[BUG] Output flooding on some specific case

[c0rv4x]

Describe the bug

Hey!

Running scan against scanfactory.io results in the terminal being flooded with enormous amount of data.

I am not sure of what is happenning here. Looks like it starts recursive bruteforcing and with that outputs every single request it has.

This problem is seen not only on scanfactory website but this is the first website that has the described problem and conscent to scan them.

To Reproduce

Steps to reproduce the behavior:

1. Run feroxbuster -w ~/wordlists/no-extensions.txt -k --url https://scanfactory.io

Expected behavior

Expected to not have huge output of every request being sent

Environment (please complete the following information):

Arch linux
Feroxbuster: v2.3.3
Alacritty (but same in urxvt)

[epi052]

Can you check if this is the problem/solution?

https://epi052.github.io/feroxbuster-docs/docs/faq/progress-bars/

[c0rv4x]

@epi052 thanks for a quick answer!

Not really. Maximum width doesn't help. Also putting -q doesn't fix the problem

[epi052]

@c0rv4x not a problem. It looks like you may own the domain, if so, am i free to scan and see if i can reproduce what you're seeing?

[c0rv4x]

@epi052 yes. My email is anatoly at scanfactory dot io in case you want a verification from me

[epi052]

good deal, i can take a look this evening and let you know.

It feels like a terminal emulator / rendering problem, but I'll check it out.

[c0rv4x]

Thought so too. But the same issue in urxvt and alacritty. Thanks anyway, will wait for your tests

[epi052]

Scanning from my machine looks normal

[epi052]

installed alacritty and ran it from that terminal as well, still looks good

[epi052]

installed rxvt-unicode and ran a third scan, still looks good.

Do you have a different VM / OS to try from?

[c0rv4x]

Super weird! I will give it a try and let you know. Thanks for chechkin it out

I am thinking this might be zsh for some reason

[c0rv4x]

I have just tested on MacBook and it works fine. I am trying to make it work on my arch linux as it is my main device.

I have tried using bash and no Xorg environment and the issue is still there. Wow. Do you have any advice on what to move further with the dissecting this issue?

[epi052]

the terminal emulator, the font, and the width of your terminal vs. the width of your output are the three primary suspects in my mind.

Do you use a PS1? Is it colored? If so, try exporting an ascii PS1

export PS1='> '

This shouldn't affect output that isn't on the same line as your prompt, but we can test it for funsies (i've seen terminal emulators behave poorly with colored PS1's when the line becomes too long, even if after rendering the ansi escape codes, it doesn't look long at all).

You could post up the output of env.

Have you tried something like xterm (i.e. a more traditional terminal emulator)?

Can you try changing the font in one of your emulators to NotoColorEmoji?

[c0rv4x]

OMG I just figured out.

In my wordlist I had the following entries:

.htaccess/
.htpasswd/

When a website had 403 on ht.* looks like it just went recursive scan on those dirs. I just deleted those and now it is fine. Pretty weird tho.

Sorry for the hassle and thanks for your help

[epi052]

no worries, glad you got it resolved. closing this issue