Goby
Goby copied to clipboard
Attack surface mapping
操作系统:win10; goby:2.7.2 问题反馈:近期使用更新后的Goby扫描后发现,web检测相对之前版本多了很多很多很多路径误报问题,具体如下图所示  就拿 xxx/never_could_exists举例,每次都会出现,其他也有蛮多。90%的路径都是误报,这是为何?
[Goby has an unknown error.txt](https://github.com/gobysec/Goby/files/10044393/Goby.has.an.unknown.error.txt)
版本: goby-linux-x64-2.1.3-Community goby-win-x64-2.1.3-Community 使用HTTP协议访问HTTPS网站时( 比如http://127.0.0.1:443 ),部分网站会显示 “400 The plain HTTP request was sent to HTTPS port”。 这部分网站实际上使用的是HTTPS协议,但是使用HTTP协议访问也会返回response。  goby在识别这部分网站时,会将HTTPS协议识别为HTTP协议,存在HTTPS协议识别不准确的情况。 建议goby先判断网站是不是HTTPS协议,再判断是不是HTTP协议。
2023/09/15 11:28:55 [DEBUG] runtime.NumCPU():12, runtime.GOMAXPROCS():10 2023/09/15 11:28:55 read user rule file ok: 0 2023/09/15 11:28:55 common config info honeypot: 0 rabbish: 0 rabbish-md5: 0 2023/09/15 11:28:55 init repleace log regex...
****2023/09/22 17:04:09 [DEBUG] runtime.NumCPU():4, runtime.GOMAXPROCS():2 2023/09/22 17:04:09 read user rule file ok: 0 2023/09/22 17:04:09 common config info honeypot: 0 rabbish: 0 rabbish-md5: 0 2023/09/22 17:04:09 init repleace log regex...
2023/04/15 19:42:06 read user rule file ok: 0 2023/04/15 19:42:06 Version: v2.0.320 beta 2023/04/15 19:42:07 API Server listen at 127.0.0.1:8361 2023/04/15 19:42:07 127.0.0.1:12067 GET /api/v1/live 2023/04/15 19:42:08 127.0.0.1:12068 POST /api/v1/setEnvi...