search

Arachni / arachni

Web Application Security Scanner Framework
http://www.arachni-scanner.com
Other
3.76k stars 761 forks source link

v2 Errors while running scan #1012

Open J12934 opened 6 years ago

J12934 commented 6 years ago

Hi 👋 I was trying out v2 and getting a single error repeatably logged while running a test scan against OWASP JuiceShop. (This doesn't stop the scan but looks like a bug)

Other than that the scan run fine with v2 👍 Say if i you need more information to reproduce.

Error log:

2018-09-18 15:13:55 +0200 --------------------------------------------------------------------------------
ENV:
---

--------------------------------------------------------------------------------
OPTIONS:
---
datastore:
  token: 3ff414a0395fe8fa4cb64e9a60ba9281
scope:
  redundant_path_patterns: {}
  dom_depth_limit: 5
  exclude_file_extensions: []
  exclude_path_patterns: []
  exclude_content_patterns: []
  include_path_patterns: []
  restrict_paths: []
  extend_paths: []
  url_rewrites: {}
http:
  user_agent: Arachni/v2.0dev
  request_timeout: 10000
  request_redirect_limit: 5
  request_concurrency: 20
  request_queue_size: 100
  request_headers: {}
  response_max_size: 500000
  cookies: {}
  authentication_type: auto
input:
  values:
    name: arachni_name
    user: arachni_user
    usr: arachni_user
    pass: 5543!%arachni_secret
    txt: arachni_text
    num: '132'
    amount: '100'
    mail: arachni@email.gr
    account: '12'
    id: '1'
  default_values:
    name: arachni_name
    user: arachni_user
    usr: arachni_user
    pass: 5543!%arachni_secret
    txt: arachni_text
    num: '132'
    amount: '100'
    mail: arachni@email.gr
    account: '12'
    id: '1'
  without_defaults: true
  force: false
browser_cluster:
  local_storage: {}
  session_storage: {}
  wait_for_elements: {}
  pool_size: 6
  job_timeout: 10
  worker_time_to_live: 100
  ignore_images: false
  screen_width: 1600
  screen_height: 1200
session: {}
audit:
  parameter_values: true
  exclude_vector_patterns: []
  include_vector_patterns: []
  link_templates: []
  links: true
  forms: true
  cookies: true
  jsons: true
  xmls: true
  ui_forms: true
  ui_inputs: true
  nested_cookies: true
checks:
- allowed_methods
- backdoors
- backup_directories
- backup_files
- captcha
- code_injection
- code_injection_php_input_wrapper
- code_injection_timing
- common_admin_interfaces
- common_directories
- common_files
- cookie_set_for_parent_domain
- credit_card
- csrf
- cvs_svn_users
- directory_listing
- emails
- file_inclusion
- form_upload
- hsts
- htaccess_limit
- html_objects
- http_only_cookies
- http_put
- insecure_client_access_policy
- insecure_cookies
- insecure_cors_policy
- insecure_cross_domain_policy_access
- insecure_cross_domain_policy_headers
- interesting_responses
- ldap_injection
- localstart_asp
- mixed_resource
- no_sql_injection
- no_sql_injection_differential
- origin_spoof_access_restriction_bypass
- os_cmd_injection
- os_cmd_injection_timing
- password_autocomplete
- path_traversal
- private_ip
- response_splitting
- rfi
- session_fixation
- source_code_disclosure
- sql_injection
- sql_injection_differential
- sql_injection_timing
- ssn
- trainer
- unencrypted_password_forms
- unvalidated_redirect
- unvalidated_redirect_dom
- webdav
- x_frame_options
- xpath_injection
- xss
- xss_dom
- xss_dom_script_context
- xss_event
- xss_path
- xss_script_context
- xss_tag
- xst
- xxe
platforms: []
plugins:
  autothrottle: {}
  discovery: {}
  healthmap: {}
  timing_attacks: {}
  uniformity: {}
no_fingerprinting: false
authorized_by: 
url: http://192.168.178.72:3000/
--------------------------------------------------------------------------------
[2018-09-18 15:13:55 +0200] [Errno::EBADF] Bad file descriptor
[2018-09-18 15:13:55 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:651:in `select'
[2018-09-18 15:13:55 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:651:in `block in select_connections'
[2018-09-18 15:13:55 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor/connection/error.rb:26:in `translate'
[2018-09-18 15:13:55 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:650:in `select_connections'
[2018-09-18 15:13:55 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:568:in `process_connections'
[2018-09-18 15:13:55 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:316:in `block in run'
[2018-09-18 15:13:55 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:307:in `loop'
[2018-09-18 15:13:55 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:307:in `run'
[2018-09-18 15:13:55 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:349:in `block in run_in_thread'
[2018-09-18 15:14:57 +0200] [Errno::EBADF] Bad file descriptor
[2018-09-18 15:14:57 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:651:in `select'
[2018-09-18 15:14:57 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:651:in `block in select_connections'
[2018-09-18 15:14:57 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor/connection/error.rb:26:in `translate'
[2018-09-18 15:14:57 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:650:in `select_connections'
[2018-09-18 15:14:57 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:568:in `process_connections'
[2018-09-18 15:14:57 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:316:in `block in run'
[2018-09-18 15:14:57 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:307:in `loop'
[2018-09-18 15:14:57 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:307:in `run'
[2018-09-18 15:14:57 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:349:in `block in run_in_thread'
[2018-09-18 15:15:11 +0200] [Errno::EBADF] Bad file descriptor
[2018-09-18 15:15:11 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:651:in `select'
[2018-09-18 15:15:11 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:651:in `block in select_connections'
[2018-09-18 15:15:11 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor/connection/error.rb:26:in `translate'
[2018-09-18 15:15:11 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:650:in `select_connections'
[2018-09-18 15:15:11 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:568:in `process_connections'
[2018-09-18 15:15:11 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:316:in `block in run'
[2018-09-18 15:15:11 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:307:in `loop'
[2018-09-18 15:15:11 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:307:in `run'
[2018-09-18 15:15:11 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:349:in `block in run_in_thread'
[2018-09-18 15:15:26 +0200] [Errno::EBADF] Bad file descriptor
[2018-09-18 15:15:26 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:651:in `select'
[2018-09-18 15:15:26 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:651:in `block in select_connections'
[2018-09-18 15:15:26 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor/connection/error.rb:26:in `translate'
[2018-09-18 15:15:26 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:650:in `select_connections'
[2018-09-18 15:15:26 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:568:in `process_connections'
[2018-09-18 15:15:26 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:316:in `block in run'
[2018-09-18 15:15:26 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:307:in `loop'
[2018-09-18 15:15:26 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:307:in `run'
[2018-09-18 15:15:26 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:349:in `block in run_in_thread'
[2018-09-18 15:16:09 +0200] [Errno::EBADF] Bad file descriptor
[2018-09-18 15:16:09 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:651:in `select'
[2018-09-18 15:16:09 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:651:in `block in select_connections'
[2018-09-18 15:16:09 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor/connection/error.rb:26:in `translate'
[2018-09-18 15:16:09 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:650:in `select_connections'
[2018-09-18 15:16:09 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:568:in `process_connections'
[2018-09-18 15:16:09 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:316:in `block in run'
[2018-09-18 15:16:09 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:307:in `loop'
[2018-09-18 15:16:09 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:307:in `run'
[2018-09-18 15:16:09 +0200] /Users/jannik/Downloads/arachni-2.0dev-1.0dev/system/gems/gems/arachni-reactor-0.1.2/lib/arachni/reactor.rb:349:in `block in run_in_thread'