blst-security / cherrybomb

Stop half-done APIs! Cherrybomb is a CLI tool that helps you avoid undefined user behaviour by auditing your API specifications, validating them and running API security tests.

Home Page:https://www.blstsecurity.com/cherrybomb

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Passive mode fails with dns error

qrilka opened this issue · comments

Describe the bug
I tried to follow the README and invoking cherrybomb in passive mode results in dns error (why does it even go to that address?)

To Reproduce
Steps to reproduce the behavior:

  1. Install cherrybomb with cargo install cherrybomb
  2. Use `cherrybomb --file my-openapi.json --profile passive
  3. See error
$ cherrybomb --file my-openapi.json --profile passive

╭━━━┳╮╱╱╱╱╱╱╱╱╱╱╱╱╭╮╱╱╱╱╱╱╱╭╮
┃╭━╮┃┃╱╱╱╱╱╱╱╱╱╱╱╱┃┃╱╱╱╱╱╱╱┃┃
┃┃╱╰┫╰━┳━━┳━┳━┳╮╱╭┫╰━┳━━┳╮╭┫╰━╮
┃┃╱╭┫╭╮┃┃━┫╭┫╭┫┃╱┃┃╭╮┃╭╮┃╰╯┃╭╮┃
┃╰━╯┃┃┃┃┃━┫┃┃┃┃╰━╯┃╰╯┃╰╯┃┃┃┃╰╯┃
╰━━━┻╯╰┻━━┻╯╰╯╰━╮╭┻━━┻━━┻┻┻┻━━╯
╱╱╱╱╱╱╱╱╱╱╱╱╱╱╭━╯┃
╱╱╱╱╱╱╱╱╱╱╱╱╱╱╰━━╯       v1.0.1

Error: error sending request for url (https://cherrybomb.blstsecurity.com/tel): error trying to connect: dns error: failed to lookup address information: Name or service not known

Caused by:
    0: error trying to connect: dns error: failed to lookup address information: Name or service not known
    1: dns error: failed to lookup address information: Name or service not known
    2: failed to lookup address information: Name or service not known

Expected behavior
A table as in README should be shown

Desktop (please complete the following information):

  • OS: Ubuntu 22.04
  • Version: 1.0.1

I got it working by adding the ``--no-telemetry` flag.

Thanks, the project seems to be abandoned so I think we'll check out other alternatives

I had a similar impression 😞