mubix / post-exploitation-wiki

Post Exploitation Wiki
MIT License
500 stars 112 forks source link

Wiki Freezes Firefox on Windows #9

Open tekwizz123 opened 10 years ago

tekwizz123 commented 10 years ago

When loading the wiki with Firefox, the page will generate many unresponsive script errors and will freeze the browser. The only way to solve this at present is to shut down the browser forcefully, thus loosing any other tabs that were in that session. This has been tested on Firefox Nightly and the latest stable version of Firefox and both seem to get the same results.

I have also disabled all of the addons to make sure that there was no other options getting in the way and the same results occur, with popup notifications informing you that the scripts are unresponsive. Using Chrome on the same system to browse the wiki works fine however.

I have tested this with the Wiki example linked in the README.md file, and whilst it doesn't seem to load any content, it does not crash the Firefox browser itself. Can anyone else verify if this same issue occurs to them or if this is just a localized problem?

mubix commented 10 years ago

Is this on Windows?

tekwizz123 commented 10 years ago

This in on a Windows 8 machine that I'm testing it on if that helps at all.

wireghoul commented 10 years ago

Works for me, did you get a crash report in "chrome://crashes/" ?

tekwizz123 commented 10 years ago

@wireghoul it was with Firefox that it hangs, not Chrome. Chrome will load the page fine.

wireghoul commented 10 years ago

Sorry, tested with FF, pasted the wrong crash url. FF uses "about:crashes"

tekwizz123 commented 10 years ago

Hmm...it doesn't seem to have any records within there. Its not actually crashing the browser though so I guess thats why its not coming up there. More just hogging all the resources so that I can't switch tabs etc. Looking at the code I think it is related to the fact that the page won't load until all of the resources for the page have already been loaded. This would explain the unresponsive script errors, as when I test it out with other wikis, the pages seem to load ok.

tekwizz123 commented 10 years ago

After some testing in Firefox on Linux it appears this is either a Windows specific problem or a problem with the Nightly version of Firefox.

WebBreacher commented 10 years ago

@tekwizz123 I too am having issues launching the wiki in FF (latest) on Win7. Just hangs with no content. Linux IceWeasel...no problem.

tekwizz123 commented 10 years ago

Well glad to know its not just me. Are you on the nightly or the stable release? Trying to pinpoint exactly what the issue steams from, but that at least confirms the issues exists specifically on Windows.

tekwizz123 commented 10 years ago

Ok, i'm now 100% sure this is a Windows issue. Tested it with the latest Aurora Firefox on Linux, and its loading the page fine. Title has already been updated to reflect this.

mubix commented 10 years ago

Does the hosted versions work for you two? @tekwizz123 @WebBreacher - via python, apache, or even the github hosted one.

WebBreacher commented 10 years ago

Win7 Ultimate, 64 bit. FF25 (stable), Chrome, and IE 9 all don't work with the python -m SimpleHTTPServer. The page just hangs.

tekwizz123 commented 10 years ago

Tested Windows 8, Firefox Aurora on python SimpleHTTPServer and with the Github hosted version. Both will cause Firefox to hang when loaded.

tekwizz123 commented 10 years ago

@WebBreacher You finding Chrome hangs for you? IE and Chrome are working fine for me over here, its just FF that isn't working. 64 bit as well over here.

tekwizz123 commented 10 years ago

In case it helps anyone, here is the logs from the SimpleHTTPServer:

python -m SimpleHTTPServer

Serving HTTP on 0.0.0.0 port 8000 ... [01/Nov/2013 23:28:54] "GET / HTTP/1.1" 200 - [01/Nov/2013 23:28:54] code 404, message File not found [01/Nov/2013 23:28:54] "GET /favicon.ico HTTP/1.1" 404 - [01/Nov/2013 23:28:54] code 404, message File not found [01/Nov/2013 23:28:54] "GET /favicon.ico HTTP/1.1" 404 - [01/Nov/2013 23:28:54] code 404, message File not found [01/Nov/2013 23:28:54] "GET /favicon.ico HTTP/1.1" 404 - [01/Nov/2013 23:28:56] "GET /post-exploitation-wiki/ HTTP/1.1" 200

[01/Nov/2013 23:28:57] "GET /post-exploitation-wiki/navigation.md HTTP/1.1" 200 - [01/Nov/2013 23:28:57] code 404, message File not found [01/Nov/2013 23:28:57] "GET /post-exploitation-wiki/config.json?dataType=text%2Fplain HTTP/1.1" 404 - [01/Nov/2013 23:28:57] "GET /post-exploitation-wiki/ HTTP/1.1" 200

WebBreacher commented 10 years ago

That is what I get too for python from IE9 and FF25 Windows.

mubix commented 10 years ago

I was able to get it working using HFS: http://www.rejetto.com/hfs/

mubix commented 10 years ago

Also worked with Mongoose Tiny: http://cesanta.com/downloads.html

tekwizz123 commented 10 years ago

@mubix Tried the HFS on my desktop...still freezes up. Haven't tried Mongoose yet.

mubix commented 10 years ago

Seems to work on Win8.1 w/ Firefox 25 and IE 10 + HFS. It just shows no content when loaded locally. Haven't been able to reproduce the freeze yet.

screen shot 2013-11-02 at 8 41 25 am

mubix commented 10 years ago

Also loads just fine as a local file: screen shot 2013-11-02 at 8 45 18 am

tekwizz123 commented 10 years ago

@mubix Hmm, going to try downgrading my Firefox from Nightly to Stable. If it works then its most likely a Nightly issue.

tekwizz123 commented 10 years ago

Seems that the error occurs in url of page here/index.html:190 so its line 190 thats causing the issues im guessing. Tried this again using both the Github repo and HFS with Firefox 25.0 on Windows 8.1 with NoScript addon enabled, but allowing scripts.

Doing one last try with addons disabled, otherwise i'm really not sure why there appears to be a difference between the computers.

tekwizz123 commented 10 years ago

Ok so it appears that even with all addons disabled in Firefox 25.0 on Windows 8.1 on my pc, the page will still freeze if I load it from a local HFS server.

WebBreacher commented 10 years ago

Yeah. I'm using HFS on my Win7 with Chrome and it works fine. Gonna stick with that for now.

mubix commented 10 years ago

I think I might have found the problem. The aux.md file because it was a file name 'aux' gave Windows a heart attack when it tried to load. Firefox 25 might have been trying to pre-fetch the file. No idea. The file in msf/aux.md has been renamed to msf/auxiliary.md. See if you're still having problems.

tekwizz123 commented 10 years ago

Still getting errors when I load it with HFS and with the Github version. Just hangs and gives this message:

A script on this page may be busy, or it may have stopped responding. You can stop the script now, or you can continue to see if the script will complete.

Script: http://_ip_:8080/post-exploitation-wiki-master/index.html:190