clincat/vulcat

vulcat可用于扫描Web端常见的CVE、CNVD等编号的漏洞，发现漏洞时会返回Payload信息。部分漏洞还支持命令行交互模式，可以持续利用漏洞

Hi there 👋

vulcat's Issues

Error

Hi
Do you have any idea why I get this error when the tool finishes scanning?

[17:17:45] [INFO] Scan is completed
root@Pentest vulcat % /Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/multiprocessing/resource_tracker.py:216: UserWarning: resource_tracker: There appear to be 1 leaked semaphore objects to clean up at shutdown
warnings.warn('resource_tracker: There appear to be %d '

Error during a scan

Hi,

Do you have any idea why I get these errors and how they can be fixed? I am using the latest version and the system is macbook

_[15:24:49] [INFO] Start scanning target https://website.com
[15:24:50] [INFO] The WAF detection for the current URL starts
[15:24:51] [INFO] Not found the WAF
[15:24:51] [INFO] Fingerprint identification the current URL, please wait...
Exception in thread Thread-76:
Traceback (most recent call last):
File "/Library/Frameworks/Python.framework/Versions/3.8/lib/python3.8/threading.py", line 932, in bootstrap_inner
self.run()
File "/Users/pentest/vulcat/lib/tool/thread.py", line 19, in run
self.result = self.target(self.clients)
File "/Users/pentest/vulcat/payloads/Spring/cve_2022_22965.py", line 72, in cve_2022_22965_scan
if ((res2.status_code == 200) and (randomStr in res2.text)):
AttributeError: 'NoneType' object has no attribute 'status_code'

string index out of range

这是啥问题

import error

why????python3 OS:kali

全局配置 Header 头默认配置问题

全局配置 config.yaml 的请求头配置了Content-Type: "application/x-www-form-urlencoded" 会导致 get 请求发不出去

vulcat/config.yaml

Line 17 in 5730e36

Content-Type: "application/x-www-form-urlencoded"