Skip to content
This repository has been archived by the owner on Feb 6, 2023. It is now read-only.

Adding support for disabling HTTP Plugins from command line #6

Merged
merged 1 commit into from
Aug 15, 2021

Conversation

xmco
Copy link

@xmco xmco commented Jul 20, 2021

TLTR

This merge request adds a new feature to disable the Web Plugins to be ran --disable-http-plugins or -w

Usecase

When you want to target a specific module, for example elasticsearch, you do not want to run http plugins on this specific port/service. There is no reason to find a phpinfo.php on an Elasticsearch server.
Running the HTTP plugins will add a lot more time to the scan and will produce false positive.

For example:

  • With HTTP plugins:
    time echo "212.129.152.206:9200"| l9filter transform -i hostport -o l9 | l9tcpid service --max-threads=100 --deep-http | grep elasticsearch | ./l9explorer service --explore-timeout=5s --max-threads=100

real 0m17.803s
user 0m0.017s
sys 0m0.015s

  • Without HTTP Plugins
    time echo "212.129.152.206:9200"| l9filter transform -i hostport -o l9 | l9tcpid service --max-threads=100 --deep-http | grep elasticsearch | ./l9explorer service --explore-timeout=5s --max-threads=100 --disable-http-plugins

real 0m6.710s
user 0m0.013s
sys 0m0.013s

With this new option, it will allow the user to run specific usecase (for example focus a single service and not inadequate plugins).

@gboddin gboddin merged commit cb43b98 into LeakIX:master Aug 15, 2021
@gboddin
Copy link
Contributor

gboddin commented Aug 15, 2021

Nice one, thank you !

I'll implement a solution to select plugins too since it can't be done from the file system anymore !

@gboddin gboddin mentioned this pull request Aug 15, 2021
xmco added a commit to xmco/l9explore that referenced this pull request Sep 1, 2021
Merge pull request LeakIX#6 from xmco/master
gboddin added a commit that referenced this pull request Dec 9, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants