This repository has been archived by the owner on Feb 6, 2023. It is now read-only.
Adding support for disabling HTTP Plugins from command line #6
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
TLTR
This merge request adds a new feature to disable the Web Plugins to be ran
--disable-http-plugins
or-w
Usecase
When you want to target a specific module, for example elasticsearch, you do not want to run http plugins on this specific port/service. There is no reason to find a
phpinfo.php
on an Elasticsearch server.Running the HTTP plugins will add a lot more time to the scan and will produce false positive.
For example:
time echo "212.129.152.206:9200"| l9filter transform -i hostport -o l9 | l9tcpid service --max-threads=100 --deep-http | grep elasticsearch | ./l9explorer service --explore-timeout=5s --max-threads=100
real 0m17.803s
user 0m0.017s
sys 0m0.015s
time echo "212.129.152.206:9200"| l9filter transform -i hostport -o l9 | l9tcpid service --max-threads=100 --deep-http | grep elasticsearch | ./l9explorer service --explore-timeout=5s --max-threads=100 --disable-http-plugins
real 0m6.710s
user 0m0.013s
sys 0m0.013s
With this new option, it will allow the user to run specific usecase (for example focus a single service and not inadequate plugins).