ph33rr/cirrusgo

A fast tool to scan SAAS,PAAS App written in Go

Hi there 👋

cirrusgo's Issues

Unsupported Protocol Scheme

Hello

Thank you tremendously for the tool
upon running on my target I came across this issue

Tested on Mac / Ubuntu Same issue

An Error Occured invalid URL escape "%Ma"

run cirrusgo salesforce -u https://aura.co -cw

[WRN] Use with caution. You are responsible for your actions
[WRN] Developers assume no liability and are not responsible for any misuse or damage.
[VLN] https://aura.co/aura Vulnerable
[VLN] https://aura.co/sfsites/aura Vulnerable
[vulnerable Endpoint] [/aura,/sfsites/aura]
2022/07/29 23:08:12 An Error Occured invalid URL escape "%Ma"

error:

2022/07/29 23:08:12 An Error Occured invalid URL escape "%Ma

Go Version
go version
go version go1.18 linux/amd64

OS

Ubuntu 18

Failed to get AuraContext

Hi, I've got this error when running, why ?

cirrusgo salesforce -u https://xx -cw

[VLN] https://xx/aura Vulnerable
[VLN] https://xx/aura Vulnerable
[VLN] https://xx/aura Vulnerable
[vulnerable Endpoint] [/aura,/s/sfsites/aura,/sfsites/aura]
[FTL] Failed to get AuraContext

Thank you!

options -p (proxy) and -o (output) not working

Hello

i have tried the -p option for proxy and -o for output but it doesn't work. I have also used httptoolkit to intercept requests but no requests are coming through either

need user object write poc with all fields UREGENTLY

Hi, please I need user object write poc with all fields.
They asked me for that, PLEASE :(

Required fields are missing: [Username, LastName, Email, Alias, TimeZoneSidKey, LocaleSidKey, EmailEncodingKey, ProfileId, LanguageLocaleKey]

i know it's not the right place, sorry for that !