search

zigoo0 / webpwn3r

WebPwn3r - Web Applications Security Scanner.
GNU General Public License v2.0
454 stars 160 forks source link

Not valid URL #7

Open ThunderSon opened 6 years ago

ThunderSon commented 6 years ago

Hello. I have specified a certain website, but with a port, e.g. https://example.org:5541/index/ and it resulted in an error specifying that this is not a valid URL.

shahriar0247 commented 4 years ago

yeah that happens a lot

shahriar0247 commented 4 years ago

do one thing, change (in scan.py) 

 if "?" in url:
            rce_func(url)
            xss_func(url)
            error_based_sqli_func(url)
         else:
            print ga.red +"\n [Warning] "+ ga.end + ga.bold+"%s"%url +ga.end + ga.red +" is not a valid URL"+ga.end         
            print ga.red +" [Warning] You should write a Full URL .e.g http://site.com/page.php?id=value \n"+ ga.end
            exit()

to 


  if 1 == 1:
                        rce_func(url)
                        xss_func(url)
                        error_based_sqli_func(url)
zigoo0 commented 4 years ago

Hi, the problem is not about ports, it is about missing parameters in url. when this tool was created, the purpose was to quickly scan large set of urls with parameters in order to quickly identify vulnerabilities. It is not meant to be a full web application scanner that you point it to a folder or domain and starts scanning. Thank you.