No results or false positives when running misconfig-mapper with default target command #80
Description
When running the following command: misconfig-mapper -target "domain.com" -service "*" --verbose 0 , no results are displayed (as shown in the screenshot below):
However, when skipping the misconfiguration checks and directly enumerating the domain, the tool displays multiple results — but most of them appear to be false positives, as shown here:
Expected Behavior
- The tool should display valid misconfiguration results when provided with a target and service using the standard syntax, or at least indicate if additional authentication (token/cookie) is required for accurate results.
Observed Behavior
- Skipping misconfiguration checks leads to false positive results during enumeration.
Questions / Clarification Needed
- Is this the correct syntax for performing a full misconfiguration scan?
- Does the tool require authentication parameters (token/cookie) to return true positive results?
- Are there any additional flags or filters needed to get accurate output?