a0xnirudh / WebXploiter

WebXploiter - An OWASP Top 10 Security scanner !
http://webxploiter.readthedocs.org/
GNU General Public License v3.0
74 stars 21 forks source link

Error when scanning using http on sites where only https is supported #6

Closed tuarjun closed 8 years ago

tuarjun commented 8 years ago

Issue::

When running WebXploiter against a site using http method against a site which only allows https methods, WebXploiter crashes. Possible workaround is to try again using https method once the exception is encountered / Giving the user feedback and suggesting them to try again with https tag.

Example to reproduce bug ::

Running WebXploiter using the following command line arguments produces the given trace back.

python WebXploiter.py -u 'http://bing.com' -a

Traceback (most recent call last):
  File "WebXploiter.py", line 89, in <module>
    main()
  File "WebXploiter.py", line 74, in main
    webxpoit.get_HTTP_methods(args.u)
  File "WebXploiter.py", line 48, in get_HTTP_methods
    self.recon_methods.test_allowed_methods(target)
  File "/home/testify/Documents/Project/WebXploiter/Recon/httpmethods.py", line 17, in test_allowed_methods
    req = requests.request(verb, target)
  File "/usr/local/lib/python2.7/dist-packages/requests/api.py", line 53, in request
    return session.request(method=method, url=url, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 468, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/local/lib/python2.7/dist-packages/requests/sessions.py", line 576, in send
    r = adapter.send(request, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/requests/adapters.py", line 426, in send
    raise ConnectionError(err, request=request)
requests.exceptions.ConnectionError: ('Connection aborted.', BadStatusLine("''",))