g0ldencybersec / EasyEASM

Zero-dollar attack surface management tool
MIT License
249 stars 35 forks source link

Output of the results has changed significantly #12

Open leoben49 opened 8 months ago

leoben49 commented 8 months ago

I've picked up the tool after not using it for a couple of months and I've found that the results of a single scan are vastly different.

First, I've noticed that my results no longer have as many URLs as they used to. These URLs get identified in the Terminal window, but it seems they're being discarded by httpx(?). For example, when running the tool for the domain owasp.org, I get the following output in the location column (Column 6):

However, the domain lightning.owasp.org is active, and listed as part of the pre-selection but does not get included here. This has happened to me with several other domains where it's also missed sites such as login.[example] etc. I also never noticed the tool having issues such as these in the past.

Another issue I've noticed is that the formatting's changed significantly. Previously, the columns used to be these:

timestamp,asn,cdn_name,port,url,title,body,method,header,raw_header,request,a,cname,extracts,words

But now there is no port column or port information, these are the columns in my new output:

timestamp | asn | cdn_name | sni | - | location | webserver | content_type | final_url | header | raw_header | chain_status_codes | a | tech | chain

I've attached my spreadsheet for you to view OWASPEasyEASM.csv

Please let me know if this is the expected output, or if you have any idea what could have gone wrong

Thanks!!