Removed the wkhtmltoimage plugin as this is no longer compatible with Kali Linux.
Fixed bug which crashed AutoRecon if a plugin check() function failed. Now AutoRecon exits gracefully.
Added --ignore-plugin-checks which will ignore failed plugin checks but also disable said plugins at runtime.
Fixed bug in dirbuster and vhost-enum plugins. Redirections are now followed. This could potentially cause issues down the line but for now it seems to work.
Have re-enabled nikto as an auto-run plugin, however several constraints are in place to ensure it doesn't take too long.
A few manual plugin updates (command formatting etc.)
Fixed bug where processes were left running after AutoRecon is cancelled and/or times out.
Status messages now include PIDs of running processes if verbosity >= 2.
Closes#183Fixes#184
Plugins & wordlists are now stored in ~/.local/share/AutoRecon.
Default config / global config files are still stored in ~/.config/AutoRecon.
Removed feature which used the cwd's config.toml, global.toml, and plugins dir if detected.
Fixed bug which wouldn't generate combined reports in some cases.
Using --disable-sanity-checks will allow AutoRecon to run even if target(s) were unresolvable (one or more targets must be valid however).
Added a new plugin for ajp.
Return value of check() will deregister the plugin if it is False.
Updated several plugins which use check() to return False where appropriate.
Added "Report" class to protected classes.
SMB Vuln plugin now runs all smb-vuln-* scripts in one command instead of only three in separate commands. This duplicates some work from the regular Nmap SMB scan but not too much. Manual command will only scan smb-vuln-* scripts that are marked as "dos".
The plugin function get_option() now has an optional default value which is returned in the event that no option was provided (either by the plugin as a default when creating the option, or by the end user).
* Update ldap-search.py
Hi Tib3rius
ldapsearch has updated syntax.
-h and -p have been Deprecated in favor of -H
New syntax is -H ldap://<IP>:<PORT>
* Version update.
Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
-mpti / --max-plugin-target-instances can be used to control the number of instances of a plugin that can run concurrently per target.
-mpgi / --max-plugin-global-instances can be used to control the number of instances of a plugin that can run concurrently (globally).
Plugins can now call info(), warn(), and error() functions from their service / target object which will properly prefix the plugin name, etc.
A new subdomain enumeration plugin using gobuster has been developed.
* Fix small bug from curl 404 output
This PR fixes a small bug from when `curl` receives an `HTTP 404` from the web server and the error code is non-zero (in this case `22`). This handles that case in the if statement. There may other error codes that `curl` throws, HTTP-wise, that you may want to catch in the future as well but I didn't run into them.
* Update main.py
Fixed small logic bug.
Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
Changed the --create-port-dirs option to --no-port-dirs (making their creation default).
Added -T4 to the default nmap commands.
Adjusted config.toml accordingly.
* fix issues and add function
* Fix smbclient
* Reverted some minor changes.
ffuf's -noninteractive flag does function. Unsure of why it was removed.
smbclient bug confirmed, but added -I back in and put // before the address since that appears to be the correct syntax.
Renamed CurlKnowSecurity to CurlKnownSecurity.
Co-authored-by: Tib3rius <48113936+Tib3rius@users.noreply.github.com>
MrMatch246
Tib3rius
Sophie Brun
Asim Aziz
malet
goproslowyo
Heino Sass Hallik
Tim Bentley