kpcyrd / sn0int

Semi-automatic OSINT framework and package manager
https://sn0int.readthedocs.io/
GNU General Public License v3.0
2k stars 178 forks source link

Error: EOF while parsing a value at line 1 column 0 #70

Closed csak-9604 closed 5 years ago

csak-9604 commented 5 years ago

Hello, Following your tutorial, I get the following Error: [sn0int][example][kpcyrd/ctlogs] > select domains [sn0int][example][kpcyrd/ctlogs] > add domain [?] Domain: example.com [sn0int][example][kpcyrd/ctlogs] > run [-] Failed "example.com": EOF while parsing a value at line 1 column 0 [+] Finished kpcyrd/ctlogs (1 errors)

kpcyrd commented 5 years ago

hey, thanks for your report!

This is probably a seccomp failure, which means the child used a syscall that hasn't been whitelisted and got killed.

If you're on systemd, can you check if a coredump has been written by running coredumpctl and checking if there's something related to sn0int?

Also, which distro and architecture are you using? (uname -m)

csak-9604 commented 5 years ago

Hello, Thanks for the reply. root@kali:~# uname -a Linux kali 4.19.0-kali1-686-pae #1 SMP Debian 4.19.13-1kali1 (2019-01-03) i686GNU/Linux`

I could not find any sn0int related infos in the systemd --dump-core, but I am not sure if i am using it right.

kpcyrd commented 5 years ago

It's very likely i686 uses syscalls I haven't whitelisted just. I'm going to try this myself and make sure the sandbox works correctly on that architecture as well. This is going to be included in the next patch release.

Thanks for you help!

csak-9604 commented 5 years ago

great! thank you

jasonsperry commented 5 years ago

I receive this as well running sn0wint on Kali in the Windows Linux Subsystem. Do you think it would be caused by limitations in WLS or would it be whitelisting syscalls as for the i686 architecture?

uname -a Linux <MACHINENAME> 4.4.0-17134-Microsoft #523-Microsoft Mon Dec 31 17:49:00 PST 2018 x86_64 GNU/Linux

csak-9604 commented 5 years ago

hello, works now. thank you

kpcyrd commented 5 years ago

@csak-9604 awesome!

@jasonsperry please try again with the current maser. In case that still fails please open a new issue that is WSL specific, but I'm not sure I'm officially going to support that :/ There's a section in the documentation about sandbox troubleshooting if you want to look into it: https://sn0int.readthedocs.io/en/latest/sandbox.html#diagnosing-a-sandbox-failure