Comments (2)
did you find any workaround? i'm stuck with this error too in some domains
from arjun.
[*] Scanning 9/306: https://test.stg.example.com/api/customer [*] Probing the target for stability Traceback (most recent call last): File "/usr/local/bin/arjun", line 11, in <module> load_entry_point('arjun==2.2.2', 'console_scripts', 'arjun')() File "/usr/local/lib/python3.8/dist-packages/arjun-2.2.2-py3.8.egg/arjun/__main__.py", line 213, in main these_params = initialize(each, list(wordlist)) File "/usr/local/lib/python3.8/dist-packages/arjun-2.2.2-py3.8.egg/arjun/__main__.py", line 138, in initialize reason = compare(response_3, factors, {zzuf[:-1]: zzuf[::-1][:-1]})[2] File "/usr/local/lib/python3.8/dist-packages/arjun-2.2.2-py3.8.egg/arjun/core/anomaly.py", line 62, in compare these_headers = list(response.headers.keys()) AttributeError: 'str' object has no attribute 'headers'
working just fine
(env) ➜ Arjun git:(master) ✗ arjun -u http://127.0.0.1/vapi
_
/_| _ '
( |/ /(//) v2.2.2
_/
[*] Probing the target for stability
[*] Analysing HTTP response for anomalies
<class 'requests.models.Response'>
[*] Analysing HTTP response for potential parameter names
[+] Heuristic scanner found 46 parameters: error, flex, deprecated, version, Hide, collapsed, Copied, down, address, email, 0, black, up, type, u, course, 1, mobileno, pin, example, url, 10px, y, in, 18px, title, n, name, center, password, otp, xml, text, description, block, m, scheme, pure, g, username, true, summary, i, expand, callbackResponses, openapi
[*] Logicforcing the URL endpoint
^C^CException ignored in: <module 'threading' from '/usr/lib/python3.11/threading.py'>
Traceback (most recent call last):
File "/usr/lib/python3.11/threading.py", line 1560, in _shutdown
atexit_call()
File "/usr/lib/python3.11/concurrent/futures/thread.py", line 31, in _python_exit
t.join()
File "/usr/lib/python3.11/threading.py", line 1119, in join
self._wait_for_tstate_lock()
File "/usr/lib/python3.11/threading.py", line 1139, in _wait_for_tstate_lock
if lock.acquire(block, timeout):
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
KeyboardInterrupt:
(env) ➜ Arjun git:(master) ✗
problem is in the requester.py
file, where the requester
function returns str
response if it fails to make a successful HTTP request. hence the AttributeError: 'str' object has no attribute 'headers'
error.
def requester(request, payload={}):
"""
central function for making http requests
returns str on error otherwise response object of requests library
"""
So in the meantime, you can keep this in mind, while creating a pull request to fix this error.
from arjun.
Related Issues (20)
- -oB error HOT 5
- Can i use this with python3? HOT 1
- The wordlist contains the param but Arjun was not able to find that parameter (Previously It was working)
- multiple problem HOT 2
- What is the correct syntax for scanning POST requests with Body? HOT 1
- gets stuck on some working link HOT 2
- File not found '/root/tools/Arjun/arjun.py HOT 1
- Error execution "ModuleNotFoundError: No module named 'idna'" HOT 1
- can't run it i'm not good in python
- TypeError: object of type 'NoneType' has no len() HOT 1
- It wants the --stable command to be used on all scans HOT 3
- warnings.warn("urllib3 ({}) or chardet ({}) doesn't match a supported "
- Server received a bad request. Try decreasing the chunk size with -c option
- Arjun won't be Upgraded
- Arjun stuck at "Probing the target for stability" HOT 6
- anomaly.py HOT 1
- Question about license HOT 3
- NOT TEST error HOT 1
- Bugs in fuzz json packets
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from arjun.