0xhjk/dumpall

一款信息泄漏利用工具，适用于.git/.svn/.DS_Store泄漏和目录列出

Hi there 👻

一个自由而无用的人。

喜欢旅行，偶尔写写文章和代码。

微信公众号：黑星实验室

dumpall's Issues

关于在windows下tempfile创建临时文件无权限问题

linux无问题

原谅我用windows……
试了下提示
PermissionError: [Errno 13] Permission denied: 'C:\Users\XXX\AppData\Local\Temp\tmpzjxpx0jr'

查了下https://blog.csdn.net/leo881205/article/details/79274836
大概这个问题。
望修复

还有就是输出的时候可不可以不显示完整路径，类似李姐姐那样子输出感觉挺好……

感谢

RuntimeError: HTTPS TLS ERROR

Filepath: \dumpall-master\dumpall\dumper.py

async def fetch(self, url: str, times: int = 3) -> tuple:
        
        conn=aiohttp.TCPConnector(ssl=False)
        async with aiohttp.ClientSession(connector=conn) as session:
        
        ......    

don't aiohttp.TCPConnector(verify_ssl=False)

Code unrecognized

http://www.XXXX.com/oss/static/%E7%BA%A2%E5%A1%94%E6%9C%9F%E8%B4%A7%E5%BF%AB%E6%9C%9F%E4%BA%A4%E6%98%93%E8%BD%AF%E4%BB%B6V3.exe

'utf-8' codec can't decode byte 0xff in position 12: invalid start byte

能否支持加载本地.DS_Store文件？

能否支持加载本地.DS_Store文件？，有些是在自己浏览器能下载.DS_Store文件，但是使用监测工具就下载不下来。

dumpall\addons\dsdumper.py 第26行少写一个* 导致.DS_Store类型 跑不起来

原文
super(Dumper, self).init(url, outdir, *kwargs)

改成这样就跑起来了
super(Dumper, self).init(url, outdir, **kwargs)

Remove the bundled modules

The directory contains part of other Python modules. This should be removed and the modules in question mentioned as requirement.

This is an issue for the packaging. I will have a hard time to explain to the reviewer why the modules are shipped as part of dumpall when they are available from PyPI.

Thanks

AttributeError: module 'asyncio' has no attribute 'run'

AttributeError: module 'asyncio' has no attribute 'run'

下载.idea出现'Dumper' object has no attribute 'headers'

师傅我在下载.idea文件泄露的时候都有这个'Dumper' object has no attribute 'headers'，然后就停在那里了

AttributeError: 'NoneType' object has no attribute 'name'

Failed https://xxxxxxxxxx/.git/index
(ConnectionKey(host='xxxxxxxxxx', port=443, is_ssl=True, ssl=None, proxy=None, proxy_auth=None, proxy_headers_hash=None), SSLCertVerificationError(1, "[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'xxxxxxxxxx'. (_ssl.c:1056)"))
Failed [0] https://xxxxxxxxxx/.git/index
("'NoneType' object has no attribute 'name'",)

有个bug 当https 为错误的时候的 报错

1

Runtime Error

'ulimit' 不是内部或外部命令，也不是可运行的程序

为什么只有一个输出的文件夹，里面没有内容，运行不出来

mac M1 python3.9报错

Traceback (most recent call last):
File "/Volumes/tool/01hvv_tool/dumpall/dumpall.py", line 19, in
dumpall.main()
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/click/core.py", line 829, in call
return self.main(*args, **kwargs)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/click/core.py", line 781, in main
with self.make_context(prog_name, args, **extra) as ctx:
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/click/core.py", line 700, in make_context
self.parse_args(ctx, args)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/click/core.py", line 1048, in parse_args
value, args = param.handle_parse_result(ctx, opts, args)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/click/core.py", line 1630, in handle_parse_result
value = invoke_param_callback(self.callback, ctx, self, value)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/click/core.py", line 123, in invoke_param_callback
return callback(ctx, param, value)
File "/Library/Frameworks/Python.framework/Versions/3.9/lib/python3.9/site-packages/click/decorators.py", line 295, in callback
raise RuntimeError("Could not determine version")
RuntimeError: Could not determine version

No module named 'pyquery'

Traceback (most recent call last):
File "/usr/local/bin/dumpall", line 8, in
sys.exit(main())
File "/usr/local/lib/python3.8/dist-packages/click/core.py", line 1157, in call
return self.main(*args, **kwargs)
File "/usr/local/lib/python3.8/dist-packages/click/core.py", line 1078, in main
rv = self.invoke(ctx)
File "/usr/local/lib/python3.8/dist-packages/click/core.py", line 1434, in invoke
return ctx.invoke(self.callback, **ctx.params)
File "/usr/local/lib/python3.8/dist-packages/click/core.py", line 783, in invoke
return __callback(*args, **kwargs)
File "/usr/local/lib/python3.8/dist-packages/dumpall/init.py", line 83, in main
start(url, outdir, force)
File "/usr/local/lib/python3.8/dist-packages/dumpall/init.py", line 39, in start
addon = importlib.import_module(".addons.idxdumper", package)
File "/usr/lib/python3.8/importlib/init.py", line 127, in import_module
return _bootstrap._gcd_import(name[level:], package, level)
File "", line 1014, in _gcd_import
File "", line 991, in _find_and_load
File "", line 975, in _find_and_load_unlocked
File "", line 671, in _load_unlocked
File "", line 848, in exec_module
File "", line 219, in _call_with_frames_removed
File "/usr/local/lib/python3.8/dist-packages/dumpall/addons/idxdumper.py", line 13, in
from pyquery import PyQuery as pq
ModuleNotFoundError: No module named 'pyquery'

__init__() takes 3 positional arguments but 6 were given

Module: dumpall.addons.dsdumper

('init() takes 3 positional arguments but 6 were given',)
Traceback (most recent call last):
File "/Users//dumpall/dumpall/init.py", line 41, in start
dumper = addon.Dumper(url, outdir, proxy=proxy, force=force, debug=debug)
File "/Users//dumpall/dumpall/addons/dsdumper.py", line 26, in init
super(Dumper, self).init(url, outdir, *kwargs)
TypeError: init() takes 3 positional arguments but 6 were given

系统：10.15.7
环境：Python 3.9.12

(13, 'Permission denied')

(13, 'Permission denied')
报这个错误

RuntimeError: Event loop is closed

环境：Windows 、python3.8

运行不出来

这是什么情况，我很异或

运行报错，无法得到结果

运行完毕显示
“'ulimit' 不是内部或外部命令，也不是可运行的程序
或批处理文件。Module: dumpall.addons.dsdumper”
然后结果是报404的，upload/file upload/file里面什么也没有