PentestPad / subzy

Subdomain takeover vulnerability checker
https://www.pentestpad.com
GNU General Public License v2.0
989 stars 149 forks source link

Unable to run the tool #7

Closed neverkknown closed 4 years ago

neverkknown commented 4 years ago

/subzy -target=list.txt -https [ * ] Loaded 1 targets [ Yes ] HTTPS by default (--https) [ 10 ] Concurrent requests (--concurrency) [ No ] Check target only if SSL is valid (--verify_ssl) [ 10 ] HTTP request timeout (in seconds) (--timeout) [ No ] Show only potentially vulnerable subdomains (--hide_fails) πŸ”₯ Good luck πŸ”₯ [ HTTP ERROR ] - list.txt

how to fix this.

LukaSikic commented 4 years ago

If you are loading list of targets, specify it with targets flag. Ex. ./subzy -targets list.txt -https

ArunVR2112 commented 2 years ago

subzy -target subs_n.txt -https [ ] Loaded 1 targets [ ] Loaded 44 fingerprints [ Yes ] HTTPS by default (--https) [ 10 ] Concurrent requests (--concurrency) [ No ] Check target only if SSL is valid (--verify_ssl) [ 10 ] HTTP request timeout (in seconds) (--timeout) [ No ] Show only potentially vulnerable subdomains (--hide_fails) [ HTTP ERROR ] - subs_n.txt

how to fix this:

LukaSikic commented 2 years ago

Read my previous comment on this issue. When loading target hosts from a wordlist, you must use -targets flag

Moshi-07 commented 2 years ago

/subzy -targets=home/mine/Desktop/Test.txt -https [ * ] Loaded 1 targets [ Yes ] HTTPS by default (--https) [ 10 ] Concurrent requests (--concurrency) [ No ] Check target only if SSL is valid (--verify_ssl) [ 10 ] HTTP request timeout (in seconds) (--timeout) [ No ] Show only potentially vulnerable subdomains (--hide_fails) πŸ”₯ Good luck πŸ”₯ [ HTTP ERROR ] - list.txt

how to fix this.

Vibhpr-gaalib commented 1 year ago

its

subzy --targets=targetsList.txt

use targets instead of target.

Moshi-07 commented 1 year ago

Got it Bro Thanks.

On Fri, 4 Nov 2022 at 18:04, Vibhor Sharma @.***> wrote:

its

subzy --targets=targetsList.txt

use targets instead of target.

β€” Reply to this email directly, view it on GitHub https://github.com/LukaSikic/subzy/issues/7#issuecomment-1303440558, or unsubscribe https://github.com/notifications/unsubscribe-auth/AZXI2WWBCAPKN5B4GKLNS2TWGT7EJANCNFSM4P7QOY3Q . You are receiving this because you commented.Message ID: @.***>

Lord-Ravan commented 1 year ago

./subzy run --target test.google.com
[ ] Loaded 1 targets [ ] Loaded 44 fingerprints [ No ] HTTPS by default (--https) [ 10 ] Concurrent requests (--concurrency) [ No ] Check target only if SSL is valid (--verify_ssl) [ 10 ] HTTP request timeout (in seconds) (--timeout) [ No ] Show only potentially vulnerable subdomains (--hide_fails) [ HTTP ERROR ] - test.google.com

went with single webapp

NSEcho commented 1 year ago

Well, that is expected behaviour. Try pinging test.google.com and you should receive ping: cannot resolve test.google.com: Unknown host that is because there are no any DNS records for that subdomain.

Lord-Ravan commented 1 year ago

well with linktr.ee also I am getting the same

─# ./subzy run --target=linktree.com
[ ] Loaded 1 targets [ ] Loaded 44 fingerprints [ No ] HTTPS by default (--https) [ 10 ] Concurrent requests (--concurrency) [ No ] Check target only if SSL is valid (--verify_ssl) [ 10 ] HTTP request timeout (in seconds) (--timeout) [ No ] Show only potentially vulnerable subdomains (--hide_fails) [ HTTP ERROR ] - linktree.com

β”Œβ”€β”€(rootγ‰Ώkali)-[~/subzy] └─# ./subzy run --target linktree.com [ ] Loaded 1 targets [ ] Loaded 44 fingerprints [ No ] HTTPS by default (--https) [ 10 ] Concurrent requests (--concurrency) [ No ] Check target only if SSL is valid (--verify_ssl) [ 10 ] HTTP request timeout (in seconds) (--timeout) [ No ] Show only potentially vulnerable subdomains (--hide_fails) [ HTTP ERROR ] - linktree.com

NSEcho commented 1 year ago

That is some problem on your end with connection and nothing to do with the tool.

Screenshot 2023-04-04 at 14 56 08
Lord-Ravan commented 1 year ago

ohk