Skip to content

[BUG] -timeout flag does not work #6155

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
1 task done
XD-MHLOO opened this issue Apr 8, 2025 · 0 comments
Open
1 task done

[BUG] -timeout flag does not work #6155

XD-MHLOO opened this issue Apr 8, 2025 · 0 comments
Assignees
Labels
Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors.

Comments

@XD-MHLOO
Copy link

XD-MHLOO commented Apr 8, 2025

Is there an existing issue for this?

  • I have searched the existing issues.

Current Behavior

I attempt to run a blind-time-based-sql template on my own local server that deliberately designed to be vulnerable to sql injection. Template I used is from this link:
https://docs.projectdiscovery.io/templates/protocols/http/fuzzing-examples#blind-time-based-sqli-template

So i ran it with this simple command :
nuclei -t blind-time-based-sql.yaml -u "http://127.0.0.1:3939/login?username=john" -v -dast

And in one of the response it shows...

[mysql-blind-time-based-sqli] Error occurred in request: GET http://127.0.0.1:3939/login?username='+/+sleep(7)+/+' giving up after 2 attempts: Get "http://127.0.0.1:3939/login?username='+/+sleep(7)+/+'": net/http: timeout awaiting response headers

Since my user database has 8 records, the sleep(7) would be executed 8 times, in total 56 seconds to be waited until my response is received, and by default nuclei timeout is 10 seconds, so im getting an timeout error here.

However even if i use -timeout flag :
nuclei -t blind-time-based-sql.yaml -u "http://127.0.0.1:3939/login?username=john" -v -dast -timeout 100

, the error still persists, leaving the vulnerable endpoint undetected.

Expected Behavior

-timeout flag should be set properly to my timeout value.

Steps To Reproduce

1

Relevant log output

Environment

- OS: Windows
- Nuclei: 
- Go: Nuclei v3.4.1 (latest)

Anything else?

No response

@XD-MHLOO XD-MHLOO added the Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors. label Apr 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors.
Projects
None yet
Development

No branches or pull requests

2 participants