HI p0dalirius, Once again I am here to bother you, I am trying to as

Hey <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url=

HI Brother, Thanks a lot for quick response <div class="snippet-

[bug] https target is not working about apachetomcatscanner HOT 3 CLOSED

p0dalirius commented on May 17, 2024

[bug] https target is not working

from apachetomcatscanner.

Comments (3)

p0dalirius commented on May 17, 2024

The root cause of this lies in a few hardcoded URLs in the functions:

https://github.com/p0dalirius/ApacheTomcatScanner/blob/84b8b5eaf8bd5b4c832733bf8a691c6d782c6ac8/apachetomcatscanner/utils/scan.py#L36-37

I'm fixing it and publishing next release 2.3.2

from apachetomcatscanner.

p0dalirius commented on May 17, 2024

Hey @s3curityb3ast

ApacheTomcatScanner release 2.3.2 now supports both HTTP and HTTPs by default. But you can still choose to use only one of them with these options:

  --only-http           Scan only with HTTP scheme. (default: False, scanning with both HTTP and HTTPs)
  --only-https          Scan only with HTTPs scheme. (default: False, scanning with both HTTP and HTTPs)

I've also added an option to support self signed certificates

  --no-check-certificate        Do not check certificate. (default: False)

Best regards,

from apachetomcatscanner.

s3curityb3ast commented on May 17, 2024

HI Brother,

Thanks a lot for quick response

apachetomcatscanner -v -C -tt xxx.xxx.xxx.xxx -tp 443 --no-check-certificate --only-https 
Apache Tomcat Scanner v2.3.2 - by @podalirius_

[debug] Loading targets from --target options
[+] Targeting 1 ports on 1 targets
[+] Searching for Apache Tomcats servers on specified targets ...
[>] [Apache Tomcat/8.5.13] on xxx.xxx.xxx.xxx:443 (manager:not accessible)   
[+] All done

but still confuse, I am not getting any vuln/CVE's status. is this suppose to be like this or tomcat 8.5.13 dont have any vulns sorry getting lazy to check in CVE Details..

from apachetomcatscanner.

Recommend Projects