Ekultek / Ekultek/Zeus-Scanner

Unhandled exception (1b33d2e0)

Open
#751 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
999
Forks
245
PR merge metrics
No merged PRs in 30d

Description

Zeus version:
`1.5.2.21b875`

Firefox version:
`failed to start`

Geckodriver version:
`geckodriver-v0.18.0-linux64.tar.gzgeckodriver-v0.19.0-linux64.tar.gz`

Error info:
```Traceback (most recent call last):
File "zeus.py", line 199, in
__run_attacks_main()
File "zeus.py", line 146, in __run_attacks_main
threads=opt.amountOfThreads, force_ssl=opt.forceSSL
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/core/settings.py", line 994, in run_attacks
opts=create_arguments(sqlmap=True, sqlmap_args=sqlmap_arguments, conf=conf_file), auto_start=auto_start)
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/attacks/sqlmap_scan/__init__.py", line 154, in sqlmap_scan_main
is_started = lib.core.settings.search_for_process("sqlmapapi.py")
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/core/settings.py", line 599, in search_for_process
all_process_names.add(" ".join(process.cmdline()).strip())
File "/usr/local/lib/python2.7/site-packages/psutil/__init__.py", line 663, in cmdline
return self._proc.cmdline()
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 342, in wrapper
return fun(self, *args, **kwargs)
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 426, in cmdline
return cext.proc_cmdline(self.pid)
File "/usr/local/Cellar/python@2/2.7.16/Frameworks/Python.framework/Versions/2.7/lib/python2.7/contextlib.py", line 35, in __exit__
self.gen.throw(type, value, traceback)
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 375, in catch_zombie
raise AccessDenied(proc.pid, proc._name)
AccessDenied: psutil.AccessDenied (pid=65976)
```

Running details:
`Darwin-18.5.0-x86_64-i386-64bit`

Commands used:
`zeus.py -d inurl:php?id= site:.in -s`

Log file info:
```2019-05-19 21:39:13,321;zeus-log;WARNING;will not parse webcache URL's (to parse webcache pass -W)
2019-05-19 21:39:13,321;zeus-log;WARNING;only pulling URLs with GET(query) parameters (to pull all URL's pass -E)
2019-05-19 21:39:13,321;zeus-log;INFO;attempting to gather query URL
2019-05-19 21:39:13,323;zeus-log;INFO;setting up virtual display to hide the browser
2019-05-19 21:39:13,470;zeus-log;INFO;setting the browser
2019-05-19 21:39:17,624;zeus-log;INFO;browser will open shortly
2019-05-19 21:39:20,165;zeus-log;INFO;searching search engine using query 'inurl:php?id='
2019-05-19 21:39:23,241;zeus-log;INFO;closing the browser and continuing process..
2019-05-19 21:39:23,786;zeus-log;INFO;URL successfully gathered, searching for GET parameters
2019-05-19 21:39:23,787;zeus-log;INFO;no proxy configuration detected
2019-05-19 21:39:25,097;zeus-log;INFO;adjusting user-agent header to default user agent 'Zeus-Scanner/1.5.2.21b875 (Language=Python/2.7.16; Platform=Darwin)'
2019-05-19 21:39:25,125;zeus-log;INFO;successfully wrote found items to '/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/log/url-log/url-log-2.log'
2019-05-19 21:39:25,125;zeus-log;INFO;found a total of 19 URLs with given query 'inurl:php?id='
2019-05-19 21:39:25,126;zeus-log;INFO;currently running on 'http://www.interaliaproject.com/news.php?id=115' (target #1)
2019-05-19 21:39:25,126;zeus-log;INFO;fetching target meta-data
2019-05-19 21:39:26,514;zeus-log;INFO;detecting target charset
2019-05-19 21:39:26,515;zeus-log;INFO;target charset appears to be 'iso-8859-1'
2019-05-19 21:39:26,541;zeus-log;INFO;attempting to get request headers for 'http://www.interaliaproject.com/news.php?id=115'
2019-05-19 21:39:26,543;zeus-log;INFO;writing found headers to log file
2019-05-19 21:39:26,546;zeus-log;INFO;successfully wrote found items to '/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/log/header-log/www.interaliaproject.com-headers.json'
2019-05-19 21:39:32,903;zeus-log;INFO;creating arguments for sqlmap
2019-05-19 21:39:32,907;zeus-log;ERROR;ran into exception 'psutil.AccessDenied (pid=65976)' exception has been saved to log file
Traceback (most recent call last):
File "zeus.py", line 199, in
__run_attacks_main()
File "zeus.py", line 146, in __run_attacks_main
threads=opt.amountOfThreads, force_ssl=opt.forceSSL
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/core/settings.py", line 994, in run_attacks
opts=create_arguments(sqlmap=True, sqlmap_args=sqlmap_arguments, conf=conf_file), auto_start=auto_start)
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/attacks/sqlmap_scan/__init__.py", line 154, in sqlmap_scan_main
is_started = lib.core.settings.search_for_process("sqlmapapi.py")
File "/Users/mosespaul/Desktop/Coding/Hackin/Zeus-Scanner/lib/core/settings.py", line 599, in search_for_process
all_process_names.add(" ".join(process.cmdline()).strip())
File "/usr/local/lib/python2.7/site-packages/psutil/__init__.py", line 663, in cmdline
return self._proc.cmdline()
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 342, in wrapper
return fun(self, *args, **kwargs)
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 426, in cmdline
return cext.proc_cmdline(self.pid)
File "/usr/local/Cellar/python@2/2.7.16/Frameworks/Python.framework/Versions/2.7/lib/python2.7/contextlib.py", line 35, in __exit__
self.gen.throw(type, value, traceback)
File "/usr/local/lib/python2.7/site-packages/psutil/_psosx.py", line 375, in catch_zombie
raise AccessDenied(proc.pid, proc._name)
AccessDenied: psutil.AccessDenied (pid=65976)

2019-05-19 21:39:40,255;zeus-log;INFO;Zeus got an unexpected error and will automatically create an issue for this error, please wait
2019-05-19 21:39:40,256;zeus-log;INFO;getting authorization
2019-05-19 21:39:40,258;zeus-log;INFO;extracting traceback from log file
2019-05-19 21:39:40,259;zeus-log;INFO;attempting to get firefox browser version
2019-05-19 21:39:40,280;zeus-log;ERROR;failed to run firefox
```

Contributor guide

Open the contributing guide

Research direction

Start in lib/core/settings.py at search_for_process around line 599, then follow its call from lib/attacks/sqlmap_scan/__init__.py around line 154. Reproduce with `zeus.py -d inurl:php?id= site:.in -s` on the reported environment and inspect how psutil.AccessDenied is handled. Done means this process check no longer terminates the scan with the shown exception.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
cli, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.