Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bypass403 Failure Threshold #1069

Closed
TheTechromancer opened this issue Feb 6, 2024 · 1 comment
Closed

Bypass403 Failure Threshold #1069

TheTechromancer opened this issue Feb 6, 2024 · 1 comment
Assignees
Labels
enhancement New feature or request

Comments

@TheTechromancer
Copy link
Collaborator

When bypass403 encounters a downed/slow web server, it can spend a very long time (10+ minutes) on a single host:

2024-02-06 18:57:50,249 [INFO] bbot.scanner scanner.py:900 hideous_howard: No events in queue
2024-02-06 18:58:05,251 [INFO] bbot.scanner scanner.py:900 hideous_howard: Modules running (incoming:processing:outgoing) bypass403(374:1:0)
2024-02-06 18:58:05,252 [INFO] bbot.scanner scanner.py:900 hideous_howard: Events produced so far: DNS_NAME: 2500, OPEN_TCP_PORT: 792, URL: 619, PROTOCOL: 606, WAF: 541, FINDING: 416, TECHNOLOGY: 172, IP_ADDRESS: 168, ASN: 165, VULNERABILITY: 115, EMAIL_ADDRESS: 46, SCAN: 1, ORG_STUB: 1
...
2024-02-06 19:21:20,626 [INFO] bbot.scanner scanner.py:900 hideous_howard: No events in queue
2024-02-06 19:21:35,629 [INFO] bbot.scanner scanner.py:900 hideous_howard: Modules running (incoming:processing:outgoing) bypass403(374:1:0)
2024-02-06 19:21:35,630 [INFO] bbot.scanner scanner.py:900 hideous_howard: Events produced so far: DNS_NAME: 2500, OPEN_TCP_PORT: 792, URL: 619, PROTOCOL: 606, WAF: 541, FINDING: 416, TECHNOLOGY: 172, IP_ADDRESS
: 168, ASN: 165, VULNERABILITY: 115, EMAIL_ADDRESS: 46, SCAN: 1, ORG_STUB: 1

When looping through signatures, we should abort if too many requests have failed.

@TheTechromancer TheTechromancer added the enhancement New feature or request label Feb 6, 2024
@liquidsec
Copy link
Collaborator

added in #1070

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants