cybersecsi / RAUDI

A repo to automatically generate and keep updated a series of Docker images through GitHub Actions.
GNU General Public License v3.0
546 stars 33 forks source link

Add new tool - Subzy #32

Closed frost19k closed 2 years ago

frost19k commented 2 years ago

Changes proposed in this pull request

I've added a new tool, Subzy. Subzy is similar to an existing tool - Subjack. However, it is updated more frequently. For e.g. the fingerprints.json for Subzy were updated 7 months ago vs. 17 months ago for Subjack.

Regarding the config.py - I elected to employ get_latest_github_commit() since Subzy does not have a release nor any tags.

I have also updated RAUDI/README.md to include Subzy in the list of tools.

https://user-images.githubusercontent.com/49780407/155833442-fae73957-daaf-48f4-b161-9f29d2fcff5b.mp4

frost19k commented 2 years ago

After I opened this PR I found a bug in secsi/subjack. Since the PR is still open my commit for the fix has been added here.

The way Subjack is written, it looks for the fingerprint.json file in it's compile directory.

The b2f29d9 commit fixes the error - by fetching the .json at build & adding the option to Entrypoint.

❯ docker run -it --rm \
-v "${PWD}/subdomains.txt":"/code/subdomains.txt" \
secsi/subjack:latest -w subdomains.txt -a -m -v
2022/02/26 12:32:26 open /src/github.com/haccer/subjack/fingerprints.json: no such file or directory

❯ docker run -it --rm \
-v "${PWD}/subdomains.txt":"/code/subdomains.txt" \
secsi/subjack:test -w subdomains.txt -a -m -v
[Not Vulnerable] <Redacted Subdomain>
[Not Vulnerable] <Redacted Subdomain>
[Not Vulnerable] <Redacted Subdomain>
[Not Vulnerable] <Redacted Subdomain>

P.S. Sorry for mixing issues in PRs - I didn't know how else to do it.

thelicato commented 2 years ago

Thanks very much! I have been planning for a while to fix Subjack, thanks for doing it yourself!