Watchdog icon indicating copy to clipboard operation
Watchdog copied to clipboard

oneforall报错'NoneType' object is not iterable

Open Paladin1412 opened this issue 5 years ago • 11 comments

Traceback (most recent call last): File "client/subdomain/oneforall/sbudomain_run.py", line 200, in main() File "client/subdomain/oneforall/sbudomain_run.py", line 89, in main subdomain.run() File "client/subdomain/oneforall/sbudomain_run.py", line 25, in run OneForAll(self.host).run() File "/Watchdog/Watchdog/client/subdomain/oneforall/../../../client/subdomain/oneforall/oneforall.py", line 237, in run self.main() File "/Watchdog/Watchdog/client/subdomain/oneforall/../../../client/subdomain/oneforall/oneforall.py", line 193, in main self.data = resolve.run_resolve(self.domain, self.data) File "/Watchdog/Watchdog/client/subdomain/oneforall/../../../client/subdomain/oneforall/common/resolve.py", line 164, in run_resolve data = update_data(data, records) File "/Watchdog/Watchdog/client/subdomain/oneforall/../../../client/subdomain/oneforall/common/resolve.py", line 39, in update_data items.update(record) TypeError: 'NoneType' object is not iterable 18:18:13,591 [INFOR] utils:557 - 结束执行massdns 18:18:13,592 [INFOR] resolve:68 - 正在处理解析结果

Paladin1412 avatar Jun 01 '20 10:06 Paladin1412

传递的值是什么,单独执行oneforall试试

CTF-MissFeng avatar Jun 01 '20 11:06 CTF-MissFeng

return data,records时候records为空,对比目前新版oneforall的common/resolve.py文件,未对records为空的情况进行判断

Paladin1412 avatar Jun 02 '20 02:06 Paladin1412

onerforall 单独执行某子域名时不会触发,当新建任务为*.baidu.com等格式时必现

Paladin1412 avatar Jun 04 '20 06:06 Paladin1412

这个问题有点严重,作者请问什么时候解决一下?

kesonn avatar Aug 07 '20 08:08 kesonn

image

kesonn avatar Aug 07 '20 15:08 kesonn

说明获取的子域名对应的解析IP不是正确的ip,这里已经做了判断了。这是oneforall脚本bug,可看oneforall修复记录

1

CTF-MissFeng avatar Aug 07 '20 15:08 CTF-MissFeng

可是这样下来,上千个子域名,只入库了2个子域。。。。

kesonn avatar Aug 07 '20 15:08 kesonn

我记得旧版没有这个问题的

kesonn avatar Aug 07 '20 15:08 kesonn

刚刚测试了下,并没有任何问题。解析子域名ip正常,你应该是扫描的泛解析的域名,解析对应的IP都是一样的不正确的。你可以换个普通域名试试

CTF-MissFeng avatar Aug 07 '20 15:08 CTF-MissFeng

谢谢大佬。楼主的报错,我也有 image

kesonn avatar Aug 08 '20 05:08 kesonn

猜测应该是输入的格式错误了,当你输入*.baidu.com时,程序会过滤*.为空。所以剩余baidu.com是正确的。但是输入错误了(如空格.什么的),所以输入待扫描时请检查输入的格式是否为.domain。

CTF-MissFeng avatar Aug 08 '20 08:08 CTF-MissFeng