epi052 / feroxbuster

A fast, simple, recursive content discovery tool written in Rust.
https://epi052.github.io/feroxbuster/
MIT License
5.61k stars 472 forks source link

`--silent` shouldn't add prettified redirect location on 3xx #1066

Closed epi052 closed 6 months ago

epi052 commented 6 months ago

Hello,

Firstly, I apologize if the feature already exists; I couldn't find it. I am currently conducting fuzz testing on an application that includes an initial directory named "users," housing a page called "list.php."

The application behaves as follows:

However, when using Feroxbuster to scan "/users/," it follows the redirection and encounters a 404 status. Consequently, it halts fuzzing for this directory, even though the directory does exist.

Is it possible to incorporate a feature that helps detect such directories, indicating that we should continue fuzzing them?

Here is my command:

feroxbuster -u http://internal.analysis.htb/ -w /opt/seclists/Discovery/Web-Content/raft-large-directories.txt --silent -d 1 | feroxbuster --stdin -o internal_full_cluster.txt -w /opt/seclists/Discovery/Web-Content/raft-large-files.txt -x php -d 2

The options "--redirects" does not help in this setup.

Originally posted by @ArthurMuraro in https://github.com/epi052/feroxbuster/discussions/1062

epi052 commented 6 months ago

@all-contributors add @hartoyob for bugs

allcontributors[bot] commented 6 months ago

@epi052

I've put up a pull request to add @hartoyob! :tada:

epi052 commented 6 months ago

@all-contribtors add @ArthurMuraro for bugs

epi052 commented 6 months ago

@all-contributors add @ArthurMuraro for bugs

allcontributors[bot] commented 6 months ago

@epi052

I've put up a pull request to add @ArthurMuraro! :tada: