Giters

xmendez / wfuzz

Web application fuzzer

Home Page:http://wfuzz.io

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

wfuzz isnt working at all

0xatom opened this issue · comments

commented

Hello, today i tried to use wfuzz and it says an error message and then stops working with this error:

$ wfuzz -c -z file,/test/wordlist.txt http://$ip/FUZZ
 /usr/lib/python3/dist-packages/wfuzz/__init__.py:34: UserWarning:Pycurl is not compiled against Openssl. Wfuzz might not work correctly when fuzzing SSL sites. Check Wfuzz's documentation for more information.

^C /usr/lib/python3/dist-packages/wfuzz/wfuzz.py:80: UserWarning:Finishing pending requests...

I tried to uninstall it and install it again but stills like that. It's a really important tool for me, i hope to get a fix.

commented

Hi,

Have you checked following the instructions detailed at https://wfuzz.readthedocs.io/en/latest/user/installation.html#installation-issues

You can also use the docker image.

Cheers

commented

The manual instructions in the documentation are a bit messy in my opinion but in the end they have just worked on my up-to-date kali.
You should start from a directory like this:
root@kali:~/python-pycurl-openssl/pycurl-7.43.0.6# ls AUTHORS COPYING-LGPL debian examples Makefile PKG-INFO python RELEASE-NOTES.rst setup.cfg src winbuild ChangeLog COPYING-MIT doc INSTALL.rst MANIFEST.in pycurl.egg-info README.rst requirements-dev.txt setup.py tests winbuild.py
Then:
sed -i 's/libcurl4-gnutls-dev/libcurl4-openssl-dev/g' debian/control
sed -i 's/rm -f/rm -rf/g' debian/rules
sudo PYCURL_SSL_LIBRARY=openssl; dpkg-buildpackage -rfakeroot -b -uc -us
after a lot of compiling...
root@kali:~/python-pycurl-openssl# sudo dpkg -i python3-pycurl_7*.deb
et voilá in a new tab:
wfuzz

commented

Hi,
The wfuzz documentation is referring to a wrong(maybe old) openssl version.
I needed to run:
PYCURL_SSL_LIBRARY=openssl LDFLAGS="-L/opt/homebrew/Cellar/openssl@3/3.1.0/lib" CPPFLAGS="-I/opt/homebrew/Cellar/openssl@3/3.1.0/include" pip install --no-cache-dir pycurl

commented

Hi,
The wfuzz documentation is referring to a wrong(maybe old) openssl version.
I needed to run:
PYCURL_SSL_LIBRARY=openssl LDFLAGS="-L/opt/homebrew/Cellar/openssl@3/3.1.0/lib" CPPFLAGS="-I/opt/homebrew/Cellar/openssl@3/3.1.0/include" pip install --no-cache-dir pycurl

Thanks, this made wfuzz work but with the openssl warning. It previously said pycurl was not installed and would not run. However, when I am checking pycurls version in python, it says that it is compiled against LibreSSL/3.3.6 (which I find double weird as it is not openSSL, nor version 3.1.1). wfuzz seems to work fine against https targets, but generate the warning that pycurl is not compiled against openSSL. I copy/pasted your command and the only change I had to do was change the openssl version from 3.1.0 to 3.1.1 as that was the version installed on my system. Do you also get the warning that wfuzz isn't compiled against openSSL? And how can I remove it?

I am running on a MacBook Air M1 with the latest OS X installed.

  • Tom