Ai Ho (j3ssie)

Results 37 comments of Ai Ho (j3ssie)

@rverton did you check out this awesome lib https://github.com/chromedp/chromedp

I might consider adding this in the future then, just didn't have time to implement it now

I have already made a example on DNS in https://github.com/osmedeus/osmedeus-workflow/blob/main/general/probing.yaml#L29-L37 https://github.com/osmedeus/osmedeus-workflow/blob/main/general/probing.yaml#L91-L96 You can always custom the workflow to do the same with HTTP content in the fingerprint module.

Thank you for reporting I will look into it. I just put the source code of web UI at https://github.com/osmedeus/osm-ui if you want to take a look.

I'm not sure maybe use `gospider -s http://testphp.vulnweb.com -B` for basic crawl then or put the timeout command before it to make sure everything fine like `timeout 15m gospider ...`

Hi @sumgr0, It's impossible to use nuclei template in **Jaeles** because both tools have very different YAML config which is I strongly believe Jaeles stronger in this case. The only...

Thank you for the feedback. I've just updated some fuzz signature from my config to resolve that issue https://github.com/jaeles-project/jaeles-signatures/blob/master/fuzz/open-redirect/open-redirect-param-base.yaml https://github.com/jaeles-project/jaeles-signatures/blob/master/fuzz/open-redirect/open-redirect-param.yaml Let me know if you have any issue.

Oops, forget to update the path one. It should be like this one. ![Screenshot from 2020-04-15 11-06-51](https://user-images.githubusercontent.com/23289085/79297828-86218b80-7f09-11ea-85f5-b25bede3dd3e.png)

That's mean built-in regex for passive detection matched. You can look at it detail from here https://github.com/jaeles-project/jaeles/blob/master/core/passive.go#L126 The reason you're not get the same result from Burp because Burp Unpack...

Because you send it twice (or select 2 same requests to send) so that's work as intended 🤣. I got your point but I think users need to filter unique...