phra / rustbuster

A Comprehensive Web Fuzzer and Content Discovery Tool
https://iwantmore.pizza
GNU General Public License v3.0
522 stars 59 forks source link

-S ignored in vhost mode #41

Closed theguly closed 3 years ago

theguly commented 4 years ago

running rustbuster with: ./rustbuster-v3.0.3-x86_64-unknown-linux-gnu vhost -d foo.bar --wordlist raft-large-words.txt -u http://127.0.0.1/ -x 'permission' -S 400

i still see 400 errors: [?] Started at : 2019-10-28 15:34:32 GET 400 Bad Request _private.foo.bar GET 400 Bad Request aspnet_client.foo.bar GET 400 Bad Request create_account.foo.bar

to test it you could also use -S 200 against an apache configured with defaults