Reconnoitre icon indicating copy to clipboard operation
Reconnoitre copied to clipboard

gobuster update breaks automatic findings text file commands

Open Em7ee opened this issue 4 years ago • 6 comments

Gobuster v3.0.1 now has mode options called "dns", "dir", "vhost". This will need to be reflected in the exported findings file that is generated for the automatic gobuster commands.

https://github.com/codingo/Reconnoitre/blob/758247afc3a325cbf8224927fa095fbb0065fa6b/Reconnoitre/lib/config.json#L34-L35

These need "dir" added to each.

gobuster dir -w /usr/share/seclists/Discovery/Web-Content/common.txt -u https://$ip:$port/ -s '200,204,301,302,307,403,500' -e | tee '$outputdir/$ip_$port_gobuster_common.txt'
gobuster dir -w /usr/share/seclists/Discovery/Web-Content/CGIs.txt -u https://$ip:$port/ -s '200,204,301,307,403,500' -e | tee '$outputdir/$ip_$port_gobuster_cgis.txt'

Will throw a pull request.

Em7ee avatar Jul 19 '19 04:07 Em7ee

@jan0sik I believe this was resolved in #103, but very open to another pull request if not

codingo avatar Jul 19 '19 13:07 codingo

Actually, I saw you submitted that. Thank-you, and closing this issue.

codingo avatar Jul 19 '19 13:07 codingo

Closed with #103

codingo avatar Jul 19 '19 13:07 codingo

Missed the other gobuster commands in the http output. I only fixed it in the https output, when merged. When you have the time, can you fix it when you get the chance?

https://github.com/codingo/Reconnoitre/blob/70c8a1909700e4ee4296541f2293908aaeeaedf4/Reconnoitre/lib/config.json#L34-L35

Em7ee avatar Jul 30 '19 13:07 Em7ee

Will do!

codingo avatar Jul 30 '19 13:07 codingo

I don't think this was ever fixed? Also, even when adding the dir mode now, it fails because the blacklist needs to be overridden to nothing.

Error: error on parsing arguments: status-codes ("200,204,301,302,307,403,500") and status-codes-blacklist ("404") are both set - please set only one. status-codes-blacklist is set by default so you might want to disable it by supplying an empty string.

keithwoelke avatar Feb 16 '24 22:02 keithwoelke