Skip to content

Commit e52ce39

Browse files
committed
smuggler fix
1 parent 1567bad commit e52ce39

File tree

1 file changed

+6
-3
lines changed

1 file changed

+6
-3
lines changed

reconftw.sh

Lines changed: 6 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2366,13 +2366,16 @@ function smuggling() {
23662366
exit 1
23672367
}
23682368
cat $dir/.tmp/webs_all.txt | python3 smuggler.py -q --no-color 2>/dev/null | anew -q $dir/.tmp/smuggling.txt
2369+
mkdir -p $dir/vulns/smuggling/
2370+
find payloads -type f ! -name "README*" -exec mv {} $dir/vulns/smuggling/ \;
23692371
popd >/dev/null || {
23702372
echo "Failed to popd in ${FUNCNAME[0]} @ line ${LINENO}"
23712373
exit 1
2372-
} [ -s ".tmp/smuggling.txt" ] && cat .tmp/smuggling.txt | anew -q vulns/smuggling.txt
2373-
end_func "Results are saved in vulns/smuggling.txt" ${FUNCNAME[0]}
2374+
}
2375+
[ -s ".tmp/smuggling.txt" ] && cat .tmp/smuggling.txt | anew -q vulns/smuggling_log.txt
2376+
end_func "Results are saved in vulns/smuggling_log.txt and findings in vulns/smuggling/" ${FUNCNAME[0]}
23742377
else
2375-
end_func "Skipping Prototype Pollution: Too many webs to test, try with --deep flag" ${FUNCNAME[0]}
2378+
end_func "Skipping Request Smuggling: Too many webs to test, try with --deep flag" ${FUNCNAME[0]}
23762379
fi
23772380
else
23782381
if [[ $SMUGGLING == false ]]; then

0 commit comments

Comments
 (0)