blacklanternsecurity / bbot

A recursive internet scanner for hackers.
https://www.blacklanternsecurity.com/bbot/
GNU General Public License v3.0
4.6k stars 416 forks source link

Warning During Neo4j Inserts #1531

Closed puzzlepeaches closed 2 months ago

puzzlepeaches commented 3 months ago

I'm back; no memes this time.

Describe the bug When feeding data to neo4j during a scan, error messages similar to the following are displayed:

Received notification from DBMS server: {severity: WARNING} {code: Neo.ClientNotification.Statement.FeatureDeprecationWarning} {category: DEPRECATION} {title: This feature is deprecated and will be removed in future versions.} {description: The query used a deprecated function: `id`.} {position: line: 3, column: 16, offset: 87} for query: "MERGE (_:DNS_NAME { id: $eventdata['id'] })\n        SET _ += $eventdata\n        RETURN id(_)"
Received notification from DBMS server: {severity: WARNING} {code: Neo.ClientNotification.Statement.FeatureDeprecationWarning} {category: DEPRECATION} {title: This feature is deprecated and will be removed in future versions.} {description: The query used a deprecated function: `id`.} {position: line: 2, column: 17, offset: 25} for query: '\n        MATCH (a) WHERE id(a) = $src_id\n        MATCH (b) WHERE id(b) = $dst_id\n        MERGE (a)-[_:httpx]->(b)\n        SET _.timestamp = $timestamp'
Received notification from DBMS server: {severity: WARNING} {code: Neo.ClientNotification.Statement.FeatureDeprecationWarning} {category: DEPRECATION} {title: This feature is deprecated and will be removed in future versions.} {description: The query used a deprecated function: `id`.} {position: line: 3, column: 33, offset: 65} for query: '\n        MATCH (a) WHERE id(a) = $src_id\n        MATCH (b) WHERE id(b) = $dst_id\n        MERGE (a)-[_:httpx]->(b)\n        SET _.timestamp = $timestamp'
Received notification from DBMS server: {severity: WARNING} {code: Neo.ClientNotification.Statement.FeatureDeprecationWarning} {category: DEPRECATION} {title: This feature is deprecated and will be removed in future versions.} {description: The query used a deprecated function: `id`.} {position: line: 3, column: 16, offset: 87} for query: "MERGE (_:DNS_NAME { id: $eventdata['id'] })\n        SET _ += $eventdata\n        RETURN id(_)"
Received notification from DBMS server: {severity: WARNING} {code: Neo.ClientNotification.Statement.FeatureDeprecationWarning} {category: DEPRECATION} {title: This feature is deprecated and will be removed in future versions.} {description: The query used a deprecated function: `id`.} {position: line: 3, column: 16, offset: 87} for query: "MERGE (_:DNS_NAME { id: $eventdata['id'] })\n        SET _ += $eventdata\n        RETURN id(_)"

This appears to occur for all insert types. While not a breaking issue, the logged terminal output is quite cluttered. Low-priority issue.

Expected behavior No log message is supposed to be displayed from neo4j inserts.

BBOT Command Example command:

bbot -t /home/ubuntu/data/targets.dns.txt -f subdomain-enum -n subdomain_enum -y -om json neo4j

Docker container running with compose file:

services:
    neo4j:
        restart: unless-stopped
        ports:
            - 127.0.0.1:7687:7687
            - 127.0.0.1:7474:7474
        volumes:
            - /home/ubuntu/data/neo4j/neo4j:/data/
        environment:
            - NEO4J_AUTH=neo4j/[REDACTED]
        image: neo4j:latest

OS, BBOT Installation Method + Version Example: OS: Ubuntu Linux (ARM), Installation method: pipx, BBOT version: v1.1.8

BBOT Config Can provide upon request.

Logs The errors are not being shown in debug logs.

Screenshots N/A

puzzlepeaches commented 3 months ago

Could potentially be slated for resolution during #1452

TheTechromancer commented 3 months ago

Welcome back! Yes that's a good point, I think we should be able to fix this at the same time as https://github.com/blacklanternsecurity/bbot/issues/1452.

TheTechromancer commented 2 months ago

Fixed in https://github.com/blacklanternsecurity/bbot/pull/1582.