Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Incorrect default jwt_tool.py configuration #392

Open
darkpills opened this issue Oct 3, 2024 · 1 comment · Fixed by #404
Open

[BUG] Incorrect default jwt_tool.py configuration #392

darkpills opened this issue Oct 3, 2024 · 1 comment · Fixed by #404
Assignees
Labels
bug Something isn't working coming soon This feature is ready and will be release with the next version under review Time to think about the need / implementation

Comments

@darkpills
Copy link

Describe the bug

Default config of jwt_tool has 2 bugs in /root/.jwt_tool/jwtconf.ini:

  • there is a wordlist missing:
[input]
wordlist = /opt/tools/jwt_tool/jwt-common111.txt

it should be:

[input]
wordlist = /opt/tools/jwt_tool/jwt-common.txt
  • Proxy is enabled by default:
[services]
proxy = 127.0.0.1:8080

And should not be for people not starting burp all the time (not my case):

[services]
#proxy = 127.0.0.1:8080

Steps To Reproduce

  1. Create a container
  2. Launch jwt_tool: jwt_tool.py -M at -rh "Authorization: eyJhbG...." -t https://mysite.com
  3. You should have both a crash at the middle because jwt-common111.txt does not exists and if burp is not started on port 8080 you may also have issues

Exegol Wrapper Version

[*] Exegol is currently in version v4.3.6
[*] Exegol Discord serv.: https://discord.gg/cXThyp7D6P
[*] Exegol documentation: https://exegol.rtfd.io/
[D] Pip installation: On ✔                                                                                                                                                                    
[D] Git source installation: Off 🪓                                                                                                                                                           
[D] Host OS: Linux (Kernel)                                                                                                                                                                   
[D] Arch: amd64                                                                                                                                                                               
[D] Raw arch: x86_64                                                                                                                                                                          
[D] Docker desktop: Off 🪓                                                                                                                                                                    
[D] Shell type: Linux                                                                                                                                                                         
[D] Last wrapper update check: 03/10/2024

Exegol container information

┌──────────────────┬──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┐
│             Name │ xxxx (Running)                                                                                                         │
│            Image │ full - v.3.1.4 (Up to date) (amd64)                                                                                          │
├──────────────────┼──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┤
│      Credentials │ root : xxxx                                                                                        │
│   Remote Desktop │ Off 🪓                                                                                                                       │
│    Creation date │ 30/09/2024 08:49                                                                                                             │
│      Console GUI │ On ✔ (X11 + Wayland)                                                                                                         │
│          Network │ host                                                                                                                         │
│         Timezone │ On ✔                                                                                                                         │
│ Exegol resources │ On ✔ (/opt/resources)                                                                                                        │
│     My resources │ On ✔ (/opt/my-resources)                                                                                                     │
│    Shell logging │ Off 🪓                                                                                                                       │
│       Privileged │ Off ✔                                                                                                                        │
│        Workspace │ Dedicated (/workspace)                                                                                                       │
│             Envs │ DISPLAY=:1                                                                                                                   │
│                  │ XDG_SESSION_TYPE=wayland                                                                                                     │
│                  │ XDG_RUNTIME_DIR=/tmp                                                                                                         │
│                  │ WAYLAND_DISPLAY=wayland-0                                                                                                    │
│                  │ _JAVA_AWT_WM_NONREPARENTING=1                                                                                                │
│                  │ QT_X11_NO_MITSHM=1                                                                                                           │
│                  │ EXEGOL_RANDOMIZE_SERVICE_PORTS=true                                                                                          │
│                  │ PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin                                                            │
│          Volumes │ (RW) /home/darkpills/xxxx ➡ /workspace                                                                                 │
│                  │ (RO) /home/darkpills/.local/pipx/venvs/exegol/lib/python3.11/site-packages/exegol/utils/imgsync/spawn.sh ➡ /.exegol/spawn.sh │
│                  │ (RO) /etc/localtime ➡ /etc/localtime                                                                                         │
│                  │ (RO) /etc/timezone ➡ /etc/timezone                                                                                           │
│                  │ (RW) /home/darkpills/.exegol/my-resources ➡ /opt/my-resources                                                                │
│                  │ (RW) /home/darkpills/.exegol/exegol-resources ➡ /opt/resources                                                               │
│                  │ (RW) /tmp/.X11-unix ➡ /tmp/.X11-unix                                                                                         │
│                  │ (RW) /run/user/1000/wayland-0 ➡ /tmp/wayland-0                                                                               │
└──────────────────┴──────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘

Exception

No response

Additional context

No response

Anything else?

No response

@darkpills darkpills added the bug Something isn't working label Oct 3, 2024
@QU35T-code
Copy link
Member

Nice catch ! Thanks for this bug ! It will be fixed soon !

@QU35T-code QU35T-code self-assigned this Oct 18, 2024
@QU35T-code QU35T-code added the under review Time to think about the need / implementation label Oct 18, 2024
@QU35T-code QU35T-code linked a pull request Oct 19, 2024 that will close this issue
@QU35T-code QU35T-code added the coming soon This feature is ready and will be release with the next version label Oct 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working coming soon This feature is ready and will be release with the next version under review Time to think about the need / implementation
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants