henshin / filebuster Goto Github PK
View Code? Open in Web Editor NEWAn extremely fast and flexible web fuzzer
License: GNU General Public License v3.0
An extremely fast and flexible web fuzzer
License: GNU General Public License v3.0
Filebuster can't connect to hosts hardcoded in /etc/hosts. This has to do with the inet_aton method that is inside the Net::DNS::Lite module.
Needs further investigation
I want to fuzz a webapp, the web server is up and accessible via a browser but here is the result I got
[!] Details: Internal Response: Cannot create SSL connection: Failed to set SSL cipher list error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match at /opt/filebuster/filebuster.pl line 551.
Any please please ?
Running 16.04 w sudo user.
Tried to configure cpan with default auto configuration and sudo.
From /home/$USER/
✔ ~/filebuster [master|✔]
07:09 $ cpan install YAML Furl Switch Benchmark Cache::LRU Net::DNS::Lite List::MoreUtils IO::Socket::SSL URI::Escape HTML::Entities IO::Socket::Socks::Wrapper
Loading internal null logger. Install Log::Log4perl for logging messages
CPAN: Storable loaded ok (v2.53_01)
Reading '/home/robotux/.local/share/.cpan/Metadata'
Database was generated on Thu, 28 Dec 2017 05:29:02 GMT
CPAN: Module::CoreList loaded ok (v5.20151213)
YAML is up to date (1.24).
Furl is up to date (3.13).
Switch is up to date (2.17).
Running install for module 'Benchmark'
The most recent version "1.22" of the module "Benchmark"
is part of the perl-5.26.1 distribution. To install that, you need to run
force install Benchmark --or--
install S/SH/SHAY/perl-5.26.1.tar.bz2
CPAN: Time::HiRes loaded ok (v1.9726)
Cache::LRU is up to date (0.04).
Running install for module 'Net::DNS::Lite'
CPAN: Digest::SHA loaded ok (v6.01)
CPAN: Compress::Zlib loaded ok (v2.074)
Checksum for /home/robotux/.local/share/.cpan/sources/authors/id/K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz ok
CPAN: YAML loaded ok (v1.24)
CPAN: CPAN::Meta::Requirements loaded ok (v2.140)
CPAN: Parse::CPAN::Meta loaded ok (v2.150010)
CPAN: CPAN::Meta loaded ok (v2.150010)
Configuring K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz with Makefile.PL
Checking if your kit is complete...
Looks good
Generating a Unix-style Makefile
Writing Makefile for Net::DNS::Lite
Writing MYMETA.yml and MYMETA.json
KAZUHO/Net-DNS-Lite-0.12.tar.gz
/usr/bin/perl Makefile.PL INSTALLDIRS=site -- OK
Running make for K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz
cp lib/Net/DNS/Lite.pm blib/lib/Net/DNS/Lite.pm
Manifying 1 pod document
KAZUHO/Net-DNS-Lite-0.12.tar.gz
/usr/bin/make -- OK
Running make test
PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(0, 'inc', 'blib/lib', 'blib/arch')" t/*.t
t/00base.t ......... ok
t/01no_response.t .. ok
t/02inet_aton.t .... 1/?
# Failed test 'lookup foo.nonexistent.'
# at t/02inet_aton.t line 20.
# Looks like you failed 1 test of 3.
t/02inet_aton.t .... Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/3 subtests
t/03cache.t ........ ok
t/04resolv_conf.t .. ok
t/05mx.t ........... ok
Test Summary Report
-------------------
t/02inet_aton.t (Wstat: 256 Tests: 3 Failed: 1)
Failed test: 3
Non-zero exit status: 1
Files=6, Tests=43, 13 wallclock secs ( 0.04 usr 0.01 sys + 0.41 cusr 0.03 csys = 0.49 CPU)
Result: FAIL
Failed 1/6 test programs. 1/43 subtests failed.
Makefile:780: recipe for target 'test_dynamic' failed
make: *** [test_dynamic] Error 255
KAZUHO/Net-DNS-Lite-0.12.tar.gz
/usr/bin/make test -- NOT OK
//hint// to see the cpan-testers results for installing this module, try:
reports KAZUHO/Net-DNS-Lite-0.12.tar.gz
List::MoreUtils is up to date (0.428).
IO::Socket::SSL is up to date (2.052).
URI::Escape is up to date (3.31).
HTML::Entities is up to date (3.69).
Running install for module 'IO::Socket::Socks::Wrapper'
Checksum for /home/robotux/.local/share/.cpan/sources/authors/id/O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz ok
Configuring O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz with Makefile.PL
Checking if your kit is complete...
Looks good
Generating a Unix-style Makefile
Writing Makefile for IO::Socket::Socks::Wrapper
Writing MYMETA.yml and MYMETA.json
OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
/usr/bin/perl Makefile.PL INSTALLDIRS=site -- OK
Running make for O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
cp lib/IO/Socket/Socks/Wrapper.pm blib/lib/IO/Socket/Socks/Wrapper.pm
cp lib/IO/Socket/Socks/Wrapped.pm blib/lib/IO/Socket/Socks/Wrapped.pm
Manifying 2 pod documents
OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
/usr/bin/make -- OK
Running make test
PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(0, 'blib/lib', 'blib/arch')" t/*.t
t/01_in_pkg.t ............... 1/? $IO::Socket::Socks::SOCKET_CLASS = IO::Socket::IP
t/01_in_pkg.t ............... ok
t/02_in_pkg_no_global.t ..... ok
t/03_global.t ............... 1/? Connection refused at t/03_global.t line 86.
t/03_global.t ............... ok
t/04_sub.t .................. ok
t/05_obj.t .................. ok
t/06_builtin.t .............. ok
t/07_mix.t .................. ok
t/08_timeout.t .............. skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/09_timeout_global.t ....... skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/10_event_loop_anyevent.t .. skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/10_event_loop_mojo.t ...... skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/11_live.t ................. 1/?
# Failed test 'LWP+IO::Socket::SSL socks5 wrapping +Server'
# at t/11_live.t line 31.
# Failed test 'IO::Socket::SSL socks5 wrapping +Server'
# at t/11_live.t line 32.
# SYS_ERR=Invalid argument, SSL_ERR=IO::Socket::IP configuration failed, IO::Socket::SSL::VERSION=2.052, Net::SSLeay::VERSION=1.72
# Failed test '2 or more connections processed'
# at t/11_live.t line 37.
# 0 connections processed; IO::Socket::SSL::VERSION=2.052
t/11_live.t ................. 6/? # Looks like you failed 3 tests of 7.
t/11_live.t ................. Dubious, test returned 3 (wstat 768, 0x300)
Failed 3/7 subtests
Test Summary Report
-------------------
t/11_live.t (Wstat: 768 Tests: 7 Failed: 3)
Failed tests: 1-2, 4
Non-zero exit status: 3
Files=12, Tests=57, 3 wallclock secs ( 0.06 usr 0.00 sys + 1.32 cusr 0.17 csys = 1.55 CPU)
Result: FAIL
Failed 1/12 test programs. 3/57 subtests failed.
Makefile:854: recipe for target 'test_dynamic' failed
make: *** [test_dynamic] Error 3
OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
/usr/bin/make test -- NOT OK
//hint// to see the cpan-testers results for installing this module, try:
reports OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
✘-1 ~/filebuster [master|✔]
07:10 $ filebuster
Can't locate IO/Socket/Socks/Wrapper.pm in @INC (you may need to install the IO::Socket::Socks::Wrapper module) (@INC contains: /etc/perl /usr/local/lib/x86_64-linux-gnu/perl/5.22.1 /usr/local/share/perl/5.22.1 /usr/lib/x86_64-linux-gnu/perl5/5.22 /usr/share/perl5 /usr/lib/x86_64-linux-gnu/perl/5.22 /usr/share/perl/5.22 /usr/local/lib/site_perl /usr/lib/x86_64-linux-gnu/perl-base .) at /usr/local/bin/filebuster line 26.
BEGIN failed--compilation aborted at /usr/local/bin/filebuster line 26.
✘-2 ~/filebuster [master|✔]
07:11 $ cpan install IO::Socket::Socks::Wrapper
Loading internal null logger. Install Log::Log4perl for logging messages
CPAN: Storable loaded ok (v2.53_01)
Reading '/home/robotux/.local/share/.cpan/Metadata'
Database was generated on Thu, 28 Dec 2017 05:29:02 GMT
Running install for module 'IO::Socket::Socks::Wrapper'
CPAN: Digest::SHA loaded ok (v6.01)
CPAN: Compress::Zlib loaded ok (v2.074)
Checksum for /home/robotux/.local/share/.cpan/sources/authors/id/O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz ok
CPAN: YAML loaded ok (v1.24)
CPAN: CPAN::Meta::Requirements loaded ok (v2.140)
CPAN: Parse::CPAN::Meta loaded ok (v2.150010)
CPAN: CPAN::Meta loaded ok (v2.150010)
CPAN: Module::CoreList loaded ok (v5.20151213)
Configuring O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz with Makefile.PL
Checking if your kit is complete...
Looks good
Generating a Unix-style Makefile
Writing Makefile for IO::Socket::Socks::Wrapper
Writing MYMETA.yml and MYMETA.json
OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
/usr/bin/perl Makefile.PL INSTALLDIRS=site -- OK
Running make for O/OL/OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
cp lib/IO/Socket/Socks/Wrapper.pm blib/lib/IO/Socket/Socks/Wrapper.pm
cp lib/IO/Socket/Socks/Wrapped.pm blib/lib/IO/Socket/Socks/Wrapped.pm
Manifying 2 pod documents
OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
/usr/bin/make -- OK
Running make test
PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(0, 'blib/lib', 'blib/arch')" t/*.t
t/01_in_pkg.t ............... 1/? $IO::Socket::Socks::SOCKET_CLASS = IO::Socket::IP
t/01_in_pkg.t ............... ok
t/02_in_pkg_no_global.t ..... ok
t/03_global.t ............... 4/? Connection refused at t/03_global.t line 86.
t/03_global.t ............... ok
t/04_sub.t .................. ok
t/05_obj.t .................. ok
t/06_builtin.t .............. ok
t/07_mix.t .................. ok
t/08_timeout.t .............. skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/09_timeout_global.t ....... skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/10_event_loop_anyevent.t .. skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/10_event_loop_mojo.t ...... skipped: SOCKS_WRAPPER_SLOW_TESTS environment variable should has true value to run this tests
t/11_live.t ................. 1/?
# Failed test 'LWP+IO::Socket::SSL socks5 wrapping +Server'
# at t/11_live.t line 31.
# Failed test 'IO::Socket::SSL socks5 wrapping +Server'
# at t/11_live.t line 32.
# SYS_ERR=Invalid argument, SSL_ERR=IO::Socket::IP configuration failed, IO::Socket::SSL::VERSION=2.052, Net::SSLeay::VERSION=1.72
# Failed test '2 or more connections processed'
# at t/11_live.t line 37.
# 0 connections processed; IO::Socket::SSL::VERSION=2.052
# Looks like you failed 3 tests of 7.
t/11_live.t ................. Dubious, test returned 3 (wstat 768, 0x300)
Failed 3/7 subtests
Test Summary Report
-------------------
t/11_live.t (Wstat: 768 Tests: 7 Failed: 3)
Failed tests: 1-2, 4
Non-zero exit status: 3
Files=12, Tests=57, 2 wallclock secs ( 0.06 usr 0.01 sys + 1.26 cusr 0.24 csys = 1.57 CPU)
Result: FAIL
Failed 1/12 test programs. 3/57 subtests failed.
Makefile:854: recipe for target 'test_dynamic' failed
make: *** [test_dynamic] Error 3
OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
/usr/bin/make test -- NOT OK
//hint// to see the cpan-testers results for installing this module, try:
reports OLEG/IO-Socket-Socks-Wrapper-0.17.tar.gz
It would be great to have a feature to enable fuzzing in simultaneous URLs at the same time instead of a single URL.
Thanks!
An error is thrown every time I try to run the command:
docker run -ti --rm filebuster -u http://yoursite/{fuzz}.jsp
Can't locate Net/DNS.pm in @INC (you may need to install the Net::DNS module) (@INC contains: /usr/local/lib/perl5/site_perl/5.30.0/x86_64-linux-gnu-thread-multi /usr/local/lib/perl5/site_perl/5.30.0 /usr/local/lib/perl5/vendor_perl/5.30.0/x86_64-linux-gnu-thread-multi /usr/local/lib/perl5/vendor_perl/5.30.0 /usr/local/lib/perl5/5.30.0/x86_64-linux-gnu-thread-multi /usr/local/lib/perl5/5.30.0) at /filebuster/filebuster.pl line 28.
BEGIN failed--compilation aborted at /filebuster/filebuster.pl line 28.
Hi there,
Trying to play a little with this tool. However, the install process got me into the following situation regards with the Net::DNS::Lite module which I'm trying to install. I'm running anUbuntu Server 16.04.3 LTS, Perl 5.22 version.
Running install for module 'Net::DNS::Lite'
Checksum for /home/the-preacher/.cpan/sources/authors/id/K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz ok
Configuring K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz with Makefile.PL
Checking if your kit is complete...
Looks good
Generating a Unix-style Makefile
Writing Makefile for Net::DNS::Lite
Writing MYMETA.yml and MYMETA.json
KAZUHO/Net-DNS-Lite-0.12.tar.gz
/usr/bin/perl Makefile.PL INSTALLDIRS=site -- OK
Running make for K/KA/KAZUHO/Net-DNS-Lite-0.12.tar.gz
cp lib/Net/DNS/Lite.pm blib/lib/Net/DNS/Lite.pm
Manifying 1 pod document
KAZUHO/Net-DNS-Lite-0.12.tar.gz
/usr/bin/make -- OK
Running make test
PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(0, 'inc', 'blib/lib', 'blib/arch')" t/*.t
t/00base.t ......... 3/?
# Failed test 'lookup google.com'
# at t/00base.t line 18.
t/00base.t ......... 4/?
# Failed test 'lookup www (search = google.com)'
# at t/00base.t line 24.
Any ideas about how to have this one error-free installed?
Cheers.
I want to fuzz a webapp, the web server is up and accessible via a browser but here is the result I got
[!] Details: Internal Response: Cannot create SSL connection: Failed to set SSL cipher list error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match at /opt/filebuster/filebuster.pl line 551.
Any please please ?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.