search

blacklanternsecurity / bbot

A recursive internet scanner for hackers.
https://www.blacklanternsecurity.com/bbot/
GNU General Public License v3.0
4.19k stars 381 forks source link

Full Scan Warnings & Errors #1137

Closed amiremami closed 5 months ago

amiremami commented 5 months ago

I ran a full scan with all flags enabled + APIs. I report here all warnings and errors I got.

  1. I know, this warning will be changed in future, but why it says I have one dns server? Did I set something wrong?

image image

  1. Newsletters

image image image

  1. Gowintness

image image

  1. Interact.sh (got this hundreds of times)

image image image image image

  1. ASN (got this several times)

image image image

For the last two errors, I also got them before, reported in #1053 , in my initial investigation it was coming from Telerik, but can't be sure, because if we enable --debug then there won't be any error anymore. At least this is what I experienced last month. I can try another time with enabling debug if needed. But this time, scan didn't crash and successfully finished.

  1. How to disable screenshots of social media pages?

image

  1. Some errors from debug.log

image image image image

TheTechromancer commented 5 months ago

Jesus @amiremami you're on a roll today

TheTechromancer commented 5 months ago

I will add an option to gowitness to disable social media. In the meantime, would you mind running that same scan again with -c http_debug=true? You don't need to enable --debug. Hopefully that will be enough to catch the interactsh error.

amiremami commented 5 months ago

I will add an option to gowitness to disable social media. In the meantime, would you mind running that same scan again with -c http_debug=true? You don't need to enable --debug. Hopefully that will be enough to catch the interactsh error.

By mistake I wrote my command like this:

-c web_spider_distance=4 web_spider_depth=4 web_spider_links_per_page=500 omit_event_types=[] url_extension_httpx_only=[] -c http_debug=true?

[-c twice, not sure if it worked or not, but error showed up]

debug.log

amiremami commented 5 months ago

It seems, FILEDOWNLOAD also downloads from github, that would be great if we can download only from scope.

image image

amiremami commented 5 months ago

How to prevent gowitness to screenshot the images?

image

TheTechromancer commented 5 months ago

How to prevent gowitness to screenshot the images?

.webp wasn't in the extension blacklist. Fixed in https://github.com/blacklanternsecurity/bbot/pull/1140.

TheTechromancer commented 5 months ago

Closing as we have separate issues for these.