Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Duplicate filter feature ideas (-fd, -filter-duplicates) #2014

Open
Xitro01 opened this issue Nov 27, 2024 · 2 comments
Open

Duplicate filter feature ideas (-fd, -filter-duplicates) #2014

Xitro01 opened this issue Nov 27, 2024 · 2 comments
Assignees
Labels
Type: Enhancement Most issues will probably ask for additions or changes.

Comments

@Xitro01
Copy link

Xitro01 commented Nov 27, 2024

Hello there,

I was surprised to see this feature implemented, as within my bug bounty hunting automation I used something similar like this:

subdomains_live.txt | ~/go/bin/httpx -sc -title -cl -wc -td -ip > subdomains_httpx_live.txt
subdomains_httpx_live.txt | awk -F"[" '!seen[$2, $3, $4, $5, $6]++ {print $1}' > subdomains_deduped.txt

Looking at how it is currently implemented, I have the feeling that a lot of potential good targets are going to be missed out on.
I believe there are many servers/applications out there that will respond exactly the same. Although there might be completely different content to be found.

So in my own automation I also included to look at the IP address. Because it is very likely if it is also from the same server IP address and the responses are exactly the same that it is actually just different subdomains pointing to the same webapplication.

With this I went from 5000 subdomains to just 500, which improves my chances to actually find something good. Because less is more in this case. Further analysis or automated scanning will take much less time (10% of the time) and you're not overwhelmed with all the duplicate results.

It might be a good idea to include this as well, or maybe there are others that have even better ideas.

@Xitro01 Xitro01 added the Type: Enhancement Most issues will probably ask for additions or changes. label Nov 27, 2024
@dogancanbakir dogancanbakir self-assigned this Nov 27, 2024
@GeorginaReeder
Copy link

Thanks so much for your feature request @Xitro01 ! We'll take a look into this :)

@dogancanbakir
Copy link
Member

Mentioning @Mzack9999 @ehsandeep for the discussion/brainstorming.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Enhancement Most issues will probably ask for additions or changes.
Projects
None yet
Development

No branches or pull requests

3 participants