search

R0X4R / Garud

An automation tool that scans sub-domains, sub-domain takeover, then filters out XSS, SSTI, SSRF, and more injection point parameters and scans for some low hanging vulnerabilities automatically.
MIT License
768 stars 176 forks source link

No Results #37

Closed dabeer445 closed 2 years ago

dabeer445 commented 2 years ago

Hey, I have installed all the dependecies but still whenever I run it on any target there is no result at all. Can you guide me what the issue seems to be? image

frost19k commented 2 years ago

Could you please delete all the files in temporary folder & run it again - just to make sure?

The way the script is written - if a file exists then the corresponding command does not run even if the file is empty. So I'm thinking it's possible you ran Garud as a test & it wrote an empty file & now it's skipping over those steps.

R0X4R commented 2 years ago

Please give new output folder or empty for every new scan

dabeer445 commented 2 years ago

Hey The temp folder has the files but they are all empty image

the result screen image

R0X4R commented 2 years ago

do update your garud and re-run it check if issue resolved or not sometimes domain is not vulnerable to any bug so it will show you this.

FackJox commented 2 years ago

I am running the latest garud version and also get the 0 subdomain error, the files mentioned above are created but always reports 0 content, even when deleting folders or using new output folders. I can run subfinder seperately and it retrieves subdomains however. I think the scan is not outputting in the files somehow. Anywhere I can dig deeper to get more info? Logs or tweak the garud go script to create some?

R0X4R commented 2 years ago

Hello @FackJox and @dabeer445

I tried to fix it in new PR check if it works or not if not do open an issue again

Thanks