Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The "files finding" gives inconsistent result across platforms based on same set of files. #44

Open
simongcc opened this issue May 1, 2022 · 4 comments

Comments

@simongcc
Copy link

simongcc commented May 1, 2022

Description
When launch awscan to scan a folder, i.e. awscan wordpress, it sometimes check files and sometimes not, I tried same set of files in different hosting and local, gives inconsistent result.

Problem Reproduction Step
Local environment: MacOS 10.14.x terminal
PHP 7.4.22
awscan.phar
1 Create a dummy folder eg. wordpress
2 cd wordpress
3 wp core download # download a new set of WordPress
4 awscan wordpress OR awscan ./ # depends the PWD
It shows:
[===============================] 100% 1061/1061 [1 sec/0 sec]
Found 0 files to check

Then I test in hosting A ssh with same steps
Fedora release 31 (Thirty One)
PHP 7.4.29
awscan.phar
It shows:
[=============================> ] 100% 1060/1061 [3 min/0 sec] # The number seems wrong, should be 1061/1061

                                SUMMARY                                     

Files scanned: 1061
Files edited: 0
Files quarantined: 0
Files whitelisted: 0
Files ignored: 18

And I test in hosting B ssh with same steps
CentOS Linux release 7.9.2009 (Core)
PHP 7.4.29
awscan.phar
It shows the same result as in local.

So I am not sure what makes the difference. While they all detect there are 1061 files,
sometimes it scan and sometimes it does not.

@marcocesarato
Copy link
Owner

Hi, this is a known issue but don't worry it's just a visual issue.
It depends on how quickly the console updates the progress bar, in fact if you check the "Files scanned" they are "1061".

I try to take a look at it but it just depends a bit on how the console is managed visually by the system

@simongcc
Copy link
Author

simongcc commented May 1, 2022

I think the visual issue for the figures is ok and not critical

However, some environment cannot detect files is somewhat weird to me because for the same set of files, it gives 18 false positive which is fine because it gives feedback. But it did not give any response in other environment for the same set of files and said "Found 0 files to check". It really didn't check out.
So I think the behaviour is not normal.

@marcocesarato
Copy link
Owner

Have you checked the execute permissions or the read permissions of the executable?

@simongcc
Copy link
Author

simongcc commented May 8, 2022

Yes, they are under the same permission 755. Is there any further setup required?
I haven't set the permission for the "ok example above" neither. I just use the default.
For local testing environment, the permission is even loser and Mac is not case-sensitive also.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants