search

flipkart-incubator / Astra

Automated Security Testing For REST API's
Apache License 2.0
2.49k stars 396 forks source link

Failed to test Broken authentication and session management #70

Closed yasserEnisoo closed 5 years ago

yasserEnisoo commented 5 years ago

hello I just start learning " Automated Security Testing For REST API's" so I choose ASTRA to use it and after following Installing Step's , I try to run this command in order to start a scan for GET api, $ python astra.py -u https://jsonplaceholder.typicode.com/ But their is no test running !! and I have this console message : "MongoClient opened before fork. Create MongoClient only " Failed to test Broken authentication and session management ----------------------------------------------------------------------------------------- Any help please ?? Steps which I followed : Docker Installation Run Mongo Container: $ docker pull mongo $ docker run --name astra-mongo -d mongo Installing CLI Docker : $ git clone -b docker-cli https://github.com/flipkart-incubator/Astra.git $ cd Astra $ docker build -t astra-cli . $ docker run --rm -it --link astra-mongo:mongo astra-cli and I use Docker version 18.06.1-ce, build e68fc7a But the problem

sagarpo commented 5 years ago

@yasserEnisoo Can you try scanning the same URL through the web interface? Let us know if you face the same issue in web interface?

yasserEnisoo commented 5 years ago

Yes, I think it work's

yasserEnisoo commented 5 years ago

Now , when I test with ASTRA CLI I have this error ! AttributeError: 'NoneType' object has no attribute 'items' Command which I made : python astra.py -u https://jsonplaceholder.typicode.com/todos -m POST -headers '{"Username" : "test" , "Password" : "test"}' -- body '{ "userId": 10, "id": 200, "title": "ipsam aperiam voluptates qui", "completed": false }'

sagarpo commented 5 years ago

Can you run the scan through web interface meanwhile? I will look into this.