henshin / filebuster Goto Github PK

View Code? Open in Web Editor NEW

212.0 212.0 48.0 945 KB

An extremely fast and flexible web fuzzer

License: GNU General Public License v3.0

Perl 98.39% Dockerfile 1.61%

brute-force directory discovery fast files fuzzer http perl wordlist

filebuster's People

Contributors

Stargazers

Watchers

filebuster's Issues

DNS issue when using /etc/hosts

Filebuster can't connect to hosts hardcoded in /etc/hosts. This has to do with the inet_aton method that is inside the Net::DNS::Lite module.
Needs further investigation

Cannot create SSL connection

I want to fuzz a webapp, the web server is up and accessible via a browser but here is the result I got
[!] Details: Internal Response: Cannot create SSL connection: Failed to set SSL cipher list error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match at /opt/filebuster/filebuster.pl line 551.

Any please please ?

16.04 | cpan | Failed tests: 1-2, 4 -

Running 16.04 w sudo user.
Tried to configure cpan with default auto configuration and sudo.

From /home/$USER/

✔ ~/filebuster [master|✔] 
07:09 $ cpan install YAML Furl Switch Benchmark Cache::LRU Net::DNS::Lite List::MoreUtils IO::Socket::SSL URI::Escape HTML::Entities IO::Socket::Socks::Wrapper
Loading internal null logger. Install Log::Log4perl for logging messages
CPAN: Storable loaded ok (v2.53_01)
Reading '/home/robotux/.local/share/.cpan/Metadata'
  Database was generated on Thu, 28 Dec 2017 05:29:02 GMT
CPAN: Module::CoreList loaded ok (v5.20151213)
YAML is up to date (1.24).
Furl is up to date (3.13).
Switch is up to date (2.17).
Running install for module 'Benchmark'
The most recent version "1.22" of the module "Benchmark"
is part of the perl-5.26.1 distribution. To install that, you need to run
  force install Benchmark   --or--
  install S/SH/SHAY/perl-5.26.1.tar.bz2
CPAN: Time::HiRes loaded ok (v1.9726)
Cache::LRU is up to date (0.04).
Running install for module 'Net::DNS::Lite'
CPAN: Digest::SHA loaded ok (v6.01)
CPAN: Compress::Zlib loaded ok (v2.074)
Checksum for /home/robotux/.local/share/.cpan/sources/authors/id/K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz ok
CPAN: YAML loaded ok (v1.24)
CPAN: CPAN::Meta::Requirements loaded ok (v2.140)
CPAN: Parse::CPAN::Meta loaded ok (v2.150010)
CPAN: CPAN::Meta loaded ok (v2.150010)
Configuring K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz with Makefile.PL
Checking if your kit is complete...
Looks good
Generating a Unix-style Makefile
Writing Makefile for Net::DNS::Lite
Writing MYMETA.yml and MYMETA.json
  KAZUHO/Net-DNS-Lite-0.12.tar.gz
  /usr/bin/perl Makefile.PL INSTALLDIRS=site -- OK
Running make for K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz
cp lib/Net/DNS/Lite.pm blib/lib/Net/DNS/Lite.pm
Manifying 1 pod document
  KAZUHO/Net-DNS-Lite-0.12.tar.gz
  /usr/bin/make -- OK
Running make test
PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(0, 'inc', 'blib/lib', 'blib/arch')" t/*.t
t/00base.t ......... ok   
t/01no_response.t .. ok   
t/02inet_aton.t .... 1/? 
#   Failed test 'lookup foo.nonexistent.'
#   at t/02inet_aton.t line 20.
# Looks like you failed 1 test of 3.
t/02inet_aton.t .... Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/3 subtests 
t/03cache.t ........ ok   
t/04resolv_conf.t .. ok   
t/05mx.t ........... ok    

Test Summary Report
-------------------
t/02inet_aton.t  (Wstat: 256 Tests: 3 Failed: 1)
  Failed test:  3
  Non-zero exit status: 1
Files=6, Tests=43, 13 wallclock secs ( 0.04 usr  0.01 sys +  0.41 cusr  0.03 csys =  0.49 CPU)
Result: FAIL
Failed 1/6 test programs. 1/43 subtests failed.
Makefile:780: recipe for target 'test_dynamic' failed
make: *** [test_dynamic] Error 255
  KAZUHO/Net-DNS-Lite-0.12.tar.gz
  /usr/bin/make test -- NOT OK
//hint// to see the cpan-testers results for installing this module, try:
  reports KAZUHO/Net-DNS-Lite-0.12.tar.gz
List::MoreUtils is up to date (0.428).
IO::Socket::SSL is up to date (2.052).
URI::Escape is up to date (3.31).
HTML::Entities is up to date (3.69).
Running install for module 'IO::Socket::Socks::Wrapper'
Checksum for /home/robotux/.local/share/.cpan/sources/authors/id/O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz ok
Configuring O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz with Makefile.PL
Checking if your kit is complete...
Looks good
Generating a Unix-style Makefile
Writing Makefile for IO::Socket::Socks::Wrapper
Writing MYMETA.yml and MYMETA.json
  OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
  /usr/bin/perl Makefile.PL INSTALLDIRS=site -- OK
Running make for O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
cp lib/IO/Socket/Socks/Wrapper.pm blib/lib/IO/Socket/Socks/Wrapper.pm
cp lib/IO/Socket/Socks/Wrapped.pm blib/lib/IO/Socket/Socks/Wrapped.pm
Manifying 2 pod documents
  OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
  /usr/bin/make -- OK
Running make test
PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(0, 'blib/lib', 'blib/arch')" t/*.t
t/01_in_pkg.t ............... 1/? $IO::Socket::Socks::SOCKET_CLASS = IO::Socket::IP
t/01_in_pkg.t ............... ok   
t/02_in_pkg_no_global.t ..... ok   
t/03_global.t ............... 1/? Connection refused at t/03_global.t line 86.
t/03_global.t ............... ok   
t/04_sub.t .................. ok   
t/05_obj.t .................. ok    
t/06_builtin.t .............. ok   
t/07_mix.t .................. ok   
t/08_timeout.t .............. skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/09_timeout_global.t ....... skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/10_event_loop_anyevent.t .. skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/10_event_loop_mojo.t ...... skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/11_live.t ................. 1/? 
#   Failed test 'LWP+IO::Socket::SSL socks5 wrapping +Server'
#   at t/11_live.t line 31.

#   Failed test 'IO::Socket::SSL socks5 wrapping +Server'
#   at t/11_live.t line 32.
# SYS_ERR=Invalid argument, SSL_ERR=IO::Socket::IP configuration failed, IO::Socket::SSL::VERSION=2.052, Net::SSLeay::VERSION=1.72

#   Failed test '2 or more connections processed'
#   at t/11_live.t line 37.
# 0 connections processed; IO::Socket::SSL::VERSION=2.052
t/11_live.t ................. 6/? # Looks like you failed 3 tests of 7.
t/11_live.t ................. Dubious, test returned 3 (wstat 768, 0x300)
Failed 3/7 subtests 

Test Summary Report
-------------------
t/11_live.t               (Wstat: 768 Tests: 7 Failed: 3)
  Failed tests:  1-2, 4
  Non-zero exit status: 3
Files=12, Tests=57,  3 wallclock secs ( 0.06 usr  0.00 sys +  1.32 cusr  0.17 csys =  1.55 CPU)
Result: FAIL
Failed 1/12 test programs. 3/57 subtests failed.
Makefile:854: recipe for target 'test_dynamic' failed
make: *** [test_dynamic] Error 3
  OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
  /usr/bin/make test -- NOT OK
//hint// to see the cpan-testers results for installing this module, try:
  reports OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz

✘-1 ~/filebuster [master|✔] 
07:10 $ filebuster 
Can't locate IO/Socket/Socks/Wrapper.pm in @INC (you may need to install the IO::Socket::Socks::Wrapper module) (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.22.1 /usr/local/share/perl/5.22.1 /usr/lib/x86_64-linux-gnu/perl5/5.22 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.22 /usr/share/perl/5.22 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base .) at /usr/local/bin/filebuster line 26.
BEGIN failed--compilation aborted at /usr/local/bin/filebuster line 26.

✘-2 ~/filebuster [master|✔] 
07:11 $ cpan install IO::Socket::Socks::Wrapper
Loading internal null logger. Install Log::Log4perl for logging messages
CPAN: Storable loaded ok (v2.53_01)
Reading '/home/robotux/.local/share/.cpan/Metadata'
  Database was generated on Thu, 28 Dec 2017 05:29:02 GMT
Running install for module 'IO::Socket::Socks::Wrapper'
CPAN: Digest::SHA loaded ok (v6.01)
CPAN: Compress::Zlib loaded ok (v2.074)
Checksum for /home/robotux/.local/share/.cpan/sources/authors/id/O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz ok
CPAN: YAML loaded ok (v1.24)
CPAN: CPAN::Meta::Requirements loaded ok (v2.140)
CPAN: Parse::CPAN::Meta loaded ok (v2.150010)
CPAN: CPAN::Meta loaded ok (v2.150010)
CPAN: Module::CoreList loaded ok (v5.20151213)
Configuring O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz with Makefile.PL
Checking if your kit is complete...
Looks good
Generating a Unix-style Makefile
Writing Makefile for IO::Socket::Socks::Wrapper
Writing MYMETA.yml and MYMETA.json
  OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
  /usr/bin/perl Makefile.PL INSTALLDIRS=site -- OK
Running make for O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
cp lib/IO/Socket/Socks/Wrapper.pm blib/lib/IO/Socket/Socks/Wrapper.pm
cp lib/IO/Socket/Socks/Wrapped.pm blib/lib/IO/Socket/Socks/Wrapped.pm
Manifying 2 pod documents
  OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
  /usr/bin/make -- OK
Running make test
PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(0, 'blib/lib', 'blib/arch')" t/*.t
t/01_in_pkg.t ............... 1/? $IO::Socket::Socks::SOCKET_CLASS = IO::Socket::IP
t/01_in_pkg.t ............... ok   
t/02_in_pkg_no_global.t ..... ok   
t/03_global.t ............... 4/? Connection refused at t/03_global.t line 86.
t/03_global.t ............... ok   
t/04_sub.t .................. ok   
t/05_obj.t .................. ok    
t/06_builtin.t .............. ok   
t/07_mix.t .................. ok   
t/08_timeout.t .............. skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/09_timeout_global.t ....... skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/10_event_loop_anyevent.t .. skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/10_event_loop_mojo.t ...... skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/11_live.t ................. 1/? 
#   Failed test 'LWP+IO::Socket::SSL socks5 wrapping +Server'
#   at t/11_live.t line 31.

#   Failed test 'IO::Socket::SSL socks5 wrapping +Server'
#   at t/11_live.t line 32.
# SYS_ERR=Invalid argument, SSL_ERR=IO::Socket::IP configuration failed, IO::Socket::SSL::VERSION=2.052, Net::SSLeay::VERSION=1.72

#   Failed test '2 or more connections processed'
#   at t/11_live.t line 37.
# 0 connections processed; IO::Socket::SSL::VERSION=2.052
# Looks like you failed 3 tests of 7.
t/11_live.t ................. Dubious, test returned 3 (wstat 768, 0x300)
Failed 3/7 subtests 

Test Summary Report
-------------------
t/11_live.t               (Wstat: 768 Tests: 7 Failed: 3)
  Failed tests:  1-2, 4
  Non-zero exit status: 3
Files=12, Tests=57,  2 wallclock secs ( 0.06 usr  0.01 sys +  1.26 cusr  0.24 csys =  1.57 CPU)
Result: FAIL
Failed 1/12 test programs. 3/57 subtests failed.
Makefile:854: recipe for target 'test_dynamic' failed
make: *** [test_dynamic] Error 3
  OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
  /usr/bin/make test -- NOT OK
//hint// to see the cpan-testers results for installing this module, try:
  reports OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz

Feature Request: List of URLs to fuzz

It would be great to have a feature to enable fuzzing in simultaneous URLs at the same time instead of a single URL.

Thanks!

Docker no longer working

An error is thrown every time I try to run the command:

docker run -ti --rm filebuster -u http://yoursite/{fuzz}.jsp

Can't locate Net/DNS.pm in @INC (you may need to install the Net::DNS module) (@INC contains: /usr/local/lib/perl5/site_perl/5.30.0/x86_64-linux-gnu-thread-multi /usr/local/lib/perl5/site_perl/5.30.0 /usr/local/lib/perl5/vendor_perl/5.30.0/x86_64-linux-gnu-thread-multi /usr/local/lib/perl5/vendor_perl/5.30.0 /usr/local/lib/perl5/5.30.0/x86_64-linux-gnu-thread-multi /usr/local/lib/perl5/5.30.0) at /filebuster/filebuster.pl line 28.
BEGIN failed--compilation aborted at /filebuster/filebuster.pl line 28.

Install errors -> Net::DNS::Lite module

Hi there,

Trying to play a little with this tool. However, the install process got me into the following situation regards with the Net::DNS::Lite module which I'm trying to install. I'm running anUbuntu Server 16.04.3 LTS, Perl 5.22 version.

Running install for module 'Net::DNS::Lite'
Checksum for /home/the-preacher/.cpan/sources/authors/id/K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz ok
Configuring K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz with Makefile.PL
Checking if your kit is complete...
Looks good
Generating a Unix-style Makefile
Writing Makefile for Net::DNS::Lite
Writing MYMETA.yml and MYMETA.json
  KAZUHO/Net-DNS-Lite-0.12.tar.gz
  /usr/bin/perl Makefile.PL INSTALLDIRS=site -- OK
Running make for K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz
cp lib/Net/DNS/Lite.pm blib/lib/Net/DNS/Lite.pm
Manifying 1 pod document
  KAZUHO/Net-DNS-Lite-0.12.tar.gz
  /usr/bin/make -- OK
Running make test
PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(0, 'inc', 'blib/lib', 'blib/arch')" t/*.t
t/00base.t ......... 3/? 
#   Failed test 'lookup google.com'
#   at t/00base.t line 18.
t/00base.t ......... 4/? 
#   Failed test 'lookup www (search = google.com)'
#   at t/00base.t line 24.

Any ideas about how to have this one error-free installed?

Cheers.

Cannot create SSL connection

Any please please ?

Recommend Projects

React

A declarative, efficient, and flexible JavaScript library for building user interfaces.
Vue.js

🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript

TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
TensorFlow

An Open Source Machine Learning Framework for Everyone
Django

The Web framework for perfectionists with deadlines.
Laravel

A PHP framework for web artisans
D3

Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

javascript

JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
web

Some thing interesting about web. New door for the world.
server

A server is a program made to process requests and deliver data to clients.
Machine learning

Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Visualization

Some thing interesting about visualization, use data art
Game

Some thing interesting about game, make everyone happy.

Recommend Org

Facebook

We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft

Open source projects and samples from Microsoft.
Google

Google ❤️ Open Source for everyone.
Alibaba

Alibaba Open Source for everyone
D3

Data-Driven Documents codes.
Tencent

China tencent open source team.

Jobs

Jooble