blacklanternsecurity / bbot

A recursive internet scanner for hackers.
https://www.blacklanternsecurity.com/bbot/
GNU General Public License v3.0
4.1k stars 374 forks source link

Badsecrets Bug #1353

Closed TheTechromancer closed 2 months ago

TheTechromancer commented 2 months ago
[INFO] Scan with 81 modules seeded with 1 targets
[ERRR] Encountered unknown error: Traceback (most recent call last):
  File "/usr/local/lib/python3.11/dist-packages/bbot/cli.py", line 301, in _main
    await scanner._prep()
  File "/usr/local/lib/python3.11/dist-packages/bbot/scanner/scanner.py", line 295, in _prep
    await self.load_modules()
  File "/usr/local/lib/python3.11/dist-packages/bbot/scanner/scanner.py", line 523, in load_modules
    loaded_modules, failed = self._load_modules(modules)
                             ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/dist-packages/bbot/scanner/scanner.py", line 1017, in _load_modules
    for module_name, module_class in module_loader.load_modules(modules).items():
                                     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/dist-packages/bbot/core/helpers/modules.py", line 252, in load_modules
    module = self.load_module(module_name)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/dist-packages/bbot/core/helpers/modules.py", line 276, in load_module
    module_variables = importlib.import_module(import_path, "bbot")
                       ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/importlib/__init__.py", line 126, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "<frozen importlib._bootstrap>", line 1204, in _gcd_import
  File "<frozen importlib._bootstrap>", line 1176, in _find_and_load
  File "<frozen importlib._bootstrap>", line 1147, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 690, in _load_unlocked
  File "<frozen importlib._bootstrap_external>", line 940, in exec_module
  File "<frozen importlib._bootstrap>", line 241, in _call_with_frames_removed
  File "/usr/local/lib/python3.11/dist-packages/bbot/modules/badsecrets.py", line 5, in <module>
    from badsecrets.base import carve_all_modules
  File "/usr/local/lib/python3.11/dist-packages/badsecrets/__init__.py", line 12, in <module>
    modules = importlib.import_module(f"badsecrets.modules.{file.stem}", "badsecrets")
              ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/importlib/__init__.py", line 126, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/local/lib/python3.11/dist-packages/badsecrets/modules/flask_signedcookies.py", line 4, in <module>
    from flask_unsign import verify as flaskVerify
  File "/usr/local/lib/python3.11/dist-packages/flask_unsign/__init__.py", line 26, in <module>
    from flask_unsign.session import sign, decode, verify
  File "/usr/local/lib/python3.11/dist-packages/flask_unsign/session.py", line 9, in <module>
    from flask.json.tag import TaggedJSONSerializer
  File "/usr/lib/python3.11/flask/__init__.py", line 7, in <module>
    from .app import Flask as Flask
  File "/usr/lib/python3.11/flask/app.py", line 27, in <module>
    from . import cli
  File "/usr/lib/python3.11/flask/cli.py", line 17, in <module>
    from .helpers import get_debug_flag
  File "/usr/lib/python3.11/flask/helpers.py", line 14, in <module>
    from werkzeug.urls import url_quote
ImportError: cannot import name 'url_quote' from 'werkzeug.urls' (/usr/lib/python3.11/werkzeug/urls.py)

/usr/lib/python3.11/multiprocessing/resource_tracker.py:254: UserWarning: resource_tracker: There appear to be 5 leaked semaphore objects to clean up at shutdown
  warnings.warn('resource_tracker: There appear to be %d '

As discussed in: https://discord.com/channels/859164869970362439/1116459945278320750/1236828474728251503

liquidsec commented 2 months ago

I am unable to reproduce as it appears to be related to a specific user python environment.

TheTechromancer commented 2 months ago

Closing this one as it's probably a symptom of not running BBOT in a proper venv.