speed things up
drforbin opened this issue · comments
the new version seems to take a while to scan!
Anyway to speed things up?
Hi @drforbin,
If you run AutoRecon with -vv you'll be able to see which plugins are taking a long time (they get reported every 60s). Please can you let me know which ones are taking a long time and then I can let you know how to speed them up.
Pretty sure it's feroxbuster.
I just upgraded and it's taking over 2 hours per FULL scan.
I'm going to be taking OSCP and I can't wait 2 hours per box.
So by default AutoRecon sets 10 threads for directory busting (which is also the tool's default). It also uses three wordlists.
You can change both these options either on the command line or in a config file.
--dirbuster.threads=50
--dirbuster.wordlist=/path/to/wordlists
Or add the following to your config file:
[dirbuster]
threads = 50
wordlist = "/path/to/wordlist"
The wordlist option can also be an array of multiple wordlists in the config file.
I know you took the OSCP. What config do you suggest?
Great tool by the way
I would recommend 50 threads and maybe choose a wordlist like big.txt from seclists or even directory-list-2.3-medium.
Ideally you can experiment with multiple options in the lab and see what happens.
Only problem is I was using 50 threads and was getting errors. Platform was HTB,
Then reduce it to something lower. Try 30, see if that generates errors. It's likely that the OSCP exam will be a little more stable than HTB though. Ultimately you can always re-run the command manually during the exam anyway.
yep...thank you very much.
Nice new version as well
where is the config file to adjust all this?
The default one is in ~/.config/AutoRecon/config.toml, but if there's one in the current directory, AutoRecon will use that. You can also specify one on the command line with -c
thanxs for your help.
How many (v's) can I pass for verbose?
just putting threads = 50 and giving path to wordlists will speed the scans up ?
its taking more than 2 hours to scan.
how can i disable nikto scans ?
@shariq-jgi There's no foolproof way to speed scans up. You have to adjust according to the environment you're on. 50 threads can be a decent amount for most web servers but sometimes it's too much. Remember the larger the wordlist and the more extensions you use, the longer the scan will be.
Also nikto doesn't run at all, it's a manual scan, not automated.
Okay thanks noted.
I was just worried about the exam
Going to give in 2 days
Some scans are taking 2 hours.