Skip to content

Insecure requests raise issue #235

@rotleaf

Description

@rotleaf
root@kbin:~# arjun -u https://dev-api.x.[].com/vdesk/admin.php3
    _
   /_| _ '
  (  |/ /(//) v2.2.7
      _/      

[*] Scanning 0/1: https://dev-api.x.[].com/vdesk/admin.php3
[*] Probing the target for stability
Traceback (most recent call last):
  File "/root/.local/bin/arjun", line 7, in <module>
    sys.exit(main())
  File "/root/.local/pipx/venvs/arjun/lib/python3.10/site-packages/arjun/__main__.py", line 204, in main
    these_params = initialize(request, wordlist, single_url=is_single)
  File "/root/.local/pipx/venvs/arjun/lib/python3.10/site-packages/arjun/__main__.py", line 133, in initialize
    mem.var['healthy_url'] = response_1.status_code not in (400, 413, 418, 429, 503)
AttributeError: 'str' object has no attribute 'status_code'

  • in a url where arjun does this.
  • curl does something else.
root@kbin:~# curl https://dev-api.x.example.com/vdesk/admin.php3 
curl: (60) SSL: no alternative certificate subject name matches target host name 'dev-api.x.[].com'
More details here: https://curl.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions