Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

host_header module runs for an incredible long time #2067

Open
aconite33 opened this issue Dec 9, 2024 · 4 comments
Open

host_header module runs for an incredible long time #2067

aconite33 opened this issue Dec 9, 2024 · 4 comments
Assignees
Labels
bug Something isn't working cant-reproduce Unable to replicate bug

Comments

@aconite33
Copy link
Contributor

aconite33 commented Dec 9, 2024

Describe the bug
host_header module waiting 15+ minutes on an operation

Expected behavior
Shoudln't take 15+ minutes to run

BBOT Command
Example: bbot -p preset.yml -t targets.txt -o ~/scans/

OS, BBOT Installation Method + Version
`OS: Arch Linux, Installation poetry shell, dev

BBOT Config

config:
  interactsh_server: redacted
  interactsh_disable: false
  interactsh_token: redacted
exclude_modules:
- bypass403
- columbus
- hunt
- iis_shortnames
- smuggler
- url_manipulation
- dastardly
flags:
- email-enum
- subdomain-enum
- web-thorough
modules:
- baddns
- badsecrets
- dotnetnuke
- gowitness
- httpx
- robots
- telerik
output_modules:
- csv
- json
- subdomains
- txt

Logs

[DBUG]     host_header:                                                                                                                                                                   
[DBUG]         - host_header.handle_event(HTTP_RESPONSE("{'url': 'http://redacted.com/', 'timestamp': '2024-12-09T01:07:24.209677114Z',...", module=httpx, tags={'ip-89-44-80-26', 'in-s
cope', 'dir', 'status-302', 'http-title-object-moved'})) running for 16 minutes, 11 seconds:
@aconite33 aconite33 added the bug Something isn't working label Dec 9, 2024
@aconite33
Copy link
Contributor Author

@liquidsec FYSA

@TheTechromancer
Copy link
Collaborator

TheTechromancer commented Dec 9, 2024

Can't reproduce the config issue. Starting bbot with the same preset excluded the host_header module as expected.

@aconite33
Copy link
Contributor Author

Disregard the config issue, self inflicted. host_header still runs for long periods of time however.

@aconite33 aconite33 changed the title host_header module runs while being blocked and runs for an incredible long time host_header module runs for an incredible long time Dec 10, 2024
@liquidsec
Copy link
Collaborator

I've tested against a several domains, I'm not seeing any particular signs up it getting stuck or anything. If you can isolate it down to a specific domain, let me know and I'll dig in deeper.

@liquidsec liquidsec added the cant-reproduce Unable to replicate bug label Dec 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working cant-reproduce Unable to replicate bug
Projects
None yet
Development

No branches or pull requests

3 participants