[FEATURE REQUEST] Implementation of scan time limits per individual url when fuzzing in parallel about feroxbuster HOT 12 CLOSED

Howdy!

Does --time-limit satisfy this? I'm guessing not but want to make sure

from feroxbuster.

Thanks for the prompt response, I do not believe so as --time-limit would cause the entire scan to stop if a bottleneck occurs which wouldn't be ideal.

from feroxbuster.

i didn't think it was what you were after, but had to ask, lol.

it's a good suggestion; ill take a look and see how feasible / required effort this is and report back

from feroxbuster.

also, just for clarification, you're asking for limits placed on an instance of feroxbuster (i.e. one of the parallel processes; at the URL level)? NOT time limits on each individual scan (folder level; each progress bar in a normal scan)

from feroxbuster.

choose carefully 😅 the URL level looks pretty easy to implement. haven't explored per-directory yet

from feroxbuster.

Correct for the former just limits at the URL level

from feroxbuster.

Ok, I think that's a pretty simple fix tbh, I'll play with it this evening or tomorrow and see if my thought works out

from feroxbuster.

pick up a new build from this pipeline and give it a shot; lmk how it goes

https://github.com/epi052/feroxbuster/actions/runs/7755538303

from feroxbuster.

Just tested it and even threw in one of the subdomains that is just a redirect to a login page seems to work flawlessly :), cat test.txt | ./testferoxbuster --time-limit 5m --parallel 4 --stdin --threads 6 -L 4 -w wordlist.txt -o test_feroxbuster_limit --json Have you had similar results in your testing?

from feroxbuster.

Glad to hear it!

Yea, it seemed to work afaict, but I strongly prefer the ticket creator to give fixes a run against their targets, since they're more familiar with what a solution should look like (from a user perspective).

Thanks for checking! I'll get this merged in sometime soon

from feroxbuster.

@all-contributors add @NotoriousRebel for ideas

from feroxbuster.

@epi052

I've put up a pull request to add @NotoriousRebel! 🎉

from feroxbuster.