search

zan8in / afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.
MIT License
3.22k stars 366 forks source link

`-doh` maybe not working!! #113

Open blackcodersec opened 4 months ago

blackcodersec commented 4 months ago

afrog is a good project. I did not find anything from afrog. I found this one but false positive. no problem. could you check my screenshot?

image

zan8in commented 4 months ago

The "report" folder will be automatically created regardless of whether the "-doh" command is used. This issue has been raised by many before, and I will consider optimizing this feature in the future. Thank you for your feedback.

blackcodersec commented 4 months ago

Ok. And is it possible to output like -oN = normal text file? Where are shown only vulnerable URLs?

zan8in commented 4 months ago

^O^ For individual vulnerability inspection, it's advisable to use the -web command or -o result.html. When inspecting vulnerabilities in code, it's recommended to directly query the SQLite3 database table. The table structure can be found in the source code: https://github.com/zan8in/afrog/blob/main/pkg/db/db.go