Closed kwilson7770 closed 5 months ago
So I ran the following without issues. I am going to re-run the original scan mentioned above (which takes several hours) and see if it happens again
sudo /home/kali/.local/bin/autorecon --no-port-dirs --only-scans-dir --heartbeat 30 --global.password-wordlist /usr/share/wordlists/rockyou.txt --dirbuster.tool gobuster --dirbuster.threads 20 --dirbuster.wordlist /usr/share/wordlists/dirb/big.txt --dirbuster.ext txt,pdf,config -t targetsToScan.txt
I was not able to reproduce the problem so I am going to close this.
I am not sure what is the cause, but I noticed on Kali 2024.1, running feroxbuster 2.10.2, using mostly defaults the dirbuster scan hangs at some point and no longer produces network traffic. I ran a tcpdump on my tun0 interface and noticed zero traffic going to the 2 targets/3 ports.
I extracted the running command from the process list (ps -efH ww) and ran it slightly modified (new output file, escaped the command in single quotes). This is what I got
sudo /bin/sh -c 'feroxbuster -u http://192.168.241.143:81/ -t 10 -w /root/.local/share/AutoRecon/wordlists/dirbuster.txt -x "txt,html,php,asp,aspx,jsp" -v -k -n -q -e -r -o "/home/kali/test.txt"'
And that worked or at least I think it did. I didn't want to wait for the 800K+ queries to finish. I did get it to finish with a small word list and only one extension in 2 minutes.
sudo /bin/sh -c 'feroxbuster -u http://192.168.241.145:80/ -t 10 -w /usr/share/wordlists/dirb/common.txt -x "txt" -v -k -n -q -e -r -o "/home/kali/test.txt"'
I tried to update feroxbuster on Kali, however, it reported I am running the latest version (2.10.2), which I confirmed on Github as the latest.
It's hard to pinpoint the issue, but after manually killing the processes (without -9, just sudo kill #) autorecon finally finished. This was the process list before killing them:
Then the output afterwards
I am trying the tool using gobuster instead scanning the same targets. I will update this issue again in a few hours once I have those results. This is the command I am currently running
sudo /home/kali/.local/bin/autorecon --no-port-dirs --only-scans-dir --heartbeat 30 --global.password-wordlist /usr/share/wordlists/rockyou.txt --dirbuster.tool gobuster -t targetsToScan.txt