escape-technologies / graphinder Goto Github PK

Describe the bug

Running graphinder on macOS intel x386.

No subfinder version found.

Desktop:

• OS: macOS
• Proc: intel i386

Describe the bug
Getting Python stacktrace after executing graphinder --help.

Traceback (most recent call last):
  File "/Users/paolo.delmundo/PyEnvironments/test/bin/graphinder", line 8, in <module>
    sys.exit(cli())
  File "/Users/paolo.delmundo/PyEnvironments/test/lib/python3.8/site-packages/graphinder/main.py", line 105, in cli
    main()
  File "/Users/paolo.delmundo/PyEnvironments/test/lib/python3.8/site-packages/graphinder/main.py", line 117, in main
    args: argparse.Namespace = argument_builder(argv)
  File "/Users/paolo.delmundo/PyEnvironments/test/lib/python3.8/site-packages/graphinder/main.py", line 33, in argument_builder
    action=argparse.BooleanOptionalAction,
AttributeError: module 'argparse' has no attribute 'BooleanOptionalAction'

To Reproduce
Steps to reproduce the behavior:
0. On Mac OS X 12.5.1, Python 3.8...

1. Install latest graphinder: pip install graphinder
2. Run graphinder --help
3. See Python stacktrace.

Expected behavior
This error message should not show up.

Desktop (please complete the following information):

• OS: Mac OS X 12.5.1
• Python Version: 3.8.3
• Graphinder version 1.8.1

Describe the bug
I'm running graphinder via docker against a flask graphql api running on localhost. The application appears to run successfully but generates no report or output. I'm not clear if this result is because there really are no vulnerabilities in my api or because I'm using graphinder incorrectly.

To Reproduce

Ran graphinder docker container first using:

sudo docker run -it --name graphinder escapetech/graphinder -d 127.0.0.1:5000/graphql

and then tried again adding:

sudo docker run -it --add-host=host.docker.internal:host-gateway --name graphinder escapetech/graphinder -d 127.0.0.1:5000/graphql

In both cases graphinder returned the following:

19:27:34,0756 - INF - graphinder - downloading subfinder...
19:27:35,0519 - INF - graphinder - extracting subfinder...
19:27:35,0584 - INF - graphinder - removing subfinder archive...
19:27:35,0585 - INF - graphinder - starting main routine..
19:27:35,0585 - INF - graphinder - 1 domains loaded.
19:27:35,0654 - INF - graphinder - fetching subdomains...
19:27:40,0664 - INF - graphinder - 127.0.0.1:5000 - found 1 subdomains.
19:27:40,0664 - INF - graphinder - 0 tasks generated.
19:27:40,0668 - INF - graphinder - 127.0.0.1:5000 has been scanned completly.
127.0.0.1:5000 - 0

Expected behavior
My concern was about the line 0 tasks generated. Is there anyway to see what tests graphinder ran? I tried:
sudo docker cp graphinder:/graphinder/results.json results.json as the documentation suggests but received:
Error: No such container:path: graphinder:/graphinder/results.json which makes me think I've configured the app incorrectly and nothing actually happened.

Desktop (please complete the following information):

• OS: Ubuntu 20.04.3 LTS (on wsl)
• Python Version: 3.9.5 but I'm running graphinder on the docker container
• Docker Version: 20.10.17, build 100c701
• Graphinder version: 1.8.0

Additional context
I developed a flask graphql api using graphene. I wanted to try and run some kind of fuzzing against it on my local machine before pushing it to deployment. Is graphinder the right tool for this?

Migrate to a 3.7 typing compliance version of graphinder.

looks like must use a difference percent, like 30 or 40 %

Add an option to scan a list of domains from a text file

After
git clone https://github.com/Escape-Technologies/graphinder.git
cd Graphinder
./install-dev.sh
and
poetry shell
do
nano /usr/local/bin/graphinder
and change the 1st line to:
#!/usr/bin/env python3

Use custom connector with higher ttl_cache.

https://docs.aiohttp.org/en/stable/client_advanced.html#tuning-the-dns-cache
~300 seconds should be enough. default is 10.