v3n0m-Scanner / V3n0M-Scanner

Popular Pentesting scanner in Python3.6 for SQLi/XSS/LFI/RFI and other Vulns
GNU General Public License v3.0
1.45k stars 407 forks source link

v3n0m LFI feature not working #140

Closed killercoderz4 closed 6 years ago

killercoderz4 commented 6 years ago

when i enter lfi mode am asked exploiter or scanner. when i select option 2 it just ignores it and does nothing sometimes it just goes back to parent menu and does nothing.

secondly as a side question can i import my private dork to v3n0m to scan assuming i dont want to use built in dork scanner

NovaCygni commented 6 years ago

You can but your private dork list is unlikely to contain new d0rks as all dorks with the exception of carding/fraud related ones have been added, hence the huge d0rk size list... ill look into the LFI issue next weekend as have a bunch of major changes coming.

killercoderz4 commented 6 years ago

@great addition, nice job bro.i was going through the closed comments. there was idea that popped up of implementing a shell scanner, would be a great addition if its given consideration. you can make it noob proof and skid proof by omtting installation steps for the addon or leave gaps in the documentation for this feature . noobs and skids would not use it.

NovaCygni commented 6 years ago

The reason I never pushed the shell-scanner code features was mainly in part due to the high rate of "Backdoored" and Honeypot shells out there, it would be irresponsible of me to knowingly allow a feature that has a recognisable and viable chance of causing "Bad Outcomes" for my users. Id wager most of the people who download shells from random gits and websites, very rarely have read and/or understand what the code is doing.

killercoderz4 commented 6 years ago

@NovaCygni yeah ofcourse skids and noobs download what they neither understand or can use. i am well aware of the honeypots. anyways the LFI update and fixes would be a welcome addition.

kattstof commented 6 years ago

You should be able to select with letters instead of numbers ex 1=a 2=b 3=c and so on.

killercoderz4 commented 6 years ago

i tried it. it didnt work. the normal selecvtion plus enter and it failed

NovaCygni commented 6 years ago

It was actually a simple fix the input() shouldve been int(input()) on the line the syntax error will be thrown on, its in the next version I just want to finish some things before I do a push..

ansarkamina commented 6 years ago

└──╼ $sudo python3 setup.py install --user [sudo] password for ayan: No module named 'setuptools'

ansarkamina commented 6 years ago

└──╼ $git clone https://github.com/v3n0m-Scanner/V3n0M-Scanner.git Cloning into 'V3n0M-Scanner'... remote: Counting objects: 1318, done. remote: Compressing objects: 100% (46/46), done. remote: Total 1318 (delta 38), reused 32 (delta 16), pack-reused 1255 Receiving objects: 100% (1318/1318), 31.09 MiB | 1.91 MiB/s, done. Resolving deltas: 100% (841/841), done. ┌─[ayan@parrot]─[~/Desktop] └──╼ $ls README.license V3n0M-Scanner XAttacker ┌─[ayan@parrot]─[~/Desktop] └──╼ $cd V3n0M-Scanner ┌─[ayan@parrot]─[~/Desktop/V3n0M-Scanner] └──╼ $ls COPYING.GPL LICENSE README.md Dockerfile 'Parrot Security Additional' setup.py Dockerfile_README.md PKGBUILD src ┌─[ayan@parrot]─[~/Desktop/V3n0M-Scanner] └──╼ $chmod +x setup.py ┌─[ayan@parrot]─[~/Desktop/V3n0M-Scanner] └──╼ $ls COPYING.GPL LICENSE README.md Dockerfile 'Parrot Security Additional' setup.py Dockerfile_README.md PKGBUILD src ┌─[ayan@parrot]─[~/Desktop/V3n0M-Scanner] └──╼ $python3 setup.py install --user No module named 'setuptools' ┌─[ayan@parrot]─[~/Desktop/V3n0M-Scanner] └──╼ $sudo python3 setup.py install --user [sudo] password for ayan: No module named 'setuptools' ┌─[ayan@parrot]─[~/Desktop/V3n0M-Scanner] └──╼ $

kattstof commented 6 years ago

went ahead and pushed the temp. fix for now, should be working fine.