPad / subzy

Subdomain takeover vulnerability checker
https://www.pentestpad.com
GNU General Public License v2.0
1.06k stars 156 forks source link

use github api instead of raw file to download fingerprint #61

Open muhammadolammi opened 2 weeks ago

muhammadolammi commented 2 weeks ago

Made a small change in the runner/download.go for the functions

  1. DownloadFingerprints
  2. CheckIntegrity These two functions require saving the fingerprint json from https://github.com/EdOverflow/can-i-take-over-xyz/blob/master/fingerprints.json which uses the raw downloading from GitHub but the raw file download is returning an HTTP timeout error, so I use the API download for my personal use and it has been working. It gets the encoded bas64 content then I decode it and save it as the normal save. I did not touch any other file or function so this should work fine, additional tests may also be a good option.