search

flipkart-incubator / Astra

Automated Security Testing For REST API's
Apache License 2.0
2.49k stars 396 forks source link

Empty scan reports #79

Open Kamerabuilt opened 5 years ago

Kamerabuilt commented 5 years ago

I am able to scan, Iget a status message, and I see the scan in progress, however, when the scan is completed, and I click on it, I am simply getting a completely blank page with absolutely no info.

If the scan has no results, it should say so.

If it does have output, well then there is a bug and I am not sure what to do.

All it says is "Scanning report" on the top, and nothing else.

sagarpo commented 5 years ago

@Kamerabuilt If there has no vulnerability identified by the tool, it won't show anything on UI. We will add some message on UI if there has no bug.

Kamerabuilt commented 5 years ago

^^ Thanks, but then, how do I know if its really empty or that there is some bug? Can I access the reports through another method (via CLI for example)?

Kamerabuilt commented 5 years ago

I scanned a site that I know has many vulns, thats why I have doubts

sagarpo commented 5 years ago

@Kamerabuilt Reports can be accessible from Reports tab. Also which site did you try to scan? Did Astra identify bug?

Kamerabuilt commented 5 years ago

But all scans are empty. Is there a way to access them through the command line to make sure if they are really empty?

I tried on a tool called Pixi: https://github.com/thedeadrobots/pixi

It has an API built-in.

Also, I cannot know if bugs were found if the report is empty.

sagarpo commented 5 years ago

@Kamerabuilt Can you share the logs here? Logs file can be found at /logs/scan.log

Kamerabuilt commented 5 years ago

am gonna reinstall it from scratch and try again, if it still not working, I will upload the logs.

Do you have an app (maybe DVWA) that you know 100% will report bugs with Astra?

Kamerabuilt commented 5 years ago

Scan status is completed.

/logs/scan.log is empty

Scanning report is empty as well.

sagarpo commented 5 years ago

@Kamerabuilt Astra is a rest API security testing framework. It only scans REST API, not the web app.

Kamerabuilt commented 5 years ago

Did more testing, am still trying to figure out whats happening (on APIs and not just GET URLs), but one thing for sure is if a scan is empty, it should mention something in the reports page.

But why the scan log is empty? should it not have some debugging info, or inform us whether the DB is working, etc?

sagarpo commented 5 years ago

@Kamerabuilt We are logging everything on the logs (logs/scan.log). If there have no logs generated, that means something is not working properly. Can you share your OS, python & flask version?

Kamerabuilt commented 5 years ago

Sure: Linux kali 4.16.0-kali2-amd64 #1 SMP Debian 4.16.16-2kali2 (2018-07-04) x86_64 GNU/Linux Python 2.7.15 Python 3.6.7 Python2 flask: 1.0.2

sagarpo commented 5 years ago

@Kamerabuilt Are you using astra through docker?

Kamerabuilt commented 5 years ago

^^ yes. Any ideas what could it be?

sagarpo commented 5 years ago

If you are using docker, the logs can be found at /app/logs/scan.log. Please share that with us.

Kamerabuilt commented 5 years ago

Hi, found the logs, can I send them to you by email?

sagarpo commented 5 years ago

@Kamerabuilt You can share it here!

Kamerabuilt commented 5 years ago

172.17.0.1 - - [10/Dec/2018 16:38:52] "GET / HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:38:52] "GET /scan/scanids/ HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:38:57] "GET /scan/scanids/ HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:39:02] "GET /scan/scanids/ HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:39:07] "GET /scan/scanids/ HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:39:12] "GET /scan/scanids/ HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:39:17] "GET /scan/scanids/ HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:39:22] "GET /scan/scanids/ HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:39:23] "POST /scan/ HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:39:24] "GET /scan/scanids/ HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:39:27] "GET /scan/scanids/ HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:39:32] "GET /reports.html HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:39:32] "GET /scan/scanids/ HTTP/1.1" 200 - Sqlmap is running SQLi - Scan started. API is not vulnerable to sql injection SQLi - Task deleted: c51f365fd6aff638 XXE: Server started. Exception from sendrequest HTTPConnectionPool(host='localhost', port=8090): Max retries exceeded with url: / (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fd30162e0d0>: Failed to establish a new connection: [Errno 111] Connection refused',)) 172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /reports.html HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/main.css HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/main.js HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/jquery.min.js HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/scan.js HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/bootstrap.min.css HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/bootstrap.min.js HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /scan/scanids/ HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /reports.html HTTP/1.1" 200 - 172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/main.css HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/main.js HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/bootstrap.min.css HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/scan.js HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/bootstrap.min.js HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/jquery.min.js HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 - 172.17.0.1 - - [10/Dec/2018 16:40:07] "GET /scan/scanids/ HTTP/1.1" 200 -

Kamerabuilt commented 5 years ago

hmm the API / Application I am using does not have rate limiting, not sure whats that exception based on. Any ideas?

divyang-desai commented 5 years ago

I think this is an issue. We checked our web api project before, Astra was displaying 5 to 6 security issues. However then we deployed a new build on our staging server, we'd nothing fixed for those security issues, but the report now comes up clean. Not sure want is the issue.

sagarpo commented 5 years ago

@divyang-desai I will look into this. Can you share the logs?

sagarpo commented 5 years ago

@Kamerabuilt I will check that

divyang-desai commented 5 years ago

@sagarpo Find logs from scan.log as below

* Running on http://0.0.0.0:8094/ (Press CTRL+C to quit)
172.17.0.1 - - [04/Jan/2019 08:18:37] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:18:37] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:45] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:45] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:47] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:18:47] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:24] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:40] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:40] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:42] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:42] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:40:04] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:40:04] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:40:16] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:40:16] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:43:15] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:43:15] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 12:01:33] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -

 * Running on http://0.0.0.0:8094/ (Press CTRL+C to quit)
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET / HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:18] "POST /scan/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:27] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:27] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:47] "GET /scan/scanids/ HTTP/1.1" 200 -
sqlmap is started
SQLi - Scan started.
API is not vulnerable to sql injection
SQLi - Task deleted: 55860cd33a2888a4
XXE: Server started.
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:40] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:50] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:55] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/a029f75c1b0685a9b5d55dd63419a7d1 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 12:08:01] "GET /alerts/a029f75c1b0685a9b5d55dd63419a7d1 HTTP/1.1" 500 -
/app/logs # cat scan.log 
 * Running on http://0.0.0.0:8094/ (Press CTRL+C to quit)
172.17.0.1 - - [04/Jan/2019 08:18:37] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:18:37] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:18:45] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:45] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:18:47] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:18:47] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:21] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:24] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:31] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:33] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 08:19:40] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:40] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 08:19:42] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:19:42] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:40:04] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:40:04] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:40:16] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:40:16] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 08:43:15] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 08:43:15] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:01:27] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
Exception on /alerts/14cde48af9606dea4fb08539085775e6 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 12:01:33] "GET /alerts/14cde48af9606dea4fb08539085775e6 HTTP/1.1" 500 -

 * Running on http://0.0.0.0:8094/ (Press CTRL+C to quit)
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET / HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:05:55] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:18] "POST /scan/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:27] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:27] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:29] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:30] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:31] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:32] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:33] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:35] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:36] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:46] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:06:47] "GET /scan/scanids/ HTTP/1.1" 200 -
sqlmap is started
SQLi - Scan started.
API is not vulnerable to sql injection
SQLi - Task deleted: 55860cd33a2888a4
XXE: Server started.
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:39] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:40] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:48] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:49] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:50] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:53] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /reports.html HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/main.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/main.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/scan.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/jquery.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap-table.min.css HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /static/bootstrap-table.min.js HTTP/1.1" 304 -
172.17.0.1 - - [04/Jan/2019 12:07:54] "GET /scan/scanids/ HTTP/1.1" 200 -
172.17.0.1 - - [04/Jan/2019 12:07:55] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/a029f75c1b0685a9b5d55dd63419a7d1 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 12:08:01] "GET /alerts/a029f75c1b0685a9b5d55dd63419a7d1 HTTP/1.1" 500 -
172.17.0.1 - - [04/Jan/2019 12:09:10] "GET /reports.html HTTP/1.1" 200 -
Exception on /alerts/a029f75c1b0685a9b5d55dd63419a7d1 [GET]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 2292, in wsgi_app
    response = self.full_dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1815, in full_dispatch_request
    rv = self.handle_user_exception(e)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1718, in handle_user_exception
    reraise(exc_type, exc_value, tb)
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1813, in full_dispatch_request
    rv = self.dispatch_request()
  File "/usr/local/lib/python2.7/site-packages/flask/app.py", line 1799, in dispatch_request
    return self.view_functions[rule.endpoint](**req.view_args)
  File "./api.py", line 172, in return_alerts
    result = fetch_records(scanid)
  File "./api.py", line 133, in fetch_records
    if data['req_body'] == None:
KeyError: 'req_body'
172.17.0.1 - - [04/Jan/2019 12:09:12] "GET /alerts/a029f75c1b0685a9b5d55dd63419a7d1 HTTP/1.1" 500 -
sagarpo commented 5 years ago

@divyang-desai Can you share the test URL that you tried?

Kamerabuilt commented 5 years ago

Any feedback on this yet? Still same issue (you can test it with pixi, it has a built-in API service, https://github.com/thedeadrobots/pixi) :

Sqlmap is running SQLi - Scan started. API is not vulnerable to sql injection SQLi - Task deleted: c51f365fd6aff638 XXE: Server started. Exception from sendrequest HTTPConnectionPool(host='localhost', port=8090): Max retries exceeded with url: / (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fd30162e0d0>: Failed to establish a new connection: [Errno 111] Connection refused',)) 172.17.0.1 - - [10/Dec/2018 16:39:58] "GET /reports.html HTTP/1.1" 200 -

sagarpo commented 5 years ago

@Kamerabuilt Give me some time. I am checking this.

vinayakooyala commented 5 years ago

@Kamerabuilt how did you get the docker logs? can you please share the command and navigation path?