Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to get back the 1 line verbosity like v1.5 #645

Closed
hang3r opened this issue Feb 12, 2023 · 19 comments · Fixed by #656
Closed

How to get back the 1 line verbosity like v1.5 #645

hang3r opened this issue Feb 12, 2023 · 19 comments · Fixed by #656

Comments

@hang3r
Copy link

hang3r commented Feb 12, 2023

Now it takes 3 lines for 1 result which to me is quite frustrating

image

@joohoi
Copy link
Member

joohoi commented Feb 12, 2023 via email

@hang3r
Copy link
Author

hang3r commented Feb 12, 2023

ffuf -w /opt/SecLists/Discovery/Web-Content/raft-medium-directories-lowercase.txt -u "http://google.com/FUZZ"

I just fuzz like I always do, but when I update to version 2 this happened. So I supposed this is a bug and there will be a fix soon?
Thank you for the quick response.

@riramar
Copy link

riramar commented Feb 14, 2023

Same problem here. AFAIK it's not possible to create filters like:

(HTTP code 400) OR (HTTP code 404) OR (HTTP code 301 AND Words 456)

So I was filtering out using egrep since the results were present in one line.
Now I'm getting 3 lines per result even with no scrapers.

@dhtzs
Copy link

dhtzs commented Feb 16, 2023

I'm experiencing the same issue. Seems like ffuf 2.0 now takes 3 lines for a result without using scrapers, which is frustrating indeed. Thanks for your work!

@vionde
Copy link

vionde commented Feb 17, 2023

Hope it will be fixed soon, but until that go install github.com/ffuf/ffuf@v1.5.0

Anyway, thanks for your work!

@0xGreen
Copy link

0xGreen commented Feb 23, 2023

Hi there,

Fuzzing like i used to do (no -scrapers)

ffuf -u http://example.com -w wordlist.txt -H 'Host: FUZZ.example.com' -mc all -fw 1288

but the output is really weird, like 3 lines for 1 hit.

Just like @C4lputer, too much for me as well.

image

@p0dalirius
Copy link
Contributor

Hi,

I've fixed the bug, proposed a pull request and wrote details on what was happening in #656

It now works awesomely on my end.

Best regards,

@cardassian-tailor
Copy link

Just wanted to say I also am having this issue and look forward to this being fixed. Thank you.

@0xCGonzalo
Copy link

0xCGonzalo commented Mar 24, 2023

Hi,

I've the same issue (previously updated the tool) at this date.

image

@p0dalirius
Copy link
Contributor

Hi,

I've the same issue (previously updated the tool) at this date.

image

If you need, the issue is fixed in the not-yet-merged #656

Best regards,

@0xCGonzalo
Copy link

It's work.

Thank you sir Rémi, @p0dalirius.

@0xdf223
Copy link

0xdf223 commented Mar 30, 2023

Yeah. This makes ffuf unusable for me. Would love to see it back in a compact line. Back to wfuzz until then.

@HeckerBirb
Copy link

The PR made by p0dalirius referenced here: #645 (comment) can be build locally by checking out their branch and following the steps for building from source.
Doing so will fix the problem described in here.

@AkechiShiro
Copy link

Given the nature of the issue and the PR fix that has been submitted, is this project a bit on hold/unmaintained right now ?

@p0dalirius
Copy link
Contributor

Hey,

Any progress on this @tomikoski @joohoi ?

Best regards,

joohoi added a commit that referenced this issue Apr 21, 2023
…645) (#656)

* Fixed incorrect len() in pkg/output/stdout.go::PrintResult()

* Fixed incorrect iteration on res.Input in pkg/output/stdout.go::prepareInputsOneLine(), Fixes #645

* Update CONTRIBUTORS.md

* Update pkg/output/stdout.go

---------

Co-authored-by: Joona Hoikkala <5235109+joohoi@users.noreply.github.com>
@joohoi
Copy link
Member

joohoi commented Apr 21, 2023

This fix has now been merged. Thanks @p0dalirius !

Given the nature of the issue and the PR fix that has been submitted, is this project a bit on hold/unmaintained right now ?

Nope, but I've been very busy recently. Now back to it.

@AkechiShiro
Copy link

AkechiShiro commented Apr 22, 2023

Thanks a lot @joohoi !

Maybe there should be a way for some serious/recurrent/trusted contributors to the project (after for instance 5/10/15 good PRs) that they could ask to be set as co-maintainers (or recommended by other users) in order to avoid this kind of situation, maybe @p0dalirius could want to have those rights since he fixed this bug pretty fast and he is maintaining quite a lot of tools on GitHub already, but I can't just speak for him like this, he might be very busy and not a right fit for that.

But it would be something to consider as an improvement for contributors/contributions, I'd guess !

@HeckerBirb
Copy link

I'd personally rather have to compile a pull request from sources rather than see random folks be allowed to simply merge changes to the main repo without vetting by the owner. This tool is primarily used by people who hack in one way or another. If all I takes is 15 good PRs before they can sneak in their own agenda.... 😂

@AkechiShiro
Copy link

AkechiShiro commented Apr 23, 2023

Yeah you're not incorrect @HeckerBirb, then the hacker would need to have a provable record of being someone "ethical" in the community, but this was just an idea, it can be expanded, or there should be at least 2 others contributors who have 100 PRs merged in vouching for him. But I understand it's risky.

Policies can be thought of or we can look how does anyone join the security team for Debian/ArchLinux and so on ? If someone bad got into those team, hell could ensue has well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.