Package: wfuzz
Version: 3.1.0-1
Severity: important
X-Debbugs-Cc: debian.fm...@guillaume-d.info
Dear maintainer(s),
wfuzz seems to needs python3-distutils.
However the dependency is missing from "Depends:".
It probably only work for people who have python3-full and/or
python3-all installed, but both are optional packages,
and lots of other Python packages work without them installed.
The Pycurl warning below maybe also needs addressing, but
that would be another bug.
See below for some logs:
$ sudo apt remove python3-distutils
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
Package 'python3-distutils' is not installed, so not removed
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
$ wfuzz -dry-run -w /usr/share/wfuzz/wordlist/general/test.txt -u
http://127.0.0.1/FUZZ
/usr/lib/python3/dist-packages/wfuzz/__init__.py:34:
UserWarning:Pycurl is not
compiled against Openssl. Wfuzz might not work correctly when fuzzing SSL
sites. Check Wfuzz's documentation for more information.
libraries.FileLoader: CRITICAL __load_py_from_file. Filename:
/usr/lib/python3/dist-packages/wfuzz/helpers/../plugins/payloads/hexrand.py
Exception, msg=cannot import name 'util' from 'distutils'
(/usr/lib/python3.9/distutils/__init__.py)
[...just more of the same with all other payload plugins...]
libraries.FileLoader: CRITICAL __load_py_from_file. Filename:
/usr/lib/python3/dist-packages/wfuzz/helpers/../plugins/payloads/shodanp.py
Exception, msg=cannot import name 'util' from 'distutils'
(/usr/lib/python3.9/distutils/__init__.py)
/usr/lib/python3/dist-packages/wfuzz/wfuzz.py:78: UserWarning:Fatal
exception:
Requested plugin file. Error: 'No plugins found!'
$ sudo apt install python3-distutils
Reading package lists... Done
Building dependency tree... Done
Reading state information... Done
The following additional packages will be installed:
python3-lib2to3
The following NEW packages will be installed:
python3-distutils python3-lib2to3
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
[...]
Setting up python3-lib2to3 (3.9.2-1) ...
Setting up python3-distutils (3.9.2-1) ...
$ wfuzz -dry-run -w /usr/share/wfuzz/wordlist/general/test.txt -u
http://127.0.0.1/FUZZ
/usr/lib/python3/dist-packages/wfuzz/__init__.py:34:
UserWarning:Pycurl is not
compiled against Openssl. Wfuzz might not work correctly when fuzzing SSL
sites. Check Wfuzz's documentation for more information.
********************************************************
* Wfuzz 3.1.0 - The Web Fuzzer *
********************************************************
Target: http://127.0.0.1/FUZZ
Total requests: 10
=====================================================================
ID Response Lines Word Chars Payload
=====================================================================
000000009: 404 9 L 31 W 271 Ch "scripts"
000000006: 404 9 L 31 W 271 Ch "includes"
000000002: 404 9 L 31 W 271 Ch "css"
000000010: 404 9 L 31 W 271 Ch "test"
000000003: 404 9 L 31 W 271 Ch "docs"
000000007: 404 9 L 31 W 271 Ch "master"
000000005: 404 9 L 31 W 271 Ch "images"
000000001: 404 9 L 31 W 271 Ch "classes"
000000008: 404 9 L 31 W 271 Ch "prueba"
000000004: 404 9 L 31 W 271 Ch "environment"
Total time: 0.040024
Processed Requests: 10
Filtered Requests: 0
