From 6784e9428a87678089b93017f683db05f0b01a60 Mon Sep 17 00:00:00 2001 From: epi Date: Sat, 24 Oct 2020 06:43:33 -0500 Subject: [PATCH 1/4] added snap install option; awaiting approval from snapcraft --- README.md | 28 +++++++++++++++++++++++++++- snapcraft.yaml | 37 +++++++++++++++++++++++++++++++++++++ 2 files changed, 64 insertions(+), 1 deletion(-) create mode 100644 snapcraft.yaml diff --git a/README.md b/README.md index 62ddd63..6cf5c7d 100644 --- a/README.md +++ b/README.md @@ -61,6 +61,7 @@ This attack is also known as Predictable Resource Location, File Enumeration, Di ----------------- - [Installation](#-installation) - [Download a Release](#download-a-release) + - [Snap Install](#snap-install) - [Homebrew on MacOS and Linux](#homebrew-on-macos-and-linux) - [Cargo Install](#cargo-install) - [apt Install](#apt-install) @@ -127,9 +128,34 @@ Expand-Archive .\feroxbuster.zip .\feroxbuster\feroxbuster.exe -V ``` +### Snap Install + +Install using `snap` + +``` +sudo snap install feroxbuster +``` + +The only gotcha here is that the snap package can only read wordlists from a few specific locations. There are a few +possible solutions, of which two are shown below. + +If the wordlist is on the same partition as your home directory, it can be hard-linked into `~/snap/feroxbuster/common` + +``` +ln /path/to/the/wordlist ~/snap/feroxbuster/common +./feroxbuster -u http://localhost -w ~/snap/feroxbuster/common/wordlist +``` + +If the wordlist is on a separate partition, hard-linking won't work. You'll need to copy it into the snap directory. + +``` +cp /path/to/the/wordlist ~/snap/feroxbuster/common +./feroxbuster -u http://localhost -w ~/snap/feroxbuster/common/wordlist +``` + ### Homebrew on MacOS and Linux -Installable by Homebrew throughout own formulas: +Install using Homebrew via tap 🍏 [MacOS](https://github.com/TGotwig/homebrew-feroxbuster/blob/main/feroxbuster.rb) diff --git a/snapcraft.yaml b/snapcraft.yaml new file mode 100644 index 0000000..b2f3787 --- /dev/null +++ b/snapcraft.yaml @@ -0,0 +1,37 @@ +name: feroxbuster +version: git +summary: A simple, fast, recursive content discovery tool written in Rust +description: | + feroxbuster is a tool designed to perform Forced Browsing. + + Forced browsing is an attack where the aim is to enumerate and access resources that are not referenced by the web application, but are still accessible by an attacker. + + feroxbuster uses brute force combined with a wordlist to search for unlinked content in target directories. These resources may store sensitive information about web applications and operational systems, such as source code, credentials, internal network addressing, etc... + + This attack is also known as Predictable Resource Location, File Enumeration, Directory Enumeration, and Resource Enumeration. + + +base: core18 + +plugs: + etc-config: + interface: system-files + read: + - /etc/feroxbuster + dot-config: + interface: personal-files + read: + - $HOME/.config/feroxbuster + +parts: + feroxbuster: + plugin: rust + source: . + +apps: + feroxbuster: + command: bin/feroxbuster + plugs: + - etc-config + - dot-config + - network From 088b44bc721fc8d4ee665cbe1de3ebeeade6425a Mon Sep 17 00:00:00 2001 From: epi Date: Sat, 24 Oct 2020 07:00:35 -0500 Subject: [PATCH 2/4] added multi-arch instructions to snapcraft.yaml --- snapcraft.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/snapcraft.yaml b/snapcraft.yaml index b2f3787..c4f3212 100644 --- a/snapcraft.yaml +++ b/snapcraft.yaml @@ -23,6 +23,10 @@ plugs: read: - $HOME/.config/feroxbuster +architectures: + - build-on: amd64 + - build-on: i386 + parts: feroxbuster: plugin: rust From 260943f153a5c894475c713b1b945e40cc629e4a Mon Sep 17 00:00:00 2001 From: epi Date: Tue, 27 Oct 2020 20:35:30 -0500 Subject: [PATCH 3/4] updated plugs per snapcraft forum recommendation --- snapcraft.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/snapcraft.yaml b/snapcraft.yaml index c4f3212..c3ff890 100644 --- a/snapcraft.yaml +++ b/snapcraft.yaml @@ -14,11 +14,11 @@ description: | base: core18 plugs: - etc-config: + etc-feroxbuster: interface: system-files read: - /etc/feroxbuster - dot-config: + dot-config-feroxbuster: interface: personal-files read: - $HOME/.config/feroxbuster From dd4f3e0aacaeb9b63ae72d30ddf162db6ce534e6 Mon Sep 17 00:00:00 2001 From: epi Date: Wed, 28 Oct 2020 05:51:42 -0500 Subject: [PATCH 4/4] updated apps::plugs --- snapcraft.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/snapcraft.yaml b/snapcraft.yaml index c3ff890..2480045 100644 --- a/snapcraft.yaml +++ b/snapcraft.yaml @@ -36,6 +36,6 @@ apps: feroxbuster: command: bin/feroxbuster plugs: - - etc-config - - dot-config + - etc-feroxbuster + - dot-config-feroxbuster - network