httpx icon indicating copy to clipboard operation
httpx copied to clipboard

Httpx -path option with -screenshot don't work

Open 1br00 opened this issue 1 year ago • 2 comments

There is a bug here, when i use this command: subfinder -d | httpx -silent -path "/ba/investitori.php?id=%22%3E%3Cimg%20src=x%20onerror=alert(1);%3E" (path of vulnerable xss) -mc 200 -follow-redirects -screenshot

It wont screenshot the path, I got in my screenshot folder "index_screenshot.txt" there is no any png... so did you combied a -path option with -screenshot?

Here is full link: subfinder -d maglaj.ba | httpx -silent -path "/ba/investitori.php?id=%22%3E%3Cimg%20src=x%20onerror=alert(1);%3E" -mc 200 -follow-redirects -screenshot

1br00 avatar May 01 '23 09:05 1br00

@1br00 it is supposed to work with -path option and working for me.

$ echo google.com | httpx -silent -path "/ba/investitori.php?id=%22%3E%3Cimg%20src=x%20onerror=alert(1);%3E" -mc 200 -follow-redirects -screenshot

$ cat output/screenshot/index_screenshot.txt 
/Users/geekboy/Github/nuclei/v2/cmd/nuclei/output/screenshot/google.com/2c60e830c34e274ab5c52072cdd3e393eb016a6e.png https://google.com/ba/investitori.php?id=%22%3E%3Cimg%20src=x%20onerror=alert(1);%3E?id=%22%3E%3Cimg%20src=x%20onerror=alert(1)%3E (404 Not Found)

what's the actual error in your case?

ehsandeep avatar May 01 '23 09:05 ehsandeep

i got the same issue i used httpx to screenshot host but some screenshot are missing These missing screenshot files are listed in index_screenshot but the files are not in dir

RFHACKE avatar May 01 '23 12:05 RFHACKE

Same for me. hese missing screenshot files are listed in index_screenshot but the files are not in dir

llamaonsecurity avatar May 14 '23 11:05 llamaonsecurity

Quick update: I'm able to reproduce the issue mentioned above. The screenshots in index_screenshot.txt do not correspond with the files in the screenshot directory. Working on it...

dogancanbakir avatar May 26 '23 07:05 dogancanbakir