olacabs / jackhammer

Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
https://jch.olacabs.com/userguide
Other
718 stars 162 forks source link

Jackhammer is up, but unable to load application. getting the error "We're sorry, but something went wrong." #89

Open Dilshandila opened 6 years ago

Dilshandila commented 6 years ago

Hi, I managed to install jackhammer and I'm seeing the "jackhammer is up" when I start the docker also. But when I access it from firefox, I'm getting "We're sorry, but something went wrong."

Status:

root@ubuntu:/home/test/jackhammer# docker-compose ps Name Command State Ports

jackhammer-db docker-entrypoint.sh mysqld Up 0.0.0.0:3306->3306/tcp jackhammer_redis_1 docker-entrypoint.sh redis ... Up 0.0.0.0:32770->6379/tcp jackhammer_web_1 bash -c mkdir -p tmp/pids ... Up 0.0.0.0:5000->3000/tcp

Log file:

root@ubuntu:/home/test/jackhammer# docker-compose logs Attaching to jackhammer_web_1, jackhammer-db, jackhammer_redis_1 web_1 | Puma starting in single mode... web_1 | Version 3.11.0 (ruby 2.3.0-p0), codename: Love Song web_1 | Min threads: 0, max threads: 16 web_1 | Environment: production web_1 | /root/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/rb-readline-0.5.1/lib/readline.rb:458: warning: already initialized constant Readline::HISTORY web_1 | /root/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/rb-readline-0.5.1/lib/readline.rb:486: warning: already initialized constant Readline::FILENAME_COMPLETION_PROC web_1 | /root/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/rb-readline-0.5.1/lib/readline.rb:517: warning: already initialized constant Readline::USERNAME_COMPLETION_PROC web_1 | /root/.rbenv/versions/2.3.0/lib/ruby/gems/2.3.0/gems/rb-readline-0.5.1/lib/readline.rb:523: warning: already initialized constant Readline::VERSION web_1 | Listening on tcp://0.0.0.0:3000 web_1 | Use Ctrl-C to stop web_1 | 2018-04-30 01:52:06 +0000: HTTP parse error, malformed request (): #<Puma::HttpParserError: Invalid HTTP format, parsing fails.> web_1 | --- jackhammer-db | Initializing database jackhammer-db | 2018-04-30T01:50:57.109158Z 0 [Warning] [MY-011070] [Server] 'Disabling symbolic links using --skip-symbolic-links (or equivalent) is the default. Consider not using this option as it' is deprecated and will be removed in a future release. jackhammer-db | 2018-04-30T01:50:57.109266Z 0 [System] [MY-013169] [Server] /usr/sbin/mysqld (mysqld 8.0.11) initializing of server in progress as process 26 jackhammer-db | mbind: Operation not permitted jackhammer-db | 2018-04-30T01:51:05.752448Z 5 [Warning] [MY-010453] [Server] root@localhost is created with an empty password ! Please consider switching off the --initialize-insecure option. jackhammer-db | 2018-04-30T01:51:09.181516Z 5 [Warning] [MY-010315] [Server] 'user' entry 'mysql.infoschema@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:09.181612Z 5 [Warning] [MY-010315] [Server] 'user' entry 'mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:09.181640Z 5 [Warning] [MY-010315] [Server] 'user' entry 'mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:09.181661Z 5 [Warning] [MY-010315] [Server] 'user' entry 'root@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:09.181689Z 5 [Warning] [MY-010323] [Server] 'db' entry 'performance_schema mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:09.181754Z 5 [Warning] [MY-010323] [Server] 'db' entry 'sys mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:09.181778Z 5 [Warning] [MY-010311] [Server] 'proxies_priv' entry '@ root@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:09.181882Z 5 [Warning] [MY-010330] [Server] 'tables_priv' entry 'user mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:09.181903Z 5 [Warning] [MY-010330] [Server] 'tables_priv' entry 'sys_config mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:15.035825Z 0 [System] [MY-013170] [Server] /usr/sbin/mysqld (mysqld 8.0.11) initializing of server has completed jackhammer-db | Database initialized jackhammer-db | MySQL init process in progress... jackhammer-db | 2018-04-30T01:51:17.583028Z 0 [Warning] [MY-011070] [Server] 'Disabling symbolic links using --skip-symbolic-links (or equivalent) is the default. Consider not using this option as it' is deprecated and will be removed in a future release. jackhammer-db | 2018-04-30T01:51:17.585834Z 0 [System] [MY-010116] [Server] /usr/sbin/mysqld (mysqld 8.0.11) starting as process 146 jackhammer-db | mbind: Operation not permitted jackhammer-db | MySQL init process in progress... jackhammer-db | 2018-04-30T01:51:19.194674Z 0 [Warning] [MY-010068] [Server] CA certificate ca.pem is self signed. jackhammer-db | 2018-04-30T01:51:19.228854Z 0 [Warning] [MY-011810] [Server] Insecure configuration for --pid-file: Location '/var/run/mysqld' in the path is accessible to all OS users. Consider choosing a different directory. jackhammer-db | 2018-04-30T01:51:19.265480Z 0 [Warning] [MY-010315] [Server] 'user' entry 'mysql.infoschema@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:19.265648Z 0 [Warning] [MY-010315] [Server] 'user' entry 'mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:19.265678Z 0 [Warning] [MY-010315] [Server] 'user' entry 'mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:19.265700Z 0 [Warning] [MY-010315] [Server] 'user' entry 'root@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:19.265738Z 0 [Warning] [MY-010323] [Server] 'db' entry 'performance_schema mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:19.265757Z 0 [Warning] [MY-010323] [Server] 'db' entry 'sys mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:19.265780Z 0 [Warning] [MY-010311] [Server] 'proxies_priv' entry '@ root@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:19.273554Z 0 [Warning] [MY-010330] [Server] 'tables_priv' entry 'user mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:19.273650Z 0 [Warning] [MY-010330] [Server] 'tables_priv' entry 'sys_config mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:19.285756Z 0 [System] [MY-010931] [Server] /usr/sbin/mysqld: ready for connections. Version: '8.0.11' socket: '/var/run/mysqld/mysqld.sock' port: 0 MySQL Community Server - GPL. jackhammer-db | Warning: Unable to load '/usr/share/zoneinfo/iso3166.tab' as time zone. Skipping it. jackhammer-db | Warning: Unable to load '/usr/share/zoneinfo/leap-seconds.list' as time zone. Skipping it. jackhammer-db | Warning: Unable to load '/usr/share/zoneinfo/zone.tab' as time zone. Skipping it. jackhammer-db | Warning: Unable to load '/usr/share/zoneinfo/zone1970.tab' as time zone. Skipping it. jackhammer-db | 2018-04-30T01:51:30.721539Z 10 [Warning] [MY-010315] [Server] 'user' entry 'mysql.infoschema@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.722664Z 10 [Warning] [MY-010315] [Server] 'user' entry 'mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.722702Z 10 [Warning] [MY-010315] [Server] 'user' entry 'mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.722724Z 10 [Warning] [MY-010315] [Server] 'user' entry 'root@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.722783Z 10 [Warning] [MY-010323] [Server] 'db' entry 'performance_schema mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.722800Z 10 [Warning] [MY-010323] [Server] 'db' entry 'sys mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.722821Z 10 [Warning] [MY-010311] [Server] 'proxies_priv' entry '@ root@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.723235Z 10 [Warning] [MY-010330] [Server] 'tables_priv' entry 'user mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.723259Z 10 [Warning] [MY-010330] [Server] 'tables_priv' entry 'sys_config mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | mysql: [Warning] Using a password on the command line interface can be insecure. jackhammer-db | mysql: [Warning] Using a password on the command line interface can be insecure. jackhammer-db | 2018-04-30T01:51:30.757391Z 12 [Warning] [MY-010315] [Server] 'user' entry 'mysql.infoschema@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.757475Z 12 [Warning] [MY-010315] [Server] 'user' entry 'mysql.session@localhost' ignored in --skip-name-resolve mode. redis_1 | 1:C 30 Apr 01:50:57.073 # oO0OoO0OoO0Oo Redis is starting oO0OoO0OoO0Oo redis_1 | 1:C 30 Apr 01:50:57.074 # Redis version=4.0.9, bits=64, commit=00000000, modified=0, pid=1, just started redis_1 | 1:C 30 Apr 01:50:57.074 # Warning: no config file specified, using the default config. In order to specify a config file use redis-server /path/to/redis.conf redis_1 | 1:M 30 Apr 01:50:57.076 Running mode=standalone, port=6379. redis_1 | 1:M 30 Apr 01:50:57.076 # WARNING: The TCP backlog setting of 511 cannot be enforced because /proc/sys/net/core/somaxconn is set to the lower value of 128. redis_1 | 1:M 30 Apr 01:50:57.076 # Server initialized redis_1 | 1:M 30 Apr 01:50:57.076 # WARNING overcommit_memory is set to 0! Background save may fail under low memory condition. To fix this issue add 'vm.overcommit_memory = 1' to /etc/sysctl.conf and then reboot or run the command 'sysctl vm.overcommit_memory=1' for this to take effect. redis_1 | 1:M 30 Apr 01:50:57.076 # WARNING you have Transparent Huge Pages (THP) support enabled in your kernel. This will create latency and memory usage issues with Redis. To fix this issue run the command 'echo never > /sys/kernel/mm/transparent_hugepage/enabled' as root, and add it to your /etc/rc.local in order to retain the setting after a reboot. Redis must be restarted after THP is disabled. redis_1 | 1:M 30 Apr 01:50:57.076 Ready to accept connections redis_1 | 1:M 30 Apr 01:55:58.079 100 changes in 300 seconds. Saving... redis_1 | 1:M 30 Apr 01:55:58.101 Background saving started by pid 14 redis_1 | 14:C 30 Apr 01:55:58.114 DB saved on disk redis_1 | 14:C 30 Apr 01:55:58.117 RDB: 0 MB of memory used by copy-on-write redis_1 | 1:M 30 Apr 01:55:58.202 * Background saving terminated with success jackhammer-db | 2018-04-30T01:51:30.757501Z 12 [Warning] [MY-010315] [Server] 'user' entry 'mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.757522Z 12 [Warning] [MY-010315] [Server] 'user' entry 'root@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.757555Z 12 [Warning] [MY-010323] [Server] 'db' entry 'performance_schema mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.757572Z 12 [Warning] [MY-010323] [Server] 'db' entry 'sys mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.757595Z 12 [Warning] [MY-010311] [Server] 'proxies_priv' entry '@ root@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.757737Z 12 [Warning] [MY-010330] [Server] 'tables_priv' entry 'user mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:30.757759Z 12 [Warning] [MY-010330] [Server] 'tables_priv' entry 'sys_config mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | ERROR 1396 (HY000) at line 1: Operation CREATE USER failed for 'root'@'%' jackhammer-db | 2018-04-30T01:51:32.417506Z 0 [Warning] [MY-011070] [Server] 'Disabling symbolic links using --skip-symbolic-links (or equivalent) is the default. Consider not using this option as it' is deprecated and will be removed in a future release. jackhammer-db | 2018-04-30T01:51:32.417607Z 0 [System] [MY-010116] [Server] /usr/sbin/mysqld (mysqld 8.0.11) starting as process 1 jackhammer-db | mbind: Operation not permitted jackhammer-db | 2018-04-30T01:51:34.543827Z 0 [System] [MY-010229] [Server] Starting crash recovery... jackhammer-db | 2018-04-30T01:51:34.543944Z 0 [System] [MY-010232] [Server] Crash recovery finished. jackhammer-db | 2018-04-30T01:51:34.644471Z 0 [Warning] [MY-010068] [Server] CA certificate ca.pem is self signed. jackhammer-db | 2018-04-30T01:51:34.673920Z 0 [Warning] [MY-011810] [Server] Insecure configuration for --pid-file: Location '/var/run/mysqld' in the path is accessible to all OS users. Consider choosing a different directory. jackhammer-db | 2018-04-30T01:51:34.689320Z 0 [Warning] [MY-010315] [Server] 'user' entry 'mysql.infoschema@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:34.689515Z 0 [Warning] [MY-010315] [Server] 'user' entry 'mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:34.689544Z 0 [Warning] [MY-010315] [Server] 'user' entry 'mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:34.689565Z 0 [Warning] [MY-010315] [Server] 'user' entry 'root@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:34.689603Z 0 [Warning] [MY-010323] [Server] 'db' entry 'performance_schema mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:34.689620Z 0 [Warning] [MY-010323] [Server] 'db' entry 'sys mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:34.689642Z 0 [Warning] [MY-010311] [Server] 'proxies_priv' entry '@ root@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:34.693347Z 0 [Warning] [MY-010330] [Server] 'tables_priv' entry 'user mysql.session@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:34.693497Z 0 [Warning] [MY-010330] [Server] 'tables_priv' entry 'sys_config mysql.sys@localhost' ignored in --skip-name-resolve mode. jackhammer-db | 2018-04-30T01:51:34.700352Z 0 [System] [MY-010931] [Server] /usr/sbin/mysqld: ready for connections. Version: '8.0.11' socket: '/var/run/mysqld/mysqld.sock' port: 3306 MySQL Community Server - GPL. root@ubuntu:/home/test/jackhammer#

I'm running Ubuntu 17.10

I've attached the screen shot also.

jackhammer error

kmadhusudhan commented 6 years ago

@Dilshandila It seems one of your instances is not running. jackhammer depend on multiple Docker containers (ex Database, Redis ..) which runs independently. please make sure all instances are up and running.

you can check the status of each instance by running docker ps command.

Dilshandila commented 6 years ago

@KMadhuSudhan I ran the command you have me. here is the output:

root@ubuntu:/home/test/jackhammer# docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES ea97b219095e jackhammer_web "bash -c 'mkdir -p..." 11 hours ago Up 11 hours 0.0.0.0:5000->3000/tcp jackhammer_web_1 a037d1d55788 mysql "docker-entrypoint..." 11 hours ago Up 11 hours (unhealthy) 0.0.0.0:3306->3306/tcp jackhammer-db cd4d5ab269bb redis "docker-entrypoint..." 11 hours ago Up 11 hours 0.0.0.0:32768->6379/tcp jackhammer_redis_1 root@ubuntu:/home/test/jackhammer#

I removed the mysql container and image and reinstalled it, yet still gives the same error. Also i've disabled the mysql health check but didn't work either.

Jackhammer web logs-

root@ubuntu:/home/test/jackhammer# docker logs c51b296050ba Puma starting in single mode...

When i checked mysql logs i noticed ERROR 1396 (HY000) at line 1: Operation CREATE USER failed for 'root'@'%'

can this be an issue? Pls. advice.

kmadhusudhan commented 6 years ago

@Dilshandila Yes , creating user table is must for running jackhammer. please run db migration manually by login to web docker . Steps to Run migration: 1) docker exec -it jackhammer_web_1 bash 2)RAIL_ENV=production bundle exec rake db:drop 3)RAIL_ENV=production bundle exec rake db:create 4)RAIL_ENV=production bundle exec rake db:migrate 5)RAIL_ENV=production bundle exec rake db:seed