search

shenril / Sitadel

Web Application Security Scanner
GNU General Public License v3.0
547 stars 109 forks source link

Sitadel hangs at "checking common backdoors" step #25

Closed q2dg closed 5 years ago

q2dg commented 5 years ago

I run python3 sitadel.py http://www.mijacllefia.org and, after launching attack modules and checking admin interfaces, it hangs at checking common backdoors: I've waited more than twenty minutes and it stills is there without showing anything more on screen. Thanks.

shenril commented 5 years ago

I'll see to improve verbosity level to get more feedback on the screen

About the time it could be a lot of reasons: Web Application Firewall/timeout/blacklisting

shenril commented 5 years ago

Could you re-run the scan with the verbosity on ? python3 sitadel.py http://www.mijacllefia.org -v And tell me if it blocks somewhere

q2dg commented 5 years ago

Thanks! It hangs at "Testing: http://www.mijacllefia.org/c99shell.php" and it doesn't show nothing more.

shenril commented 5 years ago

I believe this is related to the request timeout. By default sitadel is going to wait for the server answer forever. In your case you should specify a timeout like 10 seconds python3 sitadel.py http://www.mijacllefia.org -v -t 10

I could enable a default timeout for these cases Anyway it means that something might be wrong on your website though. I m only doing a HEAD request on c99.php and the server never answers.... So there might be a problem on server side.

q2dg commented 5 years ago

You were right, thanks! Maybe eanbling a default timeout it's a good idea, yes. Anyway I ended having two kinds of errors, which are shown in attached screenshots and no results. :-( But since this is not related to initial issue, I'll close it. Feel free to open again if you consider it. Thanks a lot!

Screenshot1 Screenshot2