search

d0nutptr / sic

A tool to perform Sequential Import Chaining
https://medium.com/@d0nut/better-exfiltration-via-html-injection-31c72a2dae8b
MIT License
254 stars 14 forks source link

Slow Performance #4

Open nbk2000 opened 5 years ago

nbk2000 commented 5 years ago

Hey d0nut,

So I thought it was the proxy that was introducing latency, but actually even directly connected to the internet, my speeds are nowhere near the ones in your demo video. It's taking about 2 minutes to discover 5-7 characters.

Before I start doing packet capture/analysis I wanted to make sure that you haven't run into this problem before. I'm testing w/ Chrome and FF on Win 10, sic is running on an Ubuntu VPS w/out firewall. Did you have any special TCP settings on the client or server?

Also, lack of a Content-Type header is causing IE to not evaluate the CSS.

Also, also, I see mention of an environmental variable for debugging. How is that used?

Thanks

d0nutptr commented 5 years ago

I haven't tried it on a VPS but i'll give it a go to see if i get similar issues.

Couple of questions first:

  1. Did you compile using the release flag? cargo build --release
  2. Are you getting similar problems if you try running using localhost? (basically, replicate the demo video)

Regarding the debug logs, if you invoke sic with the environment variable RUST_LOG set to info then you should see the logs from sic be output into stdout.

RUST_LOG=info ./sic ... -t template_file

Or you can set the environment variable using export RUST_LOG=info but I think that's a little overkill

d0nutptr commented 5 years ago

Also, if you had a video of this happening with the network tab open in Chrome, that would be awesome! Thanks :)