search

owasp-amass / amass

In-depth attack surface mapping and asset discovery
https://owasp.org/www-project-amass/
Other
11.89k stars 1.87k forks source link

Failed to obtain the wordlist at https://raw.githubusercontent.com/OWASP/Amass/master/wordlists/alterations.txt: 404 Not Found #271

Closed godzilla74 closed 4 years ago

godzilla74 commented 5 years ago

Using Amass v3.0.27

Updated to latest version as of 09/17/19: go get -u github.com/OWASP/Amass/...

Attempted to perform simple enum:

$ amass enum -d domain.com
 > Failed to obtain the wordlist at https://raw.githubusercontent.com/OWASP/Amass/master/wordlists/alterations.txt: 404 Not Found

Also tried to override wordlist (with existing wordlist):

$ amass enum -d domain.com -w /opt/go/src/github.com/OWASP/Amass/wordlists/all.txt
> Failed to obtain the wordlist at https://raw.githubusercontent.com/OWASP/Amass/master/wordlists/alterations.txt: 404 Not Found
faheel commented 5 years ago

I'm also getting 404 Not Found on running amass -d <domain>on v2.9.0, no matter the domain I enter. I'm experiencing this since the last 48 hours or so. The latest version (3.1.6) is working fine.

godzilla74 commented 5 years ago

@faheel I ran across this on their Discord channel:

Amass still hasn't been updated to to  v3.1.4 causing it to fail when trying to fetch the wordlists from the github repo. Is an update on snap expected soon? If not, a temporary fix would be keeping a copy of all the wordlists in the /wordlists/ directory. That way it will still work for those who haven't yet updated.

I still couldn't get it to work, even with creating a config.ini file to force the wordlists to use what was in that.

I did, however, get amass to work by pulling the docker container and running it through there:

docker pull caffix/amass:latest
docker run --rm -v $(pwd):/amass/ caffix/amass:latest enum -d <domain>
J12934 commented 5 years ago

Might be a good idea to pin the download url to the currently release so that this could not happen again in the future.

E.g. Amass 3.1.6 would always pull from https://raw.githubusercontent.com/OWASP/Amass/v3.1.6/wordlists/alterations.txt and not from master.

nicholaspier commented 5 years ago

I'm experiencing a similar issue. Amass v3.0.27 from Kali Linux repositories. I used the utility last week without issue. This seems to be very new. Can the file be re-added to its previous location?

# amass enum -d example.com Failed to obtain the wordlist at https://raw.githubusercontent.com/OWASP/Amass/master/wordlists/alterations.txt: 404 Not Found

caffix commented 5 years ago

Please upgrade to Amass v3.1.6 that has the default wordlists embedded within the binary

nicholaspier commented 5 years ago

Please upgrade to Amass v3.1.6 that has the default wordlists embedded within the binary

Any solution for those of us who'd prefer to use packages and let our distribution update the utilities. My opinion is that continuous pulls are not very convenient. Could we download the word lists from somewhere and reference them with the -w parameter? Or, would that not fix the issue?

caffix commented 5 years ago

Kali is updating the package right now. Otherwise, you'll need to obtain the update another way (download the binary for v3.1.6). This problem will not present itself again, since we are not fetching the files from the Internet any longer

d0xo commented 5 years ago

snapversion is still 3.0.27

sumgr0 commented 5 years ago

@d0xo the snap has been updated. Try the cmd: snap refresh, and that shall do it.

I'm using it through snap too...

image

d0xo commented 5 years ago

I have updated the smapversion, had to use --beta to get it working. Snap refresh did nothing at all " All snaps are up to date" This is on 1 Vps with Kali and One with Debian 9. both has the same snap respons.

But I did re install 3.1.6. And nothing is happening when doing amass enum -passive -d domain.

this is for both boxes now beeing on the correct version.

caffix commented 5 years ago

I’ll soon be closing this issue unless there are additional questions

ParadoxalPentest commented 5 years ago

guys if you're using macbook try these two commands to renew it :

brew uninstall amass --force then brew install amass

if you don't have brew command install it first using : https://brew.sh/index_fr

That's how i fixed this in my case. Happy hacking ✌️

krizzsk commented 5 years ago

Hey guys, I have been facing the same issue, my snaps are up to date ( using amass 3.1.9 ) and still having the issue. Any solutions?

OS - Debian

caffix commented 5 years ago

@krizzsk Can you join our Discord server so we can troubleshoot the problem you’re experiencing? Thank you

jepunband commented 4 years ago

hi i have the same problem. I installed in using apt-get... version 2.9.13 .

$amass -active -brute -o hosts.txt -d google.com Failed to obtain the wordlist at https://raw.githubusercontent.com/OWASP/Amass/master/wordlists/alterations.txt: 404 Not Found

J12934 commented 4 years ago

hi i have the same problem. I installed in using apt-get... version 2.9.13 .

$amass -active -brute -o hosts.txt -d google.com Failed to obtain the wordlist at https://raw.githubusercontent.com/OWASP/Amass/master/wordlists/alterations.txt: 404 Not Found

@jepunband Version 2.9.13 is a pretty old version Newer versions don't have this problem anymore.