aronmolnar
commented
3 months ago Can you please run the command with --debug for more details?
cat ./nessus_v_unknown.nessus | reptor nessus --upload -k --debug
Von: Zhi Yang @.> Gesendet: Donnerstag, 15. August 2024 08:10 An: Syslifters/sysreptor @.> Cc: Subscribed @.***> Betreff: [Syslifters/sysreptor] [Urgent Enquiry] Unable to setup Caddy webserver locally to upload Nessus findings to Sysreptor (running locally as well) (Issue #303)
I followed the guide to run setup.sh from https://docs.sysreptor.com/setup/webserver/. I wanted to setup Caddy webserver listening on port 80 then forward it to Sysreptor which is listening on port 8000 (by default), without any certificates involved.
When I ran the command, these errors came up:
@.:~/Desktop$ cat ./nessus_v_unknown.nessus | reptor nessus --upload Reading from stdin... HTTPSConnectionPool(host='localhost', port=443): Max retries exceeded with url: /api/v1/pentestprojects/a8331730-b0aa-4b3c-a9ae-2344c1c2f822/notes/ (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1007)'))) @.:~/Desktop$ cat ./nessus_v_unknown.nessus | reptor nessus --upload -k Reading from stdin... 405 Client Error: Method Not Allowed for url: https://localhost/api/v1/pentestprojects/a8331730-b0aa-4b3c-a9ae-2344c1c2f822/notes/
The setup.sh that I ran (cloned from sysreptor github repo):
!/bin/bash
cd dirname "$BASH_SOURCE"
if
test -f Caddyfile
then
echo "Caddyfile exists. Skipping web server setup."
read -p "Press any key to continue installation..."
echo ""
cd - >/dev/null
return 2>/dev/null || exit -1 # return if script is source, exit if in process
fi
while [[ "$SYSREPTOR_WEBSERVER" != [yY] && "$SYSREPTOR_WEBSERVER" != [nN] ]]
do
echo ""
echo "SysReptor runs on localhost (127.0.0.1) by default."
read -p "Should we setup a webserver (Caddy in Docker) for you to expose it to your local network or the Internet? [y/n]: " SYSREPTOR_WEBSERVER
if [[ "$SYSREPTOR_WEBSERVER" == [yY] ]]
then
while [[ "$SYSREPTOR_LETSENCRYPT" != [yY] && "$SYSREPTOR_LETSENCRYPT" != [nN] ]]
do
echo ""
echo "Should we take care of your webserver HTTPS certificate using LetsEncrypt?"
echo "For this, you must set up:"
echo " 1. a valid domain name resolving to your public IP address"
echo " 2. port 80 of your must be publicly reachable"
read -p "Want a LetsEncrypt webserver certificate? [y/n]: " SYSREPTOR_LETSENCRYPT
done
while ! case "$SYSREPTOR_CADDY_PORT" in ''|[!0-9]) false;;esac;
do
if [[ "$SYSREPTOR_LETSENCRYPT" == [yY] ]]
then
default_port=443
else
default_port=80
fi
read -p "What port should the webserver use? [$default_port] " SYSREPTOR_CADDY_PORT
SYSREPTOR_CADDY_PORT=${SYSREPTOR_CADDY_PORT:-$default_port}
if [[ "$SYSREPTOR_CADDY_PORT" -lt 1 || "$SYSREPTOR_CADDY_PORT" -gt 65535 ]]
then
echo "Invalid port number. Please enter a valid port number between 1 and 65535."
SYSREPTOR_CADDY_PORT=""
elif [[ "$SYSREPTOR_CADDY_PORT" -eq 8000 ]]
then
echo "The Django app uses port 8000 on 127.0.0.1. Please use a different port."
SYSREPTOR_CADDY_PORT=""
fi
done
if [[ "$SYSREPTOR_LETSENCRYPT" == [yY] ]]
then
while [ -z "$SYSREPTOR_CADDY_FQDN" ]
do
read -p "What is your publicly reachable fully qualified domain name (e.g., sysreptor.example.com)? " SYSREPTOR_CADDY_FQDN
done
fi
fi
done
if [[ "$SYSREPTOR_WEBSERVER" == [nN] ]]
then
echo "Okay. Won't set up a webserver."
else
Create config
echo """# Do not modify. This file is automatically generated.Changes will be overwritten.
$SYSREPTOR_CADDY_FQDN:$SYSREPTOR_CADDY_PORT
reverse_proxy http://127.0.0.1:8000""" > Caddyfile echo "Setting up your web server..."
docker_compose_file="../docker-compose.yml"
include_caddy=" - caddy/docker-compose.yml"
if ! grep -q "^$include_caddy" "$docker_compose_file"
then
# Include Caddy in docker-compose.yml
sed -i "s#include:#include:\n$include_caddy#" "$docker_compose_file"
fifi docker container stop sysreptor-caddy 1>/dev/null 2>&1 && docker container rm sysreptor-caddy 1>/dev/null 2>&1 || true echo "" cd - >/dev/null return 2>/dev/null || true # return if script is source
cd dirname "$BASH_SOURCE"
cd ..
docker compose up -d
cd - >/dev/null
config.yaml (in ./sysreptor)
@.***:~/.sysreptor$ cat config.yaml
projectid: a8331730-b0aa-4b3c-a9ae-2344c1c2f822
server: http://localhost
token: sysreptor
docker containers currently up and running
@.***:~/Desktop$ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES af199aad2194 sysreptor-app "/bin/sh -c 'python3…" 2 weeks ago Up 56 minutes (healthy) 127.0.0.1:8000->8000/tcp sysreptor-app 587376d1c631 postgres:14 "docker-entrypoint.s…" 2 weeks ago Up 56 minutes (healthy) 5432/tcp sysreptor-db
— Reply to this email directly, view it on GitHubhttps://github.com/Syslifters/sysreptor/issues/303, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AGANCTYUAE7DQDGEEFD6QD3ZRRA6FAVCNFSM6AAAAABMRUKB5KVHI2DSMVQWIX3LMV43ASLTON2WKOZSGQ3DONBXHA4TCMQ. You are receiving this because you are subscribed to this thread.Message ID: @.***>
Zhiyang123
I followed the guide to run setup.sh from https://docs.sysreptor.com/setup/webserver/. I wanted to setup Caddy webserver listening on port 80 then forward it to Sysreptor which is listening on port 8000 (by default), without any certificates involved.
When I ran the command, these errors came up:
The setup.sh that I ran (cloned from sysreptor github repo):
config.yaml (in ./sysreptor)
docker containers currently up and running