search

zan8in / afrog

A Security Tool for Bug Bounty, Pentest and Red Teaming.
MIT License
3.43k stars 385 forks source link

No vulnerability found #140

Open ablito19 opened 3 months ago

ablito19 commented 3 months ago

Thanks for maintaining this tool, but why i see no vulnerabilities after the scan. i tested with many sites that are vulnerable to test it but it doesn't display anything. I use windows version

zan8in commented 3 months ago

afrog @ablito19 afrog.exe -t scanme.nmap.org -s directory

ablito19 commented 3 months ago

same thing. i noticed to the folder afrog-pocs is empty. I have to download the pocs manually. why ?

zan8in commented 2 months ago

same thing. i noticed to the folder afrog-pocs is empty. I have to download the pocs manually. why ?

The poc is built into the afrog program, and the afrog-poc folder is where temporary updated poc is stored

ablito19 commented 2 months ago

I tell you this

image

This folder is empty. Maybe that's why i have no vuln when i scan server. What is the problem or how to solve it ?

zan8in commented 2 months ago

By using the command afrog -pl, you can see the number and detailed list of Proof of Concepts (PoCs), which currently stands at 1435 PoCs. If you execute the command afrog.exe -t honey.scanme.sh, the scanning progress should also reflect the same number, 1435.

ablito19 commented 2 months ago

image i got 2870 pocs (download from github) sand you say currently stands at 1435 PoCs. It is correct or not ?

zan8in commented 2 months ago

It is exactly twice the number of 1435. There should be 1435 PoCs in the "%HOME%/afrog-pocs" folder, resulting in data duplication. The content of "%HOME%/afrog-pocs" does not need to be operated and can be automatically processed by the afrog program.

ablito19 commented 2 months ago

At first install or any update, no PoCs in %HOME%/afrog-pocs . I have to download the pocs manually from the github folder.

zan8in commented 2 months ago

At first install or any update, no PoCs in %HOME%/afrog-pocs . I have to download the pocs manually from the github folder.在首次安装或任何更新时，%HOME%/afrog-pocs 中没有 PoC。我必须从 github 文件夹中手动下载 pocs。

Ignore "%HOME%/afrog-pocs". No action is required.

ViCrack commented 2 months ago

建议作者要不把afrog-pocs改个名字。。。比如改成temp-dir之类的，或者叫自定义poc等等。。。