anouarbensaad / vulnx

vulnx 🕷️ an intelligent Bot, Shell can achieve automatic injection, and help researchers detect security vulnerabilities CMS system. It can perform a quick CMS security detection, information collection (including sub-domain name, ip address, country information, organizational information and time zone, etc.) and vulnerability scanning.
GNU General Public License v3.0
1.9k stars 343 forks source link

AttributeError: 'NoneType' object has no attribute 'group' #65

Closed kdevb0x closed 4 years ago

kdevb0x commented 5 years ago

Launching with a command similar to (In my particular case): vulnx --url $TARGET_URL --dns --dork-list wordpress -o $SAVEDIR -c all -d -w -e

Fails with:

Traceback (most recent call last): File "/usr/share/vulnx/vulnx.py", line 640, in detect_cms() File "/usr/share/vulnx/vulnx.py", line 251, in detect_cms domain_info(url) File "/usr/share/vulnx/modules/dnsLookup.py", line 74, in domain_info csrf_token = re.search(r"name='csrfmiddlewaretoken' value='(.*?)'", response).group(1) AttributeError: 'NoneType' object has no attribute 'group'

The fix is trivial, and I have submitted a pull request with a fix.

(Note: I am relatively new to contributing to projects, so please let me know if there is anything else I should do, or any comments you might have. Thanks!)

djsubstance commented 5 years ago

same problem here:

Running Cmd: vulnx -u "https://target.com" -D ./dorklist.txt -c all --threads 10 -n 11 -l wordpress -e -w -d

Execution: [~] Web Hosting Information [+] Domain Created on : 2002 [+] CloudFlare IP : 208.x.x.x [+] Country : US [+] Region : Texas [+] Timezone : America/Chicago [+] Org : AS19104

[~] Starting searching for Subdomains Traceback (most recent call last): File "/usr/share/vulnx/vulnx.py", line 640, in detect_cms() File "/usr/share/vulnx/vulnx.py", line 505, in detect_cms domain_info(url) File "/usr/share/vulnx/modules/dnsLookup.py", line 74, in domain_info csrf_token = re.search(r"name='csrfmiddlewaretoken' value='(.*?)'", response).group(1) AttributeError: 'NoneType' object has no attribute 'group'

I was given a tip to try taking the color definitions out of file: modules/dorkTable.py

that didnt help any ideas anyone?

dj substance One Nation - Underground https://tranceattic.com

anouarbensaad commented 5 years ago

Issue Fixed : try now to update vulnx ./update.sh

djsubstance commented 5 years ago

Hey thanks for reaching out

This is what i get when i run ./update.sh

[root@exploiter]# vulnx -update^C

*[9x]*::[12:52 PM]:[/usr/src/vulnx]

[root@exploiter]# ./update.sh

=: No such file or directory

I just cloned it down again from git, and ran install

[root@exploiter]# ./install.sh

===== VULNX INSTALL =====

[+] Vulnx Will Be Installed In Your System

[+] Installing python3...

Reading package lists... Done

Building dependency tree

Reading state information... Done

python3 is already the newest version (3.6.7-1~18.04).

0 upgReading package lists... Done

Building dependency tree

Reading state information... Done

python3 is already the newest version (3.6.7-1~18.04).

0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

Requirement already satisfied: requests in /usr/local/lib/python2.7/dist-packages (from -r ./requirements.txt (line 1))

Requirement already satisfied: bs4 in /usr/local/lib/python2.7/dist-packages (from -r ./requirements.txt (line 2))

Requirement already satisfied: urllib3<1.25,>=1.21.1 in /usr/local/lib/python2.7/dist-packages (from requests->-r ./requirements.txt (line 1))

Requirement already satisfied: certifi>=2017.4.17 in /usr/local/lib/python2.7/dist-packages (from requests->-r ./requirements.txt (line 1))

Requirement already satisfied: chardet<3.1.0,>=3.0.2 in /usr/local/lib/python2.7/dist-packages (from requests->-r ./requirements.txt (line 1))

Requirement already satisfied: idna<2.9,>=2.5 in /usr/lib/python2.7/dist-packages (from requests->-r ./requirements.txt (line 1))

Requirement already satisfied: beautifulsoup4 in /usr/local/lib/python2.7/dist-packages (from bs4->-r ./requirements.txt (line 2))

Requirement already satisfied: soupsieve>=1.2 in /usr/local/lib/python2.7/dist-packages (from beautifulsoup4->bs4->-r ./requirements.txt (line 2))

Requirement already satisfied: backports.functools-lru-cache; python_version < "3" in /usr/local/lib/python2.7/dist-packages (from soupsieve>=1.2->beautifulsoup4->bs4->-r ./requirements.txt (line 2))

[+] Checking directories...

[+] Installing ...

[+] Creating Symbolic Link ...

mkdir: cannot create directory '/usr/share/vulnx': File exists

[+] Tool Successfully Installed And Will Start In 5s!

[+] You can execute tool by typing vulnxraded, 0 newly installed, 0 to remove and 0 not upgraded.

Thats all well and good, but i still get errors when running it ... (with almost any options) i get some out of bounds errors.

When i run ./update.sh i just see = then an error

ny other ideas, or stack traces you want

i would love to help u beta test this awesome script

dj substance

djsubstance commented 5 years ago

SORRY for the repeated emails I have an update.

when i ran ./update.sh it would give an error, so i edited it, took out the top 3 lines (the color def's) then it ran fine! it updated, but , when i ran it checko ut this stack trace its too big to paste here..

https://pastebin.com/3CDBzgr3

Let me know what you think, and how we can get this working solid.. subz

On Sat, Nov 16, 2019 at 1:56 PM Mister subz jcat42o@gmail.com wrote:

Hey thanks for reaching out

This is what i get when i run ./update.sh

[root@exploiter]# vulnx -update^C

*[9x]*::[12:52 PM]:[/usr/src/vulnx]

[root@exploiter]# ./update.sh

=: No such file or directory

I just cloned it down again from git, and ran install

[root@exploiter]# ./install.sh

===== VULNX INSTALL =====

[+] Vulnx Will Be Installed In Your System

[+] Installing python3...

Reading package lists... Done

Building dependency tree

Reading state information... Done

python3 is already the newest version (3.6.7-1~18.04).

0 upgReading package lists... Done

Building dependency tree

Reading state information... Done

python3 is already the newest version (3.6.7-1~18.04).

0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

Requirement already satisfied: requests in /usr/local/lib/python2.7/dist-packages (from -r ./requirements.txt (line 1))

Requirement already satisfied: bs4 in /usr/local/lib/python2.7/dist-packages (from -r ./requirements.txt (line 2))

Requirement already satisfied: urllib3<1.25,>=1.21.1 in /usr/local/lib/python2.7/dist-packages (from requests->-r ./requirements.txt (line 1))

Requirement already satisfied: certifi>=2017.4.17 in /usr/local/lib/python2.7/dist-packages (from requests->-r ./requirements.txt (line 1))

Requirement already satisfied: chardet<3.1.0,>=3.0.2 in /usr/local/lib/python2.7/dist-packages (from requests->-r ./requirements.txt (line 1))

Requirement already satisfied: idna<2.9,>=2.5 in /usr/lib/python2.7/dist-packages (from requests->-r ./requirements.txt (line 1))

Requirement already satisfied: beautifulsoup4 in /usr/local/lib/python2.7/dist-packages (from bs4->-r ./requirements.txt (line 2))

Requirement already satisfied: soupsieve>=1.2 in /usr/local/lib/python2.7/dist-packages (from beautifulsoup4->bs4->-r ./requirements.txt (line 2))

Requirement already satisfied: backports.functools-lru-cache; python_version < "3" in /usr/local/lib/python2.7/dist-packages (from soupsieve>=1.2->beautifulsoup4->bs4->-r ./requirements.txt (line 2))

[+] Checking directories...

[+] Installing ...

[+] Creating Symbolic Link ...

mkdir: cannot create directory '/usr/share/vulnx': File exists

[+] Tool Successfully Installed And Will Start In 5s!

[+] You can execute tool by typing vulnxraded, 0 newly installed, 0 to remove and 0 not upgraded.

Thats all well and good, but i still get errors when running it ... (with almost any options) i get some out of bounds errors.

When i run ./update.sh i just see = then an error

ny other ideas, or stack traces you want

i would love to help u beta test this awesome script

dj substance

anouarbensaad commented 5 years ago

Thank you try http instead of https and remove the thread and timeout argument

image

djsubstance commented 5 years ago

well what aBOUT 98% of the internet that uses https ;)

this doesnt support it??

anouarbensaad commented 5 years ago

in the screenshot i use https but in your case i told you to try http just to know the problem because you have timeout problem you put 15 timeout that's a lot try to remove timeout from the argument

djsubstance commented 5 years ago

ok man.. thanks this util is pretty awesome.. i have it linked on my page

https://tranceattic.com/links.php - check out my link list man, i bet you find some things you find HIGHLY useful some of its music related, some of its SEO, but there is a TON

anouarbensaad commented 5 years ago

Thank You 🙏