search

Arachni / arachni

Web Application Security Scanner Framework
http://www.arachni-scanner.com
Other
3.75k stars 763 forks source link

serious problem for login application #894

Closed lacroutelacroute closed 7 years ago

lacroutelacroute commented 7 years ago

after read the doc and do my best for me it not possible to login in html php web application

possible crash

$ sudo /opt/local/ruby-2.3.4/bin/ruby  /usr/local/bin/arachni  --output-only-positives  --scope-directory-depth-limit 5  --audit-links  --audit-forms  --audit-cookies   --audit-headers  --audit-jsons   --audit-xmls  --audit-ui-inputs   --audit-ui-forms   --audit-parameter-names   --audit-with-raw-payloads  --audit-with-extra-parameter   --audit-with-both-methods   --input-without-defaults  --input-force   --checks   unvalidated_redirect_dom    --report-save-path  /home/fakessh/   --snapshot-save-path   /home/fakessh/  --http-user-agent "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)"    --http-request-timeout 5000   --browser-cluster-job-timeout  50     --scope-exclude-file-extensions  pdf  --scope-exclude-file-extensions  js  --scope-exclude-file-extensions   css   --scope-exclude-file-extensions  jpg  --scope-exclude-file-extensions  jpeg --scope-exclude-file-extensions  png  --scope-exclude-file-extensions  gif    --plugin=autologin:url=https://**********.com/user/sign_in,parameters="email=lacroutelacroute@gmail.com&password=********",check="Sign Off|MY ACCOUNT" --scope-exclude-pattern=logout   https://**********.com/
[sudo] Mot de passe de fakessh : 
/pentest/vulnerability-analysis/arachni/lib/arachni/version.rb:12: warning: already initialized constant Arachni::VERSION
/opt/arachnidev/arachni/lib/arachni/version.rb:12: warning: previous definition of VERSION was here
/pentest/vulnerability-analysis/arachni/lib/arachni/browser.rb:10:in `require': `require "watir-webdriver"` is deprecated. Please, use `require "watir"`.
Arachni - Web Application Security Scanner Framework v1.5.1
   Author: Tasos "Zapotek" Laskos <tasos.laskos@arachni-scanner.com>

           (With the support of the community and the Arachni Team.)

   Website:       http://arachni-scanner.com
   Documentation: http://arachni-scanner.com/wiki

 [-] [utilities#exception_jail:428] Session: [Arachni::Session::Error::FormNotFound] Login form could not be found with: {:url=>"https://********.com/user/sign_in", :inputs=>{"email"=>"lacroutelacroute@gmail.com", "password"=>"******"}}
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/session.rb:356:in `login_from_configuration'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/session.rb:245:in `block in login'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/session.rb:244:in `login'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/components/plugins/autologin.rb:37:in `prepare'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/plugin/manager.rb:69:in `block (2 levels) in run'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/plugin/manager.rb:68:in `block in run'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/plugin/manager.rb:65:in `each'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/plugin/manager.rb:65:in `run'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/framework/parts/state.rb:348:in `prepare'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/framework.rb:110:in `run'
 [-] [utilities#exception_jail:428] Session: /pentest/vulnerability-analysis/arachni/ui/cli/framework.rb:80:in `block in run'
 [-] [utilities#exception_jail:429] Session: 
 [-] [utilities#exception_jail:430] Session: Parent:
 [-] [utilities#exception_jail:431] Session: Arachni::Session
 [-] [utilities#exception_jail:432] Session: 
 [-] [utilities#exception_jail:433] Session: Block:
 [-] [utilities#exception_jail:434] Session: #<Proc:0x00557ff10c0708@/pentest/vulnerability-analysis/arachni/lib/arachni/session.rb:244>
 [-] [utilities#exception_jail:435] Session: 
 [-] [utilities#exception_jail:436] Session: Caller:
 [-] [utilities#exception_jail:437] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:437] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/session.rb:244:in `login'
 [-] [utilities#exception_jail:437] Session: /pentest/vulnerability-analysis/arachni/components/plugins/autologin.rb:37:in `prepare'
 [-] [utilities#exception_jail:437] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/plugin/manager.rb:69:in `block (2 levels) in run'
 [-] [utilities#exception_jail:437] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:437] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/plugin/manager.rb:68:in `block in run'
 [-] [utilities#exception_jail:437] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/plugin/manager.rb:65:in `each'
 [-] [utilities#exception_jail:437] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/plugin/manager.rb:65:in `run'
 [-] [utilities#exception_jail:437] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/framework/parts/state.rb:348:in `prepare'
 [-] [utilities#exception_jail:437] Session: /pentest/vulnerability-analysis/arachni/lib/arachni/framework.rb:110:in `run'
 [-] [utilities#exception_jail:437] Session: /pentest/vulnerability-analysis/arachni/ui/cli/framework.rb:80:in `block in run'
 [-] [utilities#exception_jail:438] Session: --------------------------------------------------------------------------------
 [-] [components/plugins/autologin#handle_error:84] AutoLogin: Could not find a form suiting the provided parameters.

================================================================================

 [+] Web Application Security Report - Arachni Framework

 [~] Report generated on: 2017-06-17 18:55:20 +0200
 [~] Report false positives at: http://github.com/Arachni/arachni/issues

 [+] System settings:
 [~] ---------------
 [~] Version:           1.5.1
 [~] Seed:              45e06027657bb9d699933ece97fc423b
 [~] Audit started on:  2017-06-17 18:55:15 +0200
 [~] Audit finished on: 2017-06-17 18:55:20 +0200
 [~] Runtime:           00:00:05

 [~] URL:        https://********.com/
 [~] User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)

 [*] Audited elements: 
 [~] * Links
 [~] * Forms
 [~] * Cookies
 [~] * Headers
 [~] * XMLs
 [~] * JSONs
 [~] * UI inputs
 [~] * UI forms

 [*] Checks: unvalidated_redirect_dom

 [*] Filters: 
 [~]   Exclude:
 [~]     (?i-mx:logout)

 [~] ===========================

 [+] 0 issues were detected.

 [+] Plugin data:
 [~] ---------------

 [*] AutoLogin
 [~] ~~~~~~~~~~~~~~
 [~] Description: 
It looks for the login form in the user provided URL, merges its input fields
with the user supplied parameters and sets the cookies of the response and
request as framework-wide cookies.

**NOTICE**: If the login form is by default hidden and requires a sequence of DOM
interactions in order to become visible, this plugin will not be able to submit it.

 [+] Could not find a form suiting the provided parameters.

 [~] Report saved at: /home/fakessh/*********.com 2017-06-17 18_55_20 +0200.afr [0.0MB]
 [~] The scan has logged errors: /pentest/vulnerability-analysis/arachni/logs/error-25015.log

 [~] Audited 0 page snapshots.

 [~] Duration: 00:00:05
 [~] Processed 1/1 HTTP requests.
 [~] -- 0.437 requests/second.
 [~] Processed 0/0 browser jobs.
 [~] -- 0.0 second/job.

 [~] Burst response time sum     2.244 seconds
 [~] Burst response count        1
 [~] Burst average response time 2.244 seconds
 [~] Burst average               0.437 requests/second
 [~] Timed-out requests          0
 [~] Original max concurrency    20
 [~] Throttled max concurrency   20

$ sudo /opt/local/ruby-2.3.4/bin/ruby  ./arachni  --output-only-positives  --scope-directory-depth-limit 5  --audit-links  --audit-forms  --audit-cookies   --audit-headers  --audit-jsons   --audit-xmls  --audit-ui-inputs   --audit-ui-forms   --audit-parameter-names   --audit-with-raw-payloads  --audit-with-extra-parameter   --audit-with-both-methods   --input-without-defaults  --input-force   --checks   unvalidated_redirect_dom    --report-save-path  /home/fakessh/   --snapshot-save-path   /home/fakessh/  --http-user-agent "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)"    --http-request-timeout 5000   --browser-cluster-job-timeout  50     --scope-exclude-file-extensions  pdf  --scope-exclude-file-extensions  js  --scope-exclude-file-extensions   css   --scope-exclude-file-extensions  jpg  --scope-exclude-file-extensions  jpeg --scope-exclude-file-extensions  png  --scope-exclude-file-extensions  gif    --plugin=autologin:url=https://********.com/user/sign_in,parameters="email=lacroutelacroute@gmail.com&password=*********",check="Sign Off|MY ACCOUNT" --scope-exclude-pattern=logout   https://********.com/
Arachni - Web Application Security Scanner Framework v2.0dev
   Author: Tasos "Zapotek" Laskos <tasos.laskos@arachni-scanner.com>

           (With the support of the community and the Arachni Team.)

   Website:       http://arachni-scanner.com
   Documentation: http://arachni-scanner.com/wiki

 [-] [utilities#exception_jail:428] Session: [Selenium::WebDriver::Error::WebDriverError] unexpected response, code=404, content-type="text/plain"
Error - Unable to load Atom 'execute_script' from file ':/ghostdriver/./third_party/webdriver-atoms/execute_script.js'
 [-] [utilities#exception_jail:428] Session: /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/http/common.rb:90:in `create_response'
 [-] [utilities#exception_jail:428] Session: /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/http/default.rb:107:in `request'
 [-] [utilities#exception_jail:428] Session: /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/http/common.rb:61:in `call'
 [-] [utilities#exception_jail:428] Session: /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/bridge.rb:678:in `raw_execute'
 [-] [utilities#exception_jail:428] Session: /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/bridge.rb:656:in `execute'
 [-] [utilities#exception_jail:428] Session: /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/bridge.rb:178:in `url'
 [-] [utilities#exception_jail:428] Session: /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/common/driver.rb:159:in `current_url'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/browser.rb:432:in `dom_url'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/browser.rb:1083:in `response'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/browser/javascript.rb:119:in `supported?'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/browser/javascript.rb:163:in `wait_till_ready'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/browser.rb:391:in `wait_till_ready'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/browser.rb:356:in `block in goto'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/page/dom/transition.rb:151:in `start'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/page/dom/transition.rb:106:in `initialize'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/browser.rb:348:in `new'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/browser.rb:348:in `goto'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/browser.rb:269:in `load'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/session.rb:339:in `login_from_configuration'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/session.rb:245:in `block in login'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/session.rb:244:in `login'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/components/plugins/autologin.rb:37:in `prepare'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:69:in `block (2 levels) in run'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:68:in `block in run'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:65:in `each'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:65:in `run'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/framework/parts/state.rb:348:in `prepare'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/lib/arachni/framework.rb:110:in `run'
 [-] [utilities#exception_jail:428] Session: /opt/arachnidev/arachni/ui/cli/framework.rb:80:in `block in run'
 [-] [utilities#exception_jail:429] Session: 
 [-] [utilities#exception_jail:430] Session: Parent:
 [-] [utilities#exception_jail:431] Session: Arachni::Session
 [-] [utilities#exception_jail:432] Session: 
 [-] [utilities#exception_jail:433] Session: Block:
 [-] [utilities#exception_jail:434] Session: #<Proc:0x0055c7d0020510@/opt/arachnidev/arachni/lib/arachni/session.rb:244>
 [-] [utilities#exception_jail:435] Session: 
 [-] [utilities#exception_jail:436] Session: Caller:
 [-] [utilities#exception_jail:437] Session: /opt/arachnidev/arachni/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:437] Session: /opt/arachnidev/arachni/lib/arachni/session.rb:244:in `login'
 [-] [utilities#exception_jail:437] Session: /opt/arachnidev/arachni/components/plugins/autologin.rb:37:in `prepare'
 [-] [utilities#exception_jail:437] Session: /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:69:in `block (2 levels) in run'
 [-] [utilities#exception_jail:437] Session: /opt/arachnidev/arachni/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:437] Session: /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:68:in `block in run'
 [-] [utilities#exception_jail:437] Session: /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:65:in `each'
 [-] [utilities#exception_jail:437] Session: /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:65:in `run'
 [-] [utilities#exception_jail:437] Session: /opt/arachnidev/arachni/lib/arachni/framework/parts/state.rb:348:in `prepare'
 [-] [utilities#exception_jail:437] Session: /opt/arachnidev/arachni/lib/arachni/framework.rb:110:in `run'
 [-] [utilities#exception_jail:437] Session: /opt/arachnidev/arachni/ui/cli/framework.rb:80:in `block in run'
 [-] [utilities#exception_jail:438] Session: --------------------------------------------------------------------------------
 [-] [utilities#exception_jail:428] [Selenium::WebDriver::Error::WebDriverError] unexpected response, code=404, content-type="text/plain"
Error - Unable to load Atom 'execute_script' from file ':/ghostdriver/./third_party/webdriver-atoms/execute_script.js'
 [-] [utilities#exception_jail:428] /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/http/common.rb:90:in `create_response'
 [-] [utilities#exception_jail:428] /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/http/default.rb:107:in `request'
 [-] [utilities#exception_jail:428] /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/http/common.rb:61:in `call'
 [-] [utilities#exception_jail:428] /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/bridge.rb:678:in `raw_execute'
 [-] [utilities#exception_jail:428] /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/bridge.rb:656:in `execute'
 [-] [utilities#exception_jail:428] /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/remote/bridge.rb:178:in `url'
 [-] [utilities#exception_jail:428] /opt/local/ruby-2.3.4/lib/ruby/gems/2.3.0/gems/selenium-webdriver-3.4.0/lib/selenium/webdriver/common/driver.rb:159:in `current_url'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/browser.rb:432:in `dom_url'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/browser.rb:1083:in `response'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/browser/javascript.rb:119:in `supported?'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/browser/javascript.rb:163:in `wait_till_ready'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/browser.rb:391:in `wait_till_ready'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/browser.rb:356:in `block in goto'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/page/dom/transition.rb:151:in `start'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/page/dom/transition.rb:106:in `initialize'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/browser.rb:348:in `new'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/browser.rb:348:in `goto'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/browser.rb:269:in `load'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/session.rb:339:in `login_from_configuration'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/session.rb:245:in `block in login'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/session.rb:244:in `login'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/components/plugins/autologin.rb:37:in `prepare'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:69:in `block (2 levels) in run'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:68:in `block in run'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:65:in `each'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:65:in `run'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/framework/parts/state.rb:348:in `prepare'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/lib/arachni/framework.rb:110:in `run'
 [-] [utilities#exception_jail:428] /opt/arachnidev/arachni/ui/cli/framework.rb:80:in `block in run'
 [-] [utilities#exception_jail:429] 
 [-] [utilities#exception_jail:430] Parent:
 [-] [utilities#exception_jail:431] Arachni::Plugin::Manager
 [-] [utilities#exception_jail:432] 
 [-] [utilities#exception_jail:433] Block:
 [-] [utilities#exception_jail:434] #<Proc:0x0055c7d062cb48@/opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:68>
 [-] [utilities#exception_jail:435] 
 [-] [utilities#exception_jail:436] Caller:
 [-] [utilities#exception_jail:437] /opt/arachnidev/arachni/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:437] /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:68:in `block in run'
 [-] [utilities#exception_jail:437] /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:65:in `each'
 [-] [utilities#exception_jail:437] /opt/arachnidev/arachni/lib/arachni/plugin/manager.rb:65:in `run'
 [-] [utilities#exception_jail:437] /opt/arachnidev/arachni/lib/arachni/framework/parts/state.rb:348:in `prepare'
 [-] [utilities#exception_jail:437] /opt/arachnidev/arachni/lib/arachni/framework.rb:110:in `run'
 [-] [utilities#exception_jail:437] /opt/arachnidev/arachni/ui/cli/framework.rb:80:in `block in run'
 [-] [utilities#exception_jail:438] --------------------------------------------------------------------------------

================================================================================

 [+] Web Application Security Report - Arachni Framework

 [~] Report generated on: 2017-06-17 19:03:58 +0200
 [~] Report false positives at: http://github.com/Arachni/arachni/issues

 [+] System settings:
 [~] ---------------
 [~] Version:           2.0dev
 [~] Seed:              04b4e82c770b59525f2d01d3db828f5a
 [~] Audit started on:  2017-06-17 18:57:14 +0200
 [~] Audit finished on: 2017-06-17 19:03:57 +0200
 [~] Runtime:           00:06:43

 [~] URL:        https://*********.com/
 [~] User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)

 [*] Audited elements: 
 [~] * Links
 [~] * Forms
 [~] * Cookies
 [~] * Headers
 [~] * XMLs
 [~] * JSONs
 [~] * UI inputs
 [~] * UI forms

 [*] Checks: unvalidated_redirect_dom

 [*] Filters: 
 [~]   Exclude:
 [~]     (?i-mx:logout)

 [~] ===========================

 [+] 0 issues were detected.

 [+] Plugin data:
 [~] ---------------

 [*] Health map
 [~] ~~~~~~~~~~~~~~
 [~] Description: Generates a simple list of safe/unsafe URLs.

 [~] Legend:
 [+] No issues
 [-] Has issues

 [+] https://***********.com/

 [~] Total: 1
 [+] Without issues: 1
 [-] With issues: 0 ( 0% )

 [~] Report saved at: /home/fakessh/********.com 2017-06-17 19_03_57 +0200.afr [0.0MB]
 [~] The scan has logged errors: /opt/arachnidev/arachni/logs/error-25840.log

 [~] Audited 1 page snapshots.

 [~] Duration: 00:06:46
 [~] Processed 5/5 HTTP requests.
 [~] -- 1.085 requests/second.
 [~] Processed 0/0 browser jobs.
 [~] -- 0.0 second/job.

 [~] Currently auditing          https://bugcrowd.com/
 [~] Burst response time sum     0.0 seconds
 [~] Burst response count        0
 [~] Burst average response time 0.0 seconds
 [~] Burst average               0.0 requests/second
 [~] Timed-out requests          0
 [~] Original max concurrency    20
 [~] Throttled max concurrency   20
Zapotek commented 7 years ago

Please try using the official packages instead of what you're doing.

lacroutelacroute commented 7 years ago

its official git clone package

Zapotek commented 7 years ago

There's no such thing, please use the provided packages instead and let me know if the problem persists.

lacroutelacroute commented 7 years ago 
/opt/arachni-1.5.1-0.5.12/bin$ sudo   ./arachni  --output-only-positives  --scope-directory-depth-limit 5  --audit-links  --audit-forms  --audit-cookies   --audit-headers  --audit-jsons   --audit-xmls  --audit-ui-inputs   --audit-ui-forms   --audit-parameter-names   --audit-with-raw-payloads  --audit-with-extra-parameter   --audit-with-both-methods   --input-without-defaults  --input-force   --checks   unvalidated_redirect_dom    --report-save-path  /home/fakessh/   --snapshot-save-path   /home/fakessh/  --http-user-agent "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)"    --http-request-timeout 5000   --browser-cluster-job-timeout  50     --scope-exclude-file-extensions  pdf  --scope-exclude-file-extensions  js  --scope-exclude-file-extensions   css   --scope-exclude-file-extensions  jpg  --scope-exclude-file-extensions  jpeg --scope-exclude-file-extensions  png  --scope-exclude-file-extensions  gif    --plugin=autologin:url=https://********.com/user/sign_in,parameters="email=lacroutelacroute@gmail.com&password=*********",check="Sign Off|MY ACCOUNT" --scope-exclude-pattern=logout   https://*********.com/
Arachni - Web Application Security Scanner Framework v1.5.1
   Author: Tasos "Zapotek" Laskos <tasos.laskos@arachni-scanner.com>

           (With the support of the community and the Arachni Team.)

   Website:       http://arachni-scanner.com
   Documentation: http://arachni-scanner.com/wiki

 [-] [utilities#exception_jail:428] Session: [Arachni::Session::Error::FormNotFound] Login form could not be found with: {:url=>"https://*******/user/sign_in", :inputs=>{"email"=>"lacroutelacroute@gmail.com", "password"=>"********"}}
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/session.rb:356:in `login_from_configuration'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/session.rb:245:in `block in login'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `call'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/session.rb:244:in `login'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/components/plugins/autologin.rb:37:in `prepare'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:69:in `block (2 levels) in run'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `call'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:68:in `block in run'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:65:in `each'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:65:in `run'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/framework/parts/state.rb:348:in `prepare'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/framework.rb:110:in `run'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/ui/cli/framework.rb:80:in `block in run'
 [-] [utilities#exception_jail:429] Session: 
 [-] [utilities#exception_jail:430] Session: Parent:
 [-] [utilities#exception_jail:431] Session: Arachni::Session
 [-] [utilities#exception_jail:432] Session: 
 [-] [utilities#exception_jail:433] Session: Block:
 [-] [utilities#exception_jail:434] Session: #<Proc:0x007fe654214c00@/opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/session.rb:244>
 [-] [utilities#exception_jail:435] Session: 
 [-] [utilities#exception_jail:436] Session: Caller:
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/session.rb:244:in `login'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/components/plugins/autologin.rb:37:in `prepare'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:69:in `block (2 levels) in run'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `call'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:68:in `block in run'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:65:in `each'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:65:in `run'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/framework/parts/state.rb:348:in `prepare'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/framework.rb:110:in `run'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/ui/cli/framework.rb:80:in `block in run'
 [-] [utilities#exception_jail:438] Session: --------------------------------------------------------------------------------
 [-] [components/plugins/autologin#handle_error:84] AutoLogin: Could not find a form suiting the provided parameters.

================================================================================

 [+] Web Application Security Report - Arachni Framework

 [~] Report generated on: 2017-06-18 14:31:44 +0200
 [~] Report false positives at: http://github.com/Arachni/arachni/issues

 [+] System settings:
 [~] ---------------
 [~] Version:           1.5.1
 [~] Seed:              527bce45a53f0d073de4ddf7a78ef059
 [~] Audit started on:  2017-06-18 14:31:02 +0200
 [~] Audit finished on: 2017-06-18 14:31:44 +0200
 [~] Runtime:           00:00:42

 [~] URL:        https://*******.com/
 [~] User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)

 [*] Audited elements: 
 [~] * Links
 [~] * Forms
 [~] * Cookies
 [~] * Headers
 [~] * XMLs
 [~] * JSONs
 [~] * UI inputs
 [~] * UI forms

 [*] Checks: unvalidated_redirect_dom

 [*] Filters: 
 [~]   Exclude:
 [~]     (?i-mx:logout)

 [~] ===========================

 [+] 0 issues were detected.

 [+] Plugin data:
 [~] ---------------

 [*] AutoLogin
 [~] ~~~~~~~~~~~~~~
 [~] Description: 
It looks for the login form in the user provided URL, merges its input fields
with the user supplied parameters and sets the cookies of the response and
request as framework-wide cookies.

**NOTICE**: If the login form is by default hidden and requires a sequence of DOM
interactions in order to become visible, this plugin will not be able to submit it.

 [+] Could not find a form suiting the provided parameters.

 [~] Report saved at: /home/fakessh/*********.com 2017-06-18 14_31_44 +0200.afr [0.0MB]
 [~] The scan has logged errors: /opt/arachni-1.5.1-0.5.12/bin/../system/logs/framework/error-7582.log

 [~] Audited 0 page snapshots.

 [~] Duration: 00:00:42
 [~] Processed 19/19 HTTP requests.
 [~] -- 0.0 requests/second.
 [~] Processed 0/0 browser jobs.
 [~] -- 0.0 second/job.

 [~] Burst response time sum     7.403 seconds
 [~] Burst response count        19
 [~] Burst average response time 0.39 seconds
 [~] Burst average               0.0 requests/second
 [~] Timed-out requests          0
 [~] Original max concurrency    20
 [~] Throttled max concurrency   20
Zapotek commented 7 years ago

Can you try setting --output-debug=2? That'll show what the page looks like and why the form could not be found.

lacroutelacroute commented 7 years ago 
/opt/arachni-1.5.1-0.5.12/bin$ sudo   ./arachni  --output-only-positives  --scope-directory-depth-limit 5  --audit-links  --audit-forms  --audit-cookies   --audit-headers  --audit-jsons   --audit-xmls  --audit-ui-inputs   --audit-ui-forms   --audit-parameter-names   --audit-with-raw-payloads  --audit-with-extra-parameter   --audit-with-both-methods   --input-without-defaults  --input-force   --checks   unvalidated_redirect_dom    --report-save-path  /home/fakessh/   --snapshot-save-path   /home/fakessh/  --http-user-agent "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)"    --http-request-timeout 5000   --browser-cluster-job-timeout  50     --scope-exclude-file-extensions  pdf  --scope-exclude-file-extensions  js  --scope-exclude-file-extensions   css   --scope-exclude-file-extensions  jpg  --scope-exclude-file-extensions  jpeg --scope-exclude-file-extensions  png  --scope-exclude-file-extensions  gif    --plugin=autologin:url=https://********.com/user/sign_in,parameters="email=lacroutelacroute@gmail.com&password=********",check="Sign Off|MY ACCOUNT" --scope-exclude-pattern=logout  --output-debug=2    https://********.com/
Arachni - Web Application Security Scanner Framework v1.5.1
   Author: Tasos "Zapotek" Laskos <tasos.laskos@arachni-scanner.com>

           (With the support of the community and the Arachni Team.)

   Website:       http://arachni-scanner.com
   Documentation: http://arachni-scanner.com/wiki

 [2017-06-18 14:39:23 +0200 - 0.0] [!!] [browser#start_webdriver:1336] Browser: Starting WebDriver...
 [2017-06-18 14:39:23 +0200 - 0.0] [!] [browser#spawn_phantomjs:1227] Browser: Spawning PhantomJS...
 [2017-06-18 14:39:23 +0200 - 0.0] [!] [browser#start_proxy:1318] Browser: Booting up...
 [2017-06-18 14:39:23 +0200 - 0.0] [!!] [browser#start_proxy:1320] Browser: Starting proxy...
 [2017-06-18 14:39:23 +0200 - 0.0] [!!] [http/proxy_server#start_async:61] ProxyServer: Starting...
 [2017-06-18 14:39:23 +0200 - 0.1] [!!] [http/proxy_server#start_async:78] ProxyServer: ...started at: http://127.0.0.1:4641
 [2017-06-18 14:39:23 +0200 - 0.1] [!!] [browser#start_proxy:1332] Browser: ... started proxy at: http://127.0.0.1:4641
 [2017-06-18 14:39:23 +0200 - 0.0] [!!] [browser#spawn_phantomjs:1242] Browser: Attempt #0, chose port number 41313
 [2017-06-18 14:39:23 +0200 - 0.0] [!!] [browser#spawn_phantomjs:1246] Browser: Spawning process: /opt/arachni-1.5.1-0.5.12/bin/../system/usr/bin/phantomjs
 [2017-06-18 14:39:23 +0200 - 0.0] [!!] [browser#spawn_phantomjs:1267] Browser: Process spawned, waiting for WebDriver server...
 [2017-06-18 14:39:25 +0200 - 2.0] [!!] [browser#spawn_phantomjs:1281] Browser: ...WebDriver server is up.
 [2017-06-18 14:39:25 +0200 - 0.0] [!!] [browser#spawn_phantomjs:1289] Browser: 13576: Started
PID: 13739
[INFO  - 2017-06-18T12:39:25.687Z] GhostDriver - Main - running on port 41313

 [2017-06-18 14:39:25 +0200 - 2.1] [!] [browser#spawn_phantomjs:1293] Browser: PhantomJS is ready.
 [2017-06-18 14:39:25 +0200 - 0.0] [!!] [browser#start_webdriver:1338] Browser: ... started WebDriver at: http://127.0.0.1:41313
 [2017-06-18 14:39:25 +0200 - 0.0] [!] [browser#start_webdriver:1340] Browser: ...boot-up completed.
 [2017-06-18 14:39:25 +0200 - 0.0] [!] [session#login_from_configuration:326] Session: Logging in via configuration.
 [2017-06-18 14:39:25 +0200 - 0.0] [!] [session#login_from_configuration:329] Session: Logging in using browser.
 [2017-06-18 14:39:25 +0200 - 0.0] [!] [session#login_from_configuration:334] Session: Grabbing page at: https://bugcrowd.com/user/sign_in
 [2017-06-18 14:39:25 +0200 - 0.0] [!!] [browser#goto:333] Browser: Loading https://bugcrowd.com/user/sign_in ...
 [2017-06-18 14:39:25 +0200 - 0.1] [!!] [browser#request_handler:1535] Browser: Request: https://bugcrowd.com/user/sign_in
 [2017-06-18 14:39:25 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://bugcrowd.com/user/sign_in
 [2017-06-18 14:39:25 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:25 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:26 +0200 - 0.6] [!!] [browser#response_handler:1607] Browser: Got response: https://bugcrowd.com/user/sign_in
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#whitelist_asset_domains:1718] Browser: bugcrowdusercontent.com from https://assets.bugcrowdusercontent.com/images/favicon.ico based on <\s*link.*?href=\s*['"]?(.*?)?['"]?[\s>]
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#whitelist_asset_domains:1718] Browser: bugcrowdusercontent.com from https://assets.bugcrowdusercontent.com/assets/public-babb6293196e6315e804390654ec45f7d4928472019d6b0574e028fef8026bf4.css based on <\s*link.*?href=\s*['"]?(.*?)?['"]?[\s>]
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#whitelist_asset_domains:1718] Browser: browser.arachni from http://javascript.browser.arachni/polyfills.js based on src\s*=\s*['"]?(.*?)?['"]?[\s>]
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#whitelist_asset_domains:1718] Browser: browser.arachni from http://javascript.browser.arachni/taint_tracer.js based on src\s*=\s*['"]?(.*?)?['"]?[\s>]
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#whitelist_asset_domains:1718] Browser: browser.arachni from http://javascript.browser.arachni/dom_monitor.js based on src\s*=\s*['"]?(.*?)?['"]?[\s>]
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#whitelist_asset_domains:1718] Browser: trackjs.com from https://cdn.trackjs.com/releases/current/tracker.js based on src\s*=\s*['"]?(.*?)?['"]?[\s>]
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#whitelist_asset_domains:1718] Browser: bugcrowdusercontent.com from https://assets.bugcrowdusercontent.com/assets/logo-full.min-f998a616b3634d5f0bf9900699ff720cbe5b7a922859cf8703c1895cc8ce5a42.svg based on src\s*=\s*['"]?(.*?)?['"]?[\s>]
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#whitelist_asset_domains:1718] Browser: bugcrowdusercontent.com from https://assets.bugcrowdusercontent.com/assets/logo-full.min-f998a616b3634d5f0bf9900699ff720cbe5b7a922859cf8703c1895cc8ce5a42.svg based on src\s*=\s*['"]?(.*?)?['"]?[\s>]
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#whitelist_asset_domains:1718] Browser: bugcrowdusercontent.com from https://assets.bugcrowdusercontent.com/assets/public-417dd0b33f661b8dfcabff876f867edb74c6fc751560c3e207b5943f4f854601.js based on src\s*=\s*['"]?(.*?)?['"]?[\s>]
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#response_handler:1648] Browser: Stored.
 [2017-06-18 14:39:26 +0200 - 0.1] [!!] [browser#request_handler:1535] Browser: Request: http://javascript.browser.arachni/polyfills.js
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#request_handler:1548] Browser: Serving local JS.
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#response_handler:1607] Browser: Got response: http://javascript.browser.arachni/polyfills.js
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#request_handler:1535] Browser: Request: http://javascript.browser.arachni/taint_tracer.js
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#request_handler:1548] Browser: Serving local JS.
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#response_handler:1607] Browser: Got response: http://javascript.browser.arachni/taint_tracer.js
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#request_handler:1535] Browser: Request: http://javascript.browser.arachni/dom_monitor.js
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#request_handler:1548] Browser: Serving local JS.
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#response_handler:1607] Browser: Got response: http://javascript.browser.arachni/dom_monitor.js
 [2017-06-18 14:39:26 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:27 +0200 - 0.5] [!!] [browser#request_handler:1535] Browser: Request: https://cdn.segment.com/analytics.js/v1/7iC2Ms9O4Tlb7fMJtg8R9glrGmIPhuFy/analytics.min.js
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://cdn.segment.com/analytics.js/v1/7iC2Ms9O4Tlb7fMJtg8R9glrGmIPhuFy/analytics.min.js
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:27 +0200 - 0.2] [!!] [browser#response_handler:1607] Browser: Got response: https://cdn.segment.com/analytics.js/v1/7iC2Ms9O4Tlb7fMJtg8R9glrGmIPhuFy/analytics.min.js
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:27 +0200 - 0.5] [!!] [browser#request_handler:1535] Browser: Request: https://www.google-analytics.com/r/collect?v=1&_v=j56&a=46169481&t=pageview&_s=1&dl=https://bugcrowd.com/user/sign_in&ul=fr-fr&de=UTF-8&dt=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&sd=32-bit&sr=1024x768&vp=1600x1200&je=0&_u=IEBAAAQAI~&jid=984900248&gjid=1517813028&cid=576102822.1497789567&tid=UA-35052704-1&_gid=389092859.1497789567&_r=1&z=384919710
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://www.google-analytics.com/r/collect?v=1&_v=j56&a=46169481&t=pageview&_s=1&dl=https://bugcrowd.com/user/sign_in&ul=fr-fr&de=UTF-8&dt=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&sd=32-bit&sr=1024x768&vp=1600x1200&je=0&_u=IEBAAAQAI~&jid=984900248&gjid=1517813028&cid=576102822.1497789567&tid=UA-35052704-1&_gid=389092859.1497789567&_r=1&z=384919710
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1535] Browser: Request: https://cdn.heapanalytics.com/js/heap-351079185.js
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://cdn.heapanalytics.com/js/heap-351079185.js
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1535] Browser: Request: https://js.hs-analytics.net/analytics/1497789600000/1549768.js
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1535] Browser: Request: https://widget.intercom.io/widget/ovg5emkk
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://js.hs-analytics.net/analytics/1497789600000/1549768.js
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://widget.intercom.io/widget/ovg5emkk
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:27 +0200 - 0.1] [!!] [browser#response_handler:1607] Browser: Got response: https://www.google-analytics.com/r/collect?v=1&_v=j56&a=46169481&t=pageview&_s=1&dl=https://bugcrowd.com/user/sign_in&ul=fr-fr&de=UTF-8&dt=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&sd=32-bit&sr=1024x768&vp=1600x1200&je=0&_u=IEBAAAQAI~&jid=984900248&gjid=1517813028&cid=576102822.1497789567&tid=UA-35052704-1&_gid=389092859.1497789567&_r=1&z=384919710
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1535] Browser: Request: https://www.google-analytics.com/collect?v=1&_v=j56&a=46169481&t=pageview&_s=2&dl=https://bugcrowd.com/user/sign_in&dp=/user/sign_in&ul=fr-fr&de=UTF-8&dt=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&sd=32-bit&sr=1024x768&vp=1600x1200&je=0&_u=aEBAAAQAI~&jid=&gjid=&cid=576102822.1497789567&tid=UA-35052704-1&_gid=389092859.1497789567&z=531495059
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://www.google-analytics.com/collect?v=1&_v=j56&a=46169481&t=pageview&_s=2&dl=https://bugcrowd.com/user/sign_in&dp=/user/sign_in&ul=fr-fr&de=UTF-8&dt=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&sd=32-bit&sr=1024x768&vp=1600x1200&je=0&_u=aEBAAAQAI~&jid=&gjid=&cid=576102822.1497789567&tid=UA-35052704-1&_gid=389092859.1497789567&z=531495059
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1607] Browser: Got response: https://widget.intercom.io/widget/ovg5emkk
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1636] Browser: Outside of domain scope, will not store.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1535] Browser: Request: https://api.segment.io/v1/p
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://api.segment.io/v1/p
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:27 +0200 - 0.1] [!!] [browser#response_handler:1607] Browser: Got response: https://cdn.heapanalytics.com/js/heap-351079185.js
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1607] Browser: Got response: https://www.google-analytics.com/collect?v=1&_v=j56&a=46169481&t=pageview&_s=2&dl=https://bugcrowd.com/user/sign_in&dp=/user/sign_in&ul=fr-fr&de=UTF-8&dt=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&sd=32-bit&sr=1024x768&vp=1600x1200&je=0&_u=aEBAAAQAI~&jid=&gjid=&cid=576102822.1497789567&tid=UA-35052704-1&_gid=389092859.1497789567&z=531495059
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:27 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:28 +0200 - 0.1] [!!] [browser#response_handler:1607] Browser: Got response: https://js.hs-analytics.net/analytics/1497789600000/1549768.js
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#request_handler:1535] Browser: Request: https://heapanalytics.com/h?a=351079185&u=8998836920883576&v=3657825286585199&s=3051900507118130&b=web&tv=3.0&z=0&h=/user/sign_in&d=bugcrowd.com&t=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&ts=1497789567992&st=1497789567993
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://heapanalytics.com/h?a=351079185&u=8998836920883576&v=3657825286585199&s=3051900507118130&b=web&tv=3.0&z=0&h=/user/sign_in&d=bugcrowd.com&t=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&ts=1497789567992&st=1497789567993
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:28 +0200 - 0.5] [!!] [browser#response_handler:1607] Browser: Got response: https://heapanalytics.com/h?a=351079185&u=8998836920883576&v=3657825286585199&s=3051900507118130&b=web&tv=3.0&z=0&h=/user/sign_in&d=bugcrowd.com&t=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&ts=1497789567992&st=1497789567993
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#response_handler:1607] Browser: Got response: https://api.segment.io/v1/p
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#response_handler:1636] Browser: Outside of domain scope, will not store.
 [2017-06-18 14:39:28 +0200 - 0.3] [!!] [browser#request_handler:1535] Browser: Request: https://track.hubspot.com/__ptq.gif?k=1&sd=1024x768&cd=32-bit&cs=UTF-8&ln=fr-fr&bfp=81309153&v=1.1&a=1549768&t=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&cts=1497789568686&vi=0fac256c58742f58a0357800f2d6c09d&nc=true&u=174498493.0fac256c58742f58a0357800f2d6c09d.1497789568684.1497789568684.1497789568684.1&b=174498493.1.1497789568684
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://track.hubspot.com/__ptq.gif?k=1&sd=1024x768&cd=32-bit&cs=UTF-8&ln=fr-fr&bfp=81309153&v=1.1&a=1549768&t=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&cts=1497789568686&vi=0fac256c58742f58a0357800f2d6c09d&nc=true&u=174498493.0fac256c58742f58a0357800f2d6c09d.1497789568684.1497789568684.1497789568684.1&b=174498493.1.1497789568684
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#request_handler:1535] Browser: Request: https://api.usemessages.com/messages/v2/embed/1549768.js
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://api.usemessages.com/messages/v2/embed/1549768.js
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#request_handler:1535] Browser: Request: https://usage.trackjs.com/usage.gif?token=f9395f0efaee49fbb310d56977eafbdf&correlationId=5114f1d8-65fa-460a-9d1a-0e4f352ff055&application=&x=b5906b04-e683-4666-874a-7ba15a1a760a&
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#ignore_request?:1654] Browser: Checking: https://usage.trackjs.com/usage.gif?token=f9395f0efaee49fbb310d56977eafbdf&correlationId=5114f1d8-65fa-460a-9d1a-0e4f352ff055&application=&x=b5906b04-e683-4666-874a-7ba15a1a760a&
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#ignore_request?:1657] Browser: Allow: Scope enforcement disabled.
 [2017-06-18 14:39:28 +0200 - 0.0] [!!] [browser#request_handler:1577] Browser: Request can proceed to origin.
 [2017-06-18 14:39:29 +0200 - 0.5] [!!] [browser#response_handler:1607] Browser: Got response: https://track.hubspot.com/__ptq.gif?k=1&sd=1024x768&cd=32-bit&cs=UTF-8&ln=fr-fr&bfp=81309153&v=1.1&a=1549768&t=Bugcrowd%20%7C%20Your%20Elastic%20Security%20Team,%20better%20security%20testing%20through%20bug%20bounties%20and%20managed%20security%20programs&cts=1497789568686&vi=0fac256c58742f58a0357800f2d6c09d&nc=true&u=174498493.0fac256c58742f58a0357800f2d6c09d.1497789568684.1497789568684.1497789568684.1&b=174498493.1.1497789568684
 [2017-06-18 14:39:29 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:29 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:29 +0200 - 0.0] [!!] [browser#response_handler:1607] Browser: Got response: https://usage.trackjs.com/usage.gif?token=f9395f0efaee49fbb310d56977eafbdf&correlationId=5114f1d8-65fa-460a-9d1a-0e4f352ff055&application=&x=b5906b04-e683-4666-874a-7ba15a1a760a
 [2017-06-18 14:39:29 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:29 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:29 +0200 - 0.0] [!!] [browser#response_handler:1607] Browser: Got response: https://api.usemessages.com/messages/v2/embed/1549768.js
 [2017-06-18 14:39:29 +0200 - 0.0] [!!] [browser#response_handler:1624] Browser: Injected custom JS.
 [2017-06-18 14:39:29 +0200 - 0.0] [!!] [browser#response_handler:1630] Browser: Asset detected, will not store.
 [2017-06-18 14:39:29 +0200 - 0.1] [!!] [browser#goto:335] Browser: ...done.
 [2017-06-18 14:39:29 +0200 - 0.0] [!!] [browser/javascript#wait_till_ready:161] Waiting for custom JS...
 [2017-06-18 14:39:29 +0200 - 0.0] [!!] [browser/javascript#wait_till_ready:178] ...done.
 [2017-06-18 14:39:29 +0200 - 0.0] [!!] [browser#wait_for_timers:1052] Browser: Waiting for max timer 5.0s (original was 10000ms)...
 [2017-06-18 14:39:34 +0200 - 5.0] [!!] [browser#wait_for_timers:1056] Browser: ...done.
 [2017-06-18 14:39:34 +0200 - 9.1] [!] [session#login_from_configuration:344] Session: Got page with URL https://bugcrowd.com/user/sign_in
 [2017-06-18 14:39:34 +0200 - 0.0] [!!] [session#login_from_configuration:355] Session: <html lang="en"><head><script src="https://api.usemessages.com/messages/v2/embed/1549768.js" type="text/javascript" id="messages-1549768"></script><script type="text/javascript" async="" src="https://widget.intercom.io/widget/ovg5emkk"></script><script type="text/javascript" async="" src="https://js.hs-analytics.net/analytics/1497789600000/1549768.js" id="hs-analytics"></script><script type="text/javascript" async="" src="https://cdn.heapanalytics.com/js/heap-351079185.js"></script><script type="text/javascript" async="" src="https://www.google-analytics.com/analytics.js"></script><script async="" src="//www.google-analytics.com/analytics.js"></script><script type="text/javascript" async="" src="https://cdn.segment.com/analytics.js/v1/7iC2Ms9O4Tlb7fMJtg8R9glrGmIPhuFy/analytics.min.js"></script><script src="http://javascript.browser.arachni/polyfills.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/taint_tracer.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script src="http://javascript.browser.arachni/dom_monitor.js"></script> <!-- Injected by Arachni::Browser::Javascript -->
<script>
/* arachni_js_namespace_initialize_start */ _arachni_js_namespaceTaintTracer.initialize({}) /* arachni_js_namespace_initialize_stop */
window._arachni_js_namespace = true;

/* arachni_js_namespace_code_start */  /* arachni_js_namespace_code_stop */
</script> <!-- Injected by Arachni::Browser::Javascript -->

<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
<meta charset="utf-8">
<title>Bugcrowd | Your Elastic Security Team, better security testing through bug bounties and managed security programs</title>
<meta name="description" content="Bugcrowd's bug bounty platform connects the global security researcher community with your business. Crowdsourced security testing, a better approach! Run your bug bounty programs with us.">
<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
<meta name="csrf-param" content="authenticity_token">
<meta name="csrf-token" content="2ueAoItFDCKG6OizCkK1TMcp5qUG4mPGKQlsBRUtTfL9dZccn3zYSw2H9z4Y/yjtX7osUcm+7ScPZehCJAXrIA==">
<link rel="shortcut icon" type="image/x-icon" href="https://assets.bugcrowdusercontent.com/images/favicon.ico">
<meta property="og:locale" content="en_US">
<meta property="og:title" content="Managed bug bounty programs, a better approach to security testing">
<meta property="og:description" content="Bugcrowd's bug bounty platform connects the global security researcher community with your business. Crowdsourced security testing, a better approach! Run your bug bounty program with us">
<meta property="og:url" content="https://bugcrowd.com/">
<meta property="og:site_name" content="Bugcrowd Inc.">
<meta property="og:type" content="website">
<meta property="og:image" content="https://bugcrowd.com/assets/public/og-image.png">

<meta name="twitter:card" value="summary">
<meta name="twitter:url" value="https://bugcrowd.com/">
<meta name="twitter:title" value="Managed bug bounty programs, a better approach to security testing">
<meta name="twitter:description" value="Bugcrowd's bug bounty platform connects the global security researcher community with your business. Crowdsourced security testing, a better approach! Run your bug bounty program with us">
<meta name="twitter:image" value="https://bugcrowd.com/assets/public/og-image.png">
<meta name="twitter:creator" value="@bugcrowd">
<meta name="twitter:site" value="@bugcrowd">

<link rel="stylesheet" media="all" href="https://assets.bugcrowdusercontent.com/assets/public-babb6293196e6315e804390654ec45f7d4928472019d6b0574e028fef8026bf4.css">
  <script>

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

    window._trackJs = {
      token: 'f9395f0efaee49fbb310d56977eafbdf'
    };
  </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

  <script src="https://cdn.trackjs.com/releases/current/tracker.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

  <script type="text/javascript">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

    !function(){var analytics=window.analytics=window.analytics||[];if(!analytics.initialize)if(analytics.invoked)window.console&&console.error&&console.error("Segment snippet included twice.");else{analytics.invoked=!0;analytics.methods=["trackSubmit","trackClick","trackLink","trackForm","pageview","identify","reset","group","track","ready","alias","page","once","off","on"];analytics.factory=function(t){return function(){var e=Array.prototype.slice.call(arguments);e.unshift(t);analytics.push(e);return analytics}};for(var t=0;t<analytics.methods.length;t++){var e=analytics.methods[t];analytics[e]=analytics.factory(e)}analytics.load=function(t){var e=document.createElement("script");e.type="text/javascript";e.async=!0;e.src=("https:"===document.location.protocol?"https://":"http://")+"cdn.segment.com/analytics.js/v1/"+t+"/analytics.min.js";var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(e,n)};analytics.SNIPPET_VERSION="3.1.0";
    analytics.load('7iC2Ms9O4Tlb7fMJtg8R9glrGmIPhuFy');
    analytics.page()
    }}();
  </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

<link href="opensearch.xml" rel="search" title="Bugcrowd VRT" type="application/opensearchdescription+xml">

</head>
<body class="public">
<header class="bc-body bc-header">
<div class="bc-header__login-strip">
<ul class="bc-header__login-items">
<li><a href="/user/sign_up">Researcher Sign Up</a></li>
<li><a href="/user/sign_in">Login</a></li>
</ul>
</div>
<div class="bc-header__strip">
<a href="https://www.bugcrowd.com"><img class="bc-header__logo" alt="Bugcrowd logo" src="https://assets.bugcrowdusercontent.com/assets/logo-full.min-f998a616b3634d5f0bf9900699ff720cbe5b7a922859cf8703c1895cc8ce5a42.svg">
</a><nav class="bc-header__nav">
<ul>
<li class="bc-header__nav-item">
<a href="https://www.bugcrowd.com/how-it-works/">How it Works</a>
</li>
<li class="bc-header__nav-item">
<a href="https://www.bugcrowd.com/solutions/">Solutions</a>
<ul class="bc-header__subnav">
<li><a href="https://www.bugcrowd.com/solutions/platform/">Platform</a></li>
<li><a href="https://www.bugcrowd.com/solutions/program-types/">Program Types</a></li>
<li><a href="https://www.bugcrowd.com/solutions/meet-the-crowd/">Meet the Crowd</a></li>
</ul>
</li>
<li class="bc-header__nav-item">
<a href="https://www.bugcrowd.com/customers/">Customers</a>
</li>
<li class="bc-header__nav-item">
<a href="https://www.bugcrowd.com/resources/">Resources</a>
<ul class="bc-header__subnav">
<li><a href="https://www.bugcrowd.com/resources/for-researchers">For Researchers</a></li>
<li><a href="https://www.bugcrowd.com/resources/for-companies">For Companies</a></li>
<li><a href="https://www.bugcrowd.com/resources/events">Events</a></li>
</ul>
</li>
<li class="bc-header__nav-item">
<a href="https://www.bugcrowd.com/about/">About</a>
<ul class="bc-header__subnav">
<li><a href="https://blog.bugcrowd.com">Blog</a></li>
<li><a href="https://www.bugcrowd.com/about/press/">Press</a></li>
<li><a href="https://www.bugcrowd.com/about/careers/">Careers</a></li>
<li><a href="https://www.bugcrowd.com/about/partners/">Partners</a></li>
<li><a href="https://www.bugcrowd.com/about/contact/">Contact</a></li>
</ul>
</li>
</ul>
</nav>
<a class="bc-header__get-started" href="https://pages.bugcrowd.com/schedule-a-demo-with-bugcrowd">Get Started</a>
</div>
</header>

<section id="page" role="main">
<div class="page-content">
<section class="section section-soft section-flat" id="section-login">
<div class="container">
<div class="focused-box">
<div class="section-intro small">
<h3>
Researcher sign in
</h3>
<p class="signup-links">
or
<a href="/user/sign_up">signup here</a>
</p>
</div>
<form class="form-border" id="new_user" action="/user/sign_in" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="✓"><input type="hidden" name="authenticity_token" value="2ueAoItFDCKG6OizCkK1TMcp5qUG4mPGKQlsBRUtTfL9dZccn3zYSw2H9z4Y/yjtX7osUcm+7ScPZehCJAXrIA==" autocomplete="off"><input type="hidden" name="user[redirect_to]" id="user_redirect_to">
<div class="form-group">
<label class="sr-only" for="user_email">Email</label>
<input placeholder="Email" required="required" class="form-control" type="email" name="user[email]" id="user_email" autocomplete="off">
</div>
<div class="form-group">
<label class="sr-only" for="user_password">Password</label>
<input placeholder="Password" required="required" class="form-control" type="password" name="user[password]" id="user_password" autocomplete="off">
</div>
<button name="button" type="submit" data-disable-with="Signing In..." class="btn btn-orange btn-block">Sign in</button>
</form><p>
<a class="more-links" href="/user/password/new">Lost your password? Reset it here.</a>
<a class="more-links" href="/user/confirmation/new">Didn't get your confirmation email?</a>
</p>
</div>
</div>
</section>
</div>

</section>

<footer class="bc-body bc-footer" role="contentinfo">
<div class="bc-footer__content">
<a class="bc-footer__back-top" href="#">Back to top ↑</a>
<nav class="bc-footer__row bc-footer__nav">
<ul>
<li class="bc-footer__nav-item">
<a href="https://www.bugcrowd.com/how-it-works/">How it Works</a>
</li>
<li class="bc-footer__nav-item">
<a href="https://www.bugcrowd.com/solutions/">Solutions</a>
<ul class="bc-footer__subnav">
<li><a href="https://www.bugcrowd.com/solutions/platform/">Platform</a></li>
<li><a href="https://www.bugcrowd.com/solutions/program-types/">Program Types</a></li>
<li><a href="https://www.bugcrowd.com/solutions/meet-the-crowd/">Meet the Crowd</a></li>
</ul>
</li>
<li class="bc-footer__nav-item">
<a href="https://www.bugcrowd.com/customers/">Customers</a>
</li>
<li class="bc-footer__nav-item">
<a href="https://www.bugcrowd.com/resources">Resources</a>
<ul class="bc-footer__subnav">
<li><a href="https://www.bugcrowd.com/resources/for-companies/">For Companies</a></li>
<li><a href="https://www.bugcrowd.com/resources/for-researchers/">For Researchers</a></li>
<li><a href="https://www.bugcrowd.com/resources/events/">Events</a></li>
</ul>
</li>
<li class="bc-footer__nav-item">
<a href="https://www.bugcrowd.com/about/">About</a>
<ul class="bc-footer__subnav">
<li><a href="https://blog.bugcrowd.com">Blog</a></li>
<li><a href="https://www.bugcrowd.com/about/press/">Press</a></li>
<li><a href="https://www.bugcrowd.com/about/careers/">Careers</a></li>
<li><a href="https://www.bugcrowd.com/about/partners/">Partners</a></li>
<li><a href="https://www.bugcrowd.com/about/contact/">Contact</a></li>
</ul>
</li>
<li class="bc-footer__nav-item bc-footer__nav-item--special">
<a href="https://bugcrowd.com/programs/">Active Programs</a>
<a href="https://www.bugcrowd.com/bug-bounty-list/">Bug Bounty List</a>
</li>
</ul>
</nav>
<nav class="bc-footer__bottom">
<div class="bc-footer__legal-item">
<a href="https://www.bugcrowd.com/"><img class="bc-footer__logo" src="https://assets.bugcrowdusercontent.com/assets/logo-full.min-f998a616b3634d5f0bf9900699ff720cbe5b7a922859cf8703c1895cc8ce5a42.svg" alt="Logo full.min">
</a></div>
<div class="bc-footer__legal-item">
<a href="https://www.bugcrowd.com/terms-and-conditions/">Terms &amp; Conditions</a>
</div>
<div class="bc-footer__legal-item">
Copyright © 2017 Bugcrowd
</div>
<ul class="bc-footer__social">
<li>
<a aria-label="LinkedIn" href="https://www.linkedin.com/company/bugcrowd"><span class="fa fa-linkedin-box"></span>
</a></li>
<li>
<a aria-label="Twitter" href="https://twitter.com/bugcrowd"><span class="fa fa-twitter-box"></span>
</a></li>
<li>
<a aria-label="Facebook" href="https://www.facebook.com/bugcrowd"><span class="fa fa-facebook-box"></span>
</a></li>
<li>
<a aria-label="YouTube" href="https://www.youtube.com/channel/UCo1NHk_bgbAbDBc4JinrXww"><span class="fa fa-youtube-box"></span>
</a></li>
</ul>
</nav>
</div>
</footer>

<script src="https://assets.bugcrowdusercontent.com/assets/public-417dd0b33f661b8dfcabff876f867edb74c6fc751560c3e207b5943f4f854601.js">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

</script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

  <script type="text/javascript">

                // Injected by Arachni::Browser::Javascript
                _arachni_js_namespaceTaintTracer.update_tracers();
                _arachni_js_namespaceDOMMonitor.update_trackers();

    (function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
    (i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
    m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
    })(window,document,'script','//www.google-analytics.com/analytics.js','ga');

    ga('create', 'UA-35052704-1');
    ga('send', 'pageview');

  </script>
<script type="text/javascript">_arachni_js_namespaceTaintTracer.update_tracers();_arachni_js_namespaceDOMMonitor.update_trackers();</script> <!-- Injected by Arachni::Browser::Javascript -->

<iframe id="intercom-frame" style="display: none;"></iframe></body></html>
 [-] [utilities#exception_jail:428] Session: [Arachni::Session::Error::FormNotFound] Login form could not be found with: {:url=>"https://***********.com/user/sign_in", :inputs=>{"email"=>"lacroutelacroute@gmail.com", "password"=>"*********"}}
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/session.rb:356:in `login_from_configuration'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/session.rb:245:in `block in login'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `call'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/session.rb:244:in `login'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/components/plugins/autologin.rb:37:in `prepare'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:69:in `block (2 levels) in run'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `call'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:68:in `block in run'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:65:in `each'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:65:in `run'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/framework/parts/state.rb:348:in `prepare'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/framework.rb:110:in `run'
 [-] [utilities#exception_jail:428] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/ui/cli/framework.rb:80:in `block in run'
 [-] [utilities#exception_jail:429] Session: 
 [-] [utilities#exception_jail:430] Session: Parent:
 [-] [utilities#exception_jail:431] Session: Arachni::Session
 [-] [utilities#exception_jail:432] Session: 
 [-] [utilities#exception_jail:433] Session: Block:
 [-] [utilities#exception_jail:434] Session: #<Proc:0x000000027c7de0@/opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/session.rb:244>
 [-] [utilities#exception_jail:435] Session: 
 [-] [utilities#exception_jail:436] Session: Caller:
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/session.rb:244:in `login'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/components/plugins/autologin.rb:37:in `prepare'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:69:in `block (2 levels) in run'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `call'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/utilities.rb:425:in `exception_jail'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:68:in `block in run'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:65:in `each'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/plugin/manager.rb:65:in `run'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/framework/parts/state.rb:348:in `prepare'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/lib/arachni/framework.rb:110:in `run'
 [-] [utilities#exception_jail:437] Session: /opt/arachni-1.5.1-0.5.12/system/gems/gems/arachni-1.5.1/ui/cli/framework.rb:80:in `block in run'
 [-] [utilities#exception_jail:438] Session: --------------------------------------------------------------------------------
 [2017-06-18 14:39:34 +0200 - 9.1] [!] [browser#shutdown:378] Browser: Shutting down...
 [2017-06-18 14:39:34 +0200 - 0.3] [!!] [browser#shutdown:380] Browser: Killing process.
 [2017-06-18 14:39:34 +0200 - 0.0] [!!] [browser#shutdown:389] Browser: Shutting down proxy...
 [2017-06-18 14:39:34 +0200 - 11.2] [!!] [http/proxy_server#shutdown:95] ProxyServer: Shutting down...
 [2017-06-18 14:39:34 +0200 - 0.0] [!!] [http/proxy_server#shutdown:102] ProxyServer: ...shutdown.
 [2017-06-18 14:39:34 +0200 - 0.0] [!!] [browser#shutdown:391] Browser: ...done.
 [2017-06-18 14:39:34 +0200 - 0.0] [!] [browser#shutdown:401] Browser: ...shutdown complete.
 [-] [components/plugins/autologin#handle_error:84] AutoLogin: Could not find a form suiting the provided parameters.
 [2017-06-18 14:39:34 +0200 - 0.0] [!] [plugin/manager#block:164] 
 [2017-06-18 14:39:34 +0200 - 0.0] [!] [plugin/manager#block:165] Waiting on 0 plugins to finish:
 [2017-06-18 14:39:34 +0200 - 0.0] [!] [plugin/manager#block:166] 
 [2017-06-18 14:39:34 +0200 - 0.0] [!] [plugin/manager#block:167] 

================================================================================

 [+] Web Application Security Report - Arachni Framework

 [~] Report generated on: 2017-06-18 14:39:34 +0200
 [~] Report false positives at: http://github.com/Arachni/arachni/issues

 [+] System settings:
 [~] ---------------
 [~] Version:           1.5.1
 [~] Seed:              e9a90c8e7a7ca7f6c4a4580123498470
 [~] Audit started on:  2017-06-18 14:39:23 +0200
 [~] Audit finished on: 2017-06-18 14:39:34 +0200
 [~] Runtime:           00:00:11

 [~] URL:        https://*********.com/
 [~] User agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)

 [*] Audited elements: 
 [~] * Links
 [~] * Forms
 [~] * Cookies
 [~] * Headers
 [~] * XMLs
 [~] * JSONs
 [~] * UI inputs
 [~] * UI forms

 [*] Checks: unvalidated_redirect_dom

 [*] Filters: 
 [~]   Exclude:
 [~]     (?i-mx:logout)

 [~] ===========================

 [+] 0 issues were detected.

 [+] Plugin data:
 [~] ---------------

 [*] AutoLogin
 [~] ~~~~~~~~~~~~~~
 [~] Description: 
It looks for the login form in the user provided URL, merges its input fields
with the user supplied parameters and sets the cookies of the response and
request as framework-wide cookies.

**NOTICE**: If the login form is by default hidden and requires a sequence of DOM
interactions in order to become visible, this plugin will not be able to submit it.

 [+] Could not find a form suiting the provided parameters.

 [~] Report saved at: /home/fakessh/*********.com 2017-06-18 14_39_34 +0200.afr [0.0MB]
 [~] The scan has logged errors: /opt/arachni-1.5.1-0.5.12/bin/../system/logs/framework/error-10235.log

 [~] Audited 0 page snapshots.

 [~] Duration: 00:00:11
 [~] Processed 12/12 HTTP requests.
 [~] -- 0.0 requests/second.
 [~] Processed 0/0 browser jobs.
 [~] -- 0.0 second/job.

 [~] Burst response time sum     4.202 seconds
 [~] Burst response count        12
 [~] Burst average response time 0.35 seconds
 [~] Burst average               0.0 requests/second
 [~] Timed-out requests          0
 [~] Original max concurrency    20
 [~] Throttled max concurrency   20
Zapotek commented 7 years ago

The input names are not email and password, they are user[email] and user[password].