Auto-bail info?

[joaociocca]

Ok, so I'm working on a script to automate a few things, kinda like making my own "autorecon" version, because reasons.

One thing I just noticed is there's no information, unless at least -v on auto-bail being triggered. For example, this command:

feroxbuster --stdin --insecure --random-agent --thorough --auto-bail --wordlist /usr/share/SecLists/Discovery/Web-Content/common-and-portuguese.txt --json --output "ferox-target.json" < urls

Spits out this output:

When I ran it again with -v, I understood that there were no scans for the 3 URLs down there because auto-bail triggered. But without -v, there's no info at all. And since it sits at 0/x it gives the impression that no scan was even attempted.

Also, that print is the end result, so it also seems like the two URLs where it got a really good progress just stopped out of nothing.

Trying and retrying with different levels of verbosity also showed me that most of the errors were for timeout, but there was another error, one WRN 8.362 feroxbuster::scanner::requester Could not send FeroxResponse to output handler: channel closed.

Maybe, when auto-bail is on, we could have some of this info exposed on bail being triggered and why?

[joaociocca]

also, the "auto bail" on the splash is misaligned, missing a second space after its emoji =p

[epi052]

WRN      1.451 feroxbuster::scanner::requester too many Errors (25) triggered AutoBail Policy on running      http://127.0.0.1:8000/

right now i believe the only indicator is something like this in the logs; are you suggesting adding something in the primary output?

[joaociocca]

yep. Because unless we're actively looking for trouble, we won't turn verbose on, so would be nice to get a heads up, you know?

[epi052]

vokoscreenNG-2023-01-24_15-48-45.mp4

[joaociocca]

OHHHH I loved that new tuned rate message with the hand! =D

[epi052]

[joaociocca]

this is (chef's kiss) perfect!

[epi052]

glad you like them! these aren't final, but are pretty close to what'll land. I'll update again soon