infobyte / faraday_agent_dispatcher

Faraday Agent Dispatcher launches any security tools and send results to Faradaysec Platform.
https://www.faradaysec.com/
GNU General Public License v3.0
39 stars 11 forks source link

Nuclei executor does not accept IP addresses #13

Closed lospoelos closed 1 year ago

lospoelos commented 2 years ago

In line 64 of /usr/local/lib/python3.10/dist-packages/faraday_agent_dispatcher/static/executors/official/nuclei.py a check is done to disallow IP addresses. Why is that? Nuclei fully support scanning IP's. I've created a work around, after which scanning IP's works fine (Nuclei does find stuff on non-webservers):

if is_ip(url_parse.hostname) or is_ip(url_parse.path):
                # print(f"Is {NUCLEI_TARGET} not valid.", file=sys.stderr)
                # sys.exit()
                url = f"{NUCLEI_TARGET}"

OS: Kali Linux 2022.3 Faraday version: 4.1.0 faraday_agent_dispatcher: 2.4.0

gmartinez95 commented 1 year ago

Hi @lospoelos, you are absolutely right, the next release will fix this

lospoelos commented 1 year ago

Thx!